Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File:                     _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier:          XRelxK+v0FPM7B7PVYjnH70hu2QDQ7tXQkFQMD23GIQ=
Subject key identifier:   83:CD:E1:6E:C7:FC:6B:67:2D:0E:77:27:66:C1:68:27:94:D0:15:D5
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer:       /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial:       01978545B2B5C14F5D4F3DBCDF9E4EAE4205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number:          159A
Signing time:             Wed 18 Jun 2025 23:00:26 +0000
Manifest this update:     Wed 18 Jun 2025 23:00:26 +0000
Manifest next update:     Thu 19 Jun 2025 23:00:26 +0000
Files and hashes:         1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: O5aX24rAdrPZEfPp/4mlNCoRGA7MMUZyAtOdUeg/o20=)
                          2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:45:b2:b5:c1:4f:5d:4f:3d:bc:df:9e:4e:ae:42:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
        Validity
            Not Before: Jun 18 23:00:26 2025 GMT
            Not After : Jun 19 23:00:26 2025 GMT
        Subject: CN=83cde16ec7fc6b672d0e772766c1682794d015d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:e2:06:93:f6:73:7e:0a:d4:99:10:bf:52:
                    b3:62:8a:be:86:a3:97:ef:0c:c0:bb:7c:be:d8:1b:
                    8e:49:49:c4:55:a0:eb:3d:b0:ad:87:66:b5:9e:33:
                    06:85:ed:f2:d4:37:b1:d4:f1:07:90:80:4d:03:54:
                    f6:8e:29:a2:11:bc:93:e0:b5:8b:df:0a:92:39:86:
                    58:97:5d:df:d8:45:6f:35:b9:1d:27:a9:eb:af:fb:
                    bb:4e:0d:78:12:5f:93:29:90:35:f9:d3:8f:9e:f4:
                    69:19:7c:68:71:03:b7:a3:b6:bd:67:3d:bd:92:18:
                    1a:81:f6:35:77:73:b3:84:ba:c6:54:04:91:d4:20:
                    11:88:c6:97:e9:db:d7:a2:1c:de:f8:16:1e:3d:75:
                    47:61:d9:46:c9:d2:6d:57:e4:1e:48:44:97:b4:d0:
                    88:23:9c:a0:b7:5e:1b:85:bd:d1:08:67:e9:1b:9f:
                    db:4f:64:cc:85:08:93:92:e8:1b:e7:cb:91:4d:f2:
                    16:0c:71:56:45:85:70:c2:63:44:87:a9:53:ee:d1:
                    25:f1:02:45:72:94:97:9c:e3:ba:73:d0:e0:53:4f:
                    7a:66:9e:25:83:c6:13:13:dd:37:9c:7e:ae:0a:01:
                    05:70:5b:2d:11:30:ba:67:74:cb:09:e3:a0:e2:99:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CD:E1:6E:C7:FC:6B:67:2D:0E:77:27:66:C1:68:27:94:D0:15:D5
            X509v3 Authority Key Identifier:
                keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:89:f5:16:0e:67:dd:5f:45:83:54:43:e9:c9:35:df:00:69:
         5f:19:3b:05:f6:fb:d2:88:8d:31:8d:e1:1b:f7:3c:3e:ab:4d:
         0a:ae:56:cd:ca:cb:2f:26:f5:2a:7e:18:05:52:92:85:d9:39:
         88:6c:f6:8e:42:cd:75:77:52:3a:30:77:c0:b2:72:ff:52:f3:
         29:f3:98:31:cf:68:6e:b4:af:68:89:2a:99:d6:46:75:19:84:
         cf:c0:86:3a:65:b5:17:d5:46:b1:4d:5d:56:e0:a0:b3:41:96:
         b2:d5:b0:d6:13:60:e4:27:fe:7a:59:7a:3e:f1:c2:33:5f:09:
         95:56:60:ea:41:43:e4:e3:85:9f:ea:67:a6:d8:f5:fe:80:c2:
         52:f5:c0:f3:81:57:19:1b:44:3c:07:e0:23:2d:27:e7:94:d8:
         0f:11:4d:2f:1d:2b:51:d4:55:31:df:0b:9c:3d:60:59:61:e8:
         c4:c4:8f:65:79:8d:76:47:1b:ad:e6:29:23:bb:b8:2d:d1:b1:
         bd:68:21:9d:b7:b4:4a:bc:3c:3a:57:a0:2f:92:63:ee:d4:15:
         42:40:51:ea:ce:4c:a6:dd:ef:36:4e:fe:eb:d6:ba:bc:3f:fa:
         8b:27:c0:96:d6:f6:cd:1b:c9:0c:0e:6a:9b:bc:6f:ec:06:e9:
         79:2e:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:56:24 2025 by rpki-client