Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
File:                     L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json)
Hash identifier:          QX2OPZKUD40CAJekxsBqWmdOvK47ek4rHS+R33zHhkE=
Subject key identifier:   DF:DB:27:C8:D9:67:A2:BC:58:C8:E5:A9:50:53:03:54:F8:5B:C3:62
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Certificate issuer:       /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial:       019774F6FB8B46D41B70F49EC8F3AAE16B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 19:00:32 +0000
Manifest this update:     Sun 15 Jun 2025 19:00:32 +0000
Manifest next update:     Mon 16 Jun 2025 19:00:32 +0000
Files and hashes:         1: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: 0K/SwcM9Gf4Q4h8hNptlv8vOxfFdwJdfD4vf9WKK81s=)
                          2: yz6_439OmIgbPGI_9SMl-hcB7SM.roa (hash: b+VVST8s13jCLV/LOSpCV8hcczaiQ8urh6lhnrg3Cso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f6:fb:8b:46:d4:1b:70:f4:9e:c8:f3:aa:e1:6b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
        Validity
            Not Before: Jun 15 19:00:32 2025 GMT
            Not After : Jun 16 19:00:32 2025 GMT
        Subject: CN=dfdb27c8d967a2bc58c8e5a950530354f85bc362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:7d:3c:b3:6d:1c:d1:d9:e1:1b:11:90:22:
                    16:f4:f0:86:46:ce:05:cb:c6:d8:10:5b:d8:65:db:
                    84:2c:6e:8d:62:28:1c:51:0b:c6:a1:96:6c:f2:2c:
                    c5:6f:be:d6:32:48:78:ca:4b:c0:84:81:9e:aa:e9:
                    73:1a:13:ff:18:a0:0b:87:6c:68:6e:ca:c5:dc:d1:
                    05:79:a3:fc:76:10:2d:b2:3a:9e:91:44:53:87:29:
                    a8:e9:1c:38:7f:c7:2c:41:db:1e:55:98:bd:7d:6c:
                    80:27:dd:dd:64:68:2a:c1:dc:e4:b3:96:1e:20:dd:
                    e9:0a:c8:82:fd:21:a0:1b:4e:e9:23:ec:5c:ce:dc:
                    ed:4e:76:f3:0e:fc:f6:11:72:17:98:e8:02:1d:0f:
                    86:07:65:4f:bf:56:98:71:f4:77:8a:85:55:3b:6b:
                    dd:ba:49:38:f0:ac:49:53:db:4e:55:24:49:4b:2a:
                    ac:f0:c3:16:72:dc:7e:3e:1e:d8:f4:97:b8:4f:55:
                    01:13:c6:57:05:a2:8a:ad:3f:fb:93:09:44:58:39:
                    79:2f:ae:61:81:b5:61:c4:df:2e:40:d1:da:a9:35:
                    ae:a0:87:40:94:58:9b:cc:a8:65:c1:d1:0b:d2:46:
                    e1:68:90:9b:aa:64:ba:9a:30:3d:f6:e8:76:c4:d0:
                    4d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DB:27:C8:D9:67:A2:BC:58:C8:E5:A9:50:53:03:54:F8:5B:C3:62
            X509v3 Authority Key Identifier:
                keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:49:53:76:1f:a4:d9:5c:d2:67:e9:3e:16:f2:80:50:69:fe:
         fb:b3:5c:57:20:f7:9c:b5:4c:e1:88:0c:ee:bd:09:60:90:e7:
         a6:c7:62:5b:98:6b:42:55:92:e2:b6:85:e6:c1:67:f8:12:4d:
         c4:26:ea:d0:1e:51:eb:c8:a8:15:be:b5:01:5d:69:7c:41:24:
         fe:a2:4b:bd:05:66:78:af:39:cd:7d:9c:17:02:d9:4e:62:77:
         04:b9:9a:67:64:c7:4b:75:60:64:85:17:a5:e4:d8:78:8b:48:
         c9:22:d6:c2:48:00:31:6b:20:e3:1e:d3:e8:54:b3:2d:60:e2:
         ee:6c:d2:d5:69:df:21:7d:f7:6d:42:db:c6:4a:0f:ba:dd:be:
         9b:a2:ac:ea:c7:dd:e7:54:7b:32:d3:21:9a:86:09:f4:7b:d3:
         6d:21:f3:d6:0e:57:b4:23:56:ad:a6:fd:bd:fa:04:03:aa:9d:
         90:bd:a2:60:7c:39:8f:ba:2b:8f:17:04:b0:ee:f1:53:d7:da:
         b2:37:a6:71:2d:b3:de:ef:c3:dc:e8:b9:be:02:ca:f2:3f:1f:
         40:4b:29:f4:2d:57:10:4d:5b:ec:98:fd:df:2e:dd:00:67:20:
         e8:5c:24:a5:fb:57:37:3b:6c:db:fd:55:32:22:d5:e5:4f:66:
         5a:63:88:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:28:16 2025 by rpki-client