Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File:                     8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier:          jGaEl9mjlAuMtC48gaRFLL0vp0zejfM4WC3aUQe2J1w=
Subject key identifier:   D1:5E:12:A9:6B:2D:08:BA:09:76:E2:56:B2:2A:E0:6D:1D:27:29:C8
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer:       /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial:       01976EF5551B3BD204C00B9B4F6831080C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 15:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 15:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 15:01:01 +0000
Files and hashes:         1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: jwB+dZLbAhcHNFmjFOimVbFMMbF7l4YJkJFmDVI7IzA=)
                          2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:55:1b:3b:d2:04:c0:0b:9b:4f:68:31:08:0c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
        Validity
            Not Before: Jun 14 15:01:01 2025 GMT
            Not After : Jun 15 15:01:01 2025 GMT
        Subject: CN=d15e12a96b2d08ba0976e256b22ae06d1d2729c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c8:73:46:d8:c4:d0:25:a2:c7:78:dc:3a:76:
                    ae:54:11:1f:3c:ca:20:e0:54:50:24:b4:c1:6c:6c:
                    a6:d8:45:0a:9b:96:4b:78:54:34:b8:28:ec:8f:ef:
                    c2:8c:b6:3d:1d:e6:67:49:2f:08:e0:7d:8b:35:97:
                    c6:71:72:2c:86:27:15:2a:16:b4:15:fa:f0:c3:24:
                    ee:45:64:7c:25:0d:a4:60:d5:cd:b1:a3:af:82:eb:
                    6d:29:58:0a:99:cd:0b:23:c9:db:de:a7:e7:32:08:
                    c0:93:bd:8c:f2:c5:66:29:86:c6:fd:2b:69:a9:3a:
                    34:6e:73:2d:be:4c:17:6e:60:a3:62:ae:62:b1:04:
                    28:77:09:3d:63:c9:1c:e8:57:1a:6d:b2:e5:0b:04:
                    37:23:ec:c2:7d:8e:ee:9a:63:f9:38:44:7c:54:f1:
                    e6:18:2d:10:40:dd:18:2e:e3:72:ca:44:02:4a:04:
                    4c:29:94:ae:4e:73:0b:fd:6b:41:3a:b0:69:55:23:
                    8b:b0:a9:cd:19:e9:ee:8c:c1:8e:2f:87:50:f9:30:
                    c5:a9:eb:e4:9e:0e:e8:b4:ae:9d:b7:b6:fb:cd:24:
                    6a:3c:e1:72:6a:e8:bb:59:7d:a6:b5:df:05:6c:5a:
                    9e:af:c6:93:e2:ea:51:21:f9:68:fe:58:99:60:ce:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5E:12:A9:6B:2D:08:BA:09:76:E2:56:B2:2A:E0:6D:1D:27:29:C8
            X509v3 Authority Key Identifier:
                keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9b:8b:3a:f3:b7:91:7e:0e:85:42:96:b2:00:db:01:38:00:
         63:c9:a9:92:65:0f:36:6f:8f:2e:3d:68:98:43:ef:f5:51:1c:
         69:c0:d7:c0:7c:06:db:36:79:3c:d7:1b:4d:3d:79:62:24:40:
         88:1d:1e:b8:70:44:fe:8f:7a:0d:a8:03:ff:eb:6d:a9:61:2c:
         48:b4:47:ed:96:1f:f4:41:9b:98:a5:9f:db:10:bc:ac:90:43:
         33:67:a6:30:2e:70:09:92:68:b7:3c:e3:f8:72:ea:19:49:10:
         c0:fe:cd:a5:81:60:11:73:41:ae:8d:40:c6:f2:6f:45:80:ca:
         bd:03:17:0a:e8:15:c3:15:cf:92:e1:af:05:1b:03:27:4e:9d:
         91:81:fb:77:38:30:73:ff:ad:ef:a5:5d:71:e5:ae:75:a8:cc:
         db:36:81:7a:b2:2d:fb:08:33:5e:c1:ab:27:5c:f7:eb:28:aa:
         5e:b9:f9:be:0c:0a:3d:2b:14:99:d4:1d:93:02:49:25:13:2a:
         81:5d:56:93:14:21:fa:1d:2d:a3:f5:08:6d:51:f4:59:1c:a2:
         c9:d3:e7:2c:70:7b:58:1e:6d:31:fd:81:40:99:3d:d2:9a:f1:
         7c:b6:cb:73:7d:96:20:ad:bb:bf:01:fa:1b:91:26:24:57:42:
         e6:36:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:13 2025 by rpki-client