Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File:                     1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier:          7USmiCsS5M4LrE40Bhb32D5vO4wNco1i2yAXUnkFAhs=
Subject key identifier:   80:1E:39:3A:F7:2B:AA:8C:C1:2A:1E:BC:79:1D:BC:51:45:CF:84:48
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer:       /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial:       01976EBE5BC5915E5590081DECB4850F0B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 14:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:58 +0000
Files and hashes:         1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: aq7gjrmIy4rfTIz5bIm8F9hxAcI7eSQiOzryCjdvgiY=)
                          2: PmM7gRkW2CCZ-q9ed87lvQrRb_Q.roa (hash: Sitsq4SK118ZuU9nYMZ2z7lYeIq08gqG7O0LpN8OCrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:5b:c5:91:5e:55:90:08:1d:ec:b4:85:0f:0b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
        Validity
            Not Before: Jun 14 14:00:58 2025 GMT
            Not After : Jun 15 14:00:58 2025 GMT
        Subject: CN=801e393af72baa8cc12a1ebc791dbc5145cf8448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:87:7e:07:26:0f:ab:b5:03:bd:83:d8:15:
                    bf:8a:d2:70:a6:f1:93:15:e5:59:b0:8a:5e:02:9e:
                    bc:3b:89:37:ac:1f:bc:d0:cb:b1:74:55:75:32:8c:
                    88:53:a7:0d:c9:47:36:5f:65:37:d7:b0:93:82:e4:
                    fe:00:be:be:e8:e5:fe:27:5f:68:e7:a4:ae:68:19:
                    53:5f:7d:7b:31:48:1d:dc:45:23:4c:1a:00:54:2c:
                    f0:ef:38:f7:fa:c4:ee:95:b1:53:4b:73:00:49:c8:
                    62:28:32:b4:36:22:32:26:75:6a:91:4d:70:6c:8b:
                    61:8a:4d:08:43:49:2a:29:d8:ef:d4:f0:5d:a1:48:
                    2d:e5:29:14:27:37:68:49:a4:f1:30:35:0b:3a:47:
                    86:fe:e1:09:be:d5:04:8e:ba:bd:80:f2:a2:3e:07:
                    41:87:c9:75:65:19:26:92:94:65:de:5c:40:cb:f0:
                    bf:9f:ee:58:cc:da:75:e9:29:54:bf:e6:1b:9b:96:
                    f6:30:54:44:95:04:5c:d3:5c:7e:31:f2:b8:29:3f:
                    68:1c:6b:64:96:8a:e3:a8:3b:1b:38:8b:0c:de:e5:
                    40:4f:91:ec:6c:9a:e4:0f:d9:e1:e3:e3:c9:5d:ae:
                    55:e9:aa:b7:a3:97:be:fb:91:bc:c6:11:e3:e7:31:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:39:3A:F7:2B:AA:8C:C1:2A:1E:BC:79:1D:BC:51:45:CF:84:48
            X509v3 Authority Key Identifier:
                keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:26:ec:6e:c8:84:6c:be:d6:f2:81:d7:82:d4:88:8a:f0:6e:
         31:e1:ab:78:26:63:5d:1a:a9:98:2f:83:50:e3:b0:53:37:2e:
         b4:f2:7e:37:0e:38:67:0a:a6:e6:06:e9:f2:31:be:47:6a:93:
         5f:4c:ed:29:14:52:fc:0d:7d:0c:33:29:d6:6c:1e:26:27:7a:
         a8:db:43:7b:68:08:32:66:13:99:f3:0d:63:1f:f7:91:0f:d9:
         e5:89:84:66:0c:b1:fb:db:12:10:fe:ff:a9:95:14:d5:50:e7:
         20:8d:19:e4:4c:c4:e0:ec:41:fd:e1:00:2d:2c:88:30:ac:25:
         d5:59:92:78:cd:a6:7a:f3:52:f0:8a:b3:ce:04:24:81:65:e0:
         ee:31:8a:c1:4d:11:99:16:e2:64:f3:14:3d:8b:30:b9:1b:bb:
         8b:29:c2:83:db:33:5a:aa:97:e7:93:c6:dd:c4:2a:1f:04:bd:
         f6:7c:a7:cc:12:b5:ad:26:2a:e2:49:79:2c:24:66:94:23:23:
         cd:dc:b6:a0:46:a0:18:78:2f:e6:bb:d4:12:8c:90:79:85:f1:
         34:81:93:25:61:e1:bf:2b:32:a7:ab:61:b9:f2:35:fb:c2:09:
         10:d8:12:4c:ce:0c:c8:ca:8b:26:29:c0:79:cb:67:79:ea:73:
         35:e2:d8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:38:44 2025 by rpki-client