Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File:                     bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier:          GGrU/kRhG1P9sjEcbIrqfNYbWCIHsZ2IjJYXl2JgaWw=
Subject key identifier:   3F:AB:F5:97:4B:7B:57:C7:1C:20:78:37:70:F2:30:DA:DB:2E:2D:6E
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer:       /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial:       019768F31E7545F3059EFBA87F7F87B1CD69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number:          1592
Signing time:             Fri 13 Jun 2025 11:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:52 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:52 +0000
Files and hashes:         1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: eD8ArKFBdHUAcOxkSj1sdewKUnr1ncTA6k9r1HBT9IY=)
                          2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f3:1e:75:45:f3:05:9e:fb:a8:7f:7f:87:b1:cd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
        Validity
            Not Before: Jun 13 11:00:52 2025 GMT
            Not After : Jun 14 11:00:52 2025 GMT
        Subject: CN=3fabf5974b7b57c71c20783770f230dadb2e2d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:34:6f:39:b3:79:88:6d:34:b0:4a:a1:89:
                    37:a0:a8:1e:4b:33:fc:b8:4d:cd:4f:ad:d5:e8:13:
                    6c:97:2a:1c:92:7c:7b:52:fb:e7:8d:ee:ec:9e:9a:
                    d6:b5:54:69:e6:e9:df:13:dc:41:98:8a:1d:a6:bb:
                    0f:e5:35:d4:10:21:11:59:51:5e:c0:c4:64:ba:b3:
                    17:08:8d:bd:a7:69:96:5b:de:32:ee:22:15:c0:07:
                    06:fc:86:87:16:ae:b4:e1:dc:be:31:e6:28:2c:ec:
                    1c:35:85:21:4e:d8:d6:67:7c:c8:08:06:d8:2b:9c:
                    a1:72:17:cd:ab:c2:b1:5d:d4:5c:ba:a4:91:af:c1:
                    55:30:52:fc:60:e7:eb:6f:bf:32:ec:35:ab:d5:7e:
                    c7:d8:68:59:ba:61:c0:de:dc:d1:dc:cf:f0:9f:02:
                    b7:a5:f6:87:6c:73:02:4a:34:3e:04:73:06:6f:71:
                    68:77:b4:80:2e:be:a2:fa:58:2d:c0:e8:2b:e7:dc:
                    02:52:39:3c:83:db:26:71:d8:35:e9:cd:70:65:ac:
                    f1:2c:a0:d6:dc:b7:b2:83:93:94:af:45:bb:aa:c8:
                    ce:b0:65:90:0b:3a:e5:32:dc:30:55:c7:c1:aa:d3:
                    1d:ee:c2:d6:2c:cb:9b:48:a5:56:23:c7:43:74:c8:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AB:F5:97:4B:7B:57:C7:1C:20:78:37:70:F2:30:DA:DB:2E:2D:6E
            X509v3 Authority Key Identifier:
                keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a7:4c:73:1d:7d:76:16:a2:3a:b9:ca:dd:d3:ad:4d:8d:ec:
         54:49:df:28:e2:8f:22:66:13:98:0a:ce:34:f8:21:a6:4f:a2:
         6c:a8:e6:bb:1a:25:e6:19:d5:8c:c9:93:e3:d1:9f:89:9c:6a:
         3c:36:3f:81:98:af:1d:25:df:f7:c5:47:aa:f2:a0:72:65:45:
         3d:8b:65:59:b5:c2:77:9b:30:44:97:ea:b3:cd:aa:ef:77:de:
         96:ac:97:32:ab:f3:0d:7c:1d:22:99:4d:ff:38:ef:83:be:c4:
         b3:8e:f8:b7:73:bb:fe:28:bf:41:a8:ff:89:62:e5:03:5b:6d:
         4a:56:e9:af:96:66:25:1e:7e:88:a8:39:fa:9f:ea:2b:6d:0b:
         63:26:9d:99:60:da:a6:ad:8f:6b:13:41:86:b1:db:37:47:8f:
         19:56:e8:9b:42:48:7a:4e:69:e2:65:bf:87:2e:e9:7f:b4:31:
         37:01:1d:87:1a:1d:a6:93:30:75:46:59:bb:07:99:bb:0c:83:
         71:59:a4:ac:8c:c2:6d:39:92:22:d7:f6:a3:12:b0:75:8a:db:
         41:c5:9c:cf:2c:79:d8:fc:b1:5b:79:f5:e0:eb:a3:68:1a:65:
         8a:28:50:c8:ba:89:75:55:63:e6:12:28:8a:42:27:ee:7c:ba:
         e2:a3:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:53 2025 by rpki-client