Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File:                     r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier:          Mc618fNYTEpzJ9lgIttUFTpTa3/eVgKMD83W74x6UFo=
Subject key identifier:   1F:82:3F:FB:E1:C3:85:FC:25:AE:1D:F9:E7:46:64:F5:2A:45:4D:04
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer:       /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial:       01977677B91434A20C5D249E4E520A048796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number:          13C8
Signing time:             Mon 16 Jun 2025 02:00:46 +0000
Manifest this update:     Mon 16 Jun 2025 02:00:46 +0000
Manifest next update:     Tue 17 Jun 2025 02:00:46 +0000
Files and hashes:         1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
                          2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: Gpax0HQezThzHnuWkyOtxzFfHC7qDuDrSmcePCaqVW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:77:b9:14:34:a2:0c:5d:24:9e:4e:52:0a:04:87:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
        Validity
            Not Before: Jun 16 02:00:46 2025 GMT
            Not After : Jun 17 02:00:46 2025 GMT
        Subject: CN=1f823ffbe1c385fc25ae1df9e74664f52a454d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:c2:1b:de:f8:6d:ac:90:0a:9e:05:63:ad:
                    65:7e:5e:31:59:63:4a:f3:47:89:1c:6d:1a:f7:b2:
                    97:29:55:df:82:b4:ab:2e:51:43:f7:05:fd:d0:69:
                    7c:45:c4:28:a2:83:9a:c5:91:f3:b4:97:51:70:3a:
                    2d:c6:52:e8:75:12:8b:a1:47:7c:6e:45:36:6e:10:
                    d4:e9:e3:ec:b0:74:b2:7c:fe:25:17:4c:9b:79:95:
                    24:b9:93:e3:07:69:ab:6a:75:cc:8b:ff:d4:e0:19:
                    d9:7c:55:36:30:95:1b:67:c4:6b:cd:e6:8d:de:04:
                    b2:25:07:54:a8:8f:a4:5c:2d:b1:79:e0:05:34:88:
                    a2:59:88:f4:46:ff:32:30:74:e8:90:d2:4d:aa:2d:
                    fa:5a:24:48:08:c2:26:30:2d:2c:68:81:1e:4e:64:
                    02:5a:26:be:22:33:a5:09:dc:4a:75:c4:04:3e:58:
                    06:f5:68:98:48:49:b9:dc:48:d8:a7:f0:9c:84:31:
                    e2:a0:5f:2c:4e:10:a7:6a:da:22:19:4e:7a:4d:2c:
                    43:be:6f:7d:d9:3a:3b:44:14:05:07:1b:af:b0:d7:
                    2a:71:b8:e5:1b:19:55:a5:af:92:07:ca:af:2a:9e:
                    11:f6:4b:5b:69:93:2c:dc:42:8c:f5:2f:3d:47:e7:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:3F:FB:E1:C3:85:FC:25:AE:1D:F9:E7:46:64:F5:2A:45:4D:04
            X509v3 Authority Key Identifier:
                keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:92:d8:4b:3d:25:82:04:03:19:d1:99:7d:ba:a0:3e:85:
         d6:8e:8a:ef:53:76:73:a3:1e:31:57:68:04:07:b0:1c:0d:e7:
         a9:93:84:bd:a8:42:e5:07:6b:a3:cb:3c:e8:aa:7d:29:fe:60:
         96:00:5f:dc:6f:22:11:0a:3f:04:a6:a0:29:2b:ff:4b:74:18:
         34:42:38:fe:b0:a2:f8:19:6c:f8:41:91:99:d3:c8:89:c9:15:
         aa:9f:9f:cf:a6:a6:41:7c:87:8f:dc:ba:d4:6a:d1:89:3b:c1:
         71:52:90:3e:61:cb:c0:c1:cc:8d:02:4e:79:43:4d:ff:07:26:
         46:18:ec:fb:b3:8f:35:1b:91:c0:7b:0f:8e:b9:ee:34:c8:80:
         77:9b:82:d1:66:24:3c:f7:ed:09:a0:6d:83:cc:d3:93:da:c1:
         1d:f2:e3:fe:e9:87:3c:3b:78:10:62:aa:84:8c:c1:af:18:78:
         3f:36:15:23:4b:c5:a6:7b:c2:c3:f1:00:a4:a7:c2:4d:b8:e1:
         8c:8e:44:1e:34:48:a7:c3:32:90:27:20:29:86:2b:55:fd:23:
         28:36:05:8a:c9:8a:33:3c:eb:71:a4:c0:ca:10:17:0b:1d:b2:
         8e:05:5a:8a:ba:70:e9:44:6e:99:88:7d:ed:00:25:8c:d6:13:
         6c:08:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:19:37 2025 by rpki-client