Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File:                     1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier:          q1hJtI1pLWFpCvRQejuN9kPjbYBhl18dbtUkW0swQFg=
Subject key identifier:   8D:6F:F1:8A:AB:63:3E:F7:90:DF:F5:16:C9:7C:7F:9B:38:C6:F1:1F
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer:       /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial:       01977187F0B70C2DD889BC30CBB2AEF14042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number:          04C1
Signing time:             Sun 15 Jun 2025 03:00:23 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:23 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:23 +0000
Files and hashes:         1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: Y3X2TWi5ZrRGflF/t1PUyXTKrkFiTwRGub5+zzutvy4=)
                          2: lkUV_pQvaLsSaoJOegWniJF6RQo.roa (hash: i9n/5GhzO6//QgpiyuPewqwCFXVYirWQt6MCRZhl13U=)
                          3: x_9Ds4w921G-S6uMB3BqKl4lwk4.roa (hash: 4uIRZVtStLzfbHbkUvgOoPNPKk9YaTAL+flcnzSJknE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:87:f0:b7:0c:2d:d8:89:bc:30:cb:b2:ae:f1:40:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
        Validity
            Not Before: Jun 15 03:00:23 2025 GMT
            Not After : Jun 16 03:00:23 2025 GMT
        Subject: CN=8d6ff18aab633ef790dff516c97c7f9b38c6f11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:76:c1:ee:25:8c:f9:0b:d9:4b:3a:4d:25:
                    08:d8:40:4b:cb:7a:7a:44:de:89:29:96:f3:19:cf:
                    65:44:88:f4:33:28:0a:fd:dd:be:91:58:64:bf:24:
                    71:b5:f8:f0:3a:d7:0d:03:d8:84:20:e5:08:46:a6:
                    0e:66:90:d9:40:3f:4e:19:bd:0b:cf:d9:59:ae:bd:
                    bf:ff:22:0d:84:f8:9d:5d:72:2b:01:3e:ea:a7:3b:
                    e4:17:18:83:16:59:e5:02:34:47:28:89:e8:34:54:
                    01:ca:df:5b:56:80:be:24:72:22:fe:8c:17:17:e9:
                    98:ea:84:99:e6:99:4d:1c:a8:e0:e3:ef:e9:7a:0e:
                    c5:f0:e9:e7:9c:ff:d7:dd:ac:b7:77:8c:81:af:05:
                    76:41:a1:12:86:c7:b3:c1:5b:ff:60:3e:dc:bd:c4:
                    ed:c9:51:ed:42:0d:56:30:2a:ba:7f:05:be:d3:2e:
                    84:54:c8:3b:2e:d7:4d:74:6a:30:e4:5c:5e:2d:a4:
                    4f:62:21:ef:f7:e0:ca:19:ef:49:1f:92:ee:56:5e:
                    fa:53:2b:9b:80:c3:dd:a4:9d:fd:55:f8:b7:5c:a0:
                    97:f2:9e:f3:f6:17:3b:4a:45:ed:cb:17:0d:d8:4d:
                    4a:72:74:e8:f1:29:1f:c4:6d:7d:a4:f9:29:22:7a:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6F:F1:8A:AB:63:3E:F7:90:DF:F5:16:C9:7C:7F:9B:38:C6:F1:1F
            X509v3 Authority Key Identifier:
                keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:78:ea:0c:23:0c:21:0c:07:56:f8:76:01:df:df:92:dc:
         a5:5f:f3:5c:32:62:0a:39:33:dd:86:a3:1c:73:d9:4d:dd:bb:
         47:71:12:8d:55:71:f1:29:88:a6:1c:66:b9:f9:ab:a7:3a:5d:
         71:bb:4e:3b:8f:3b:9e:7b:c2:fb:28:d2:84:48:e6:42:fa:b1:
         cf:0e:1a:8b:db:5a:6d:c0:5d:66:08:40:01:4c:45:c3:38:f9:
         0b:c8:11:7f:18:d2:5f:fb:d8:53:43:85:fe:3e:db:ea:4c:09:
         32:2d:af:4e:09:6a:c9:e8:fc:90:63:8c:cf:3e:65:0b:3b:12:
         14:ef:7c:c7:5d:5e:65:5f:ac:42:e0:48:f6:20:2c:eb:2b:a4:
         db:d0:7f:04:4b:7f:36:6f:6b:71:28:f9:1c:c4:a2:8d:dc:41:
         0d:aa:cc:6f:bd:db:5b:79:68:e3:ca:0d:91:61:51:ca:b3:88:
         96:20:6f:5d:19:25:ba:95:99:37:42:43:fc:d5:9c:b7:9d:df:
         58:83:b1:b2:e8:bc:86:5b:0b:12:8c:c1:5e:7a:a5:1f:fa:99:
         db:81:f7:a6:89:39:90:ff:7b:26:24:0e:c7:94:ad:1c:fd:89:
         cd:96:2d:92:85:07:91:de:e3:18:25:f4:14:aa:a2:30:09:96:
         34:80:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:56:30 2025 by rpki-client