Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File:                     k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier:          YH2xJy8zrrha5qvzicpd1KGvcB0IfFXMkn3aPYKxIOA=
Subject key identifier:   12:0C:12:8F:82:66:B8:FC:7D:99:25:98:CC:2E:39:9D:BA:0D:81:A8
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer:       /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial:       01975121A301CD2A028856B0CC6E23E0C367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 20:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:48 +0000
Files and hashes:         1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: EqWb3ZayXXz07hoUKjCMZNvhnUarME1fA4w0lGYwxzA=)
                          2: yTJkU5c9_WyRyTlvE419PqU0IjM.roa (hash: ut55SdaCNgLg+kxFsJJtdQQgrsFKbAJo6+C/kBalZ60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:a3:01:cd:2a:02:88:56:b0:cc:6e:23:e0:c3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
        Validity
            Not Before: Jun  8 20:00:48 2025 GMT
            Not After : Jun  9 20:00:48 2025 GMT
        Subject: CN=120c128f8266b8fc7d992598cc2e399dba0d81a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:9b:70:7a:a3:5f:d2:8e:fb:c3:cd:38:6e:
                    3e:b0:f0:93:c6:6f:78:4a:78:6c:76:e6:bb:39:c1:
                    56:9f:53:41:c6:71:80:a7:8b:83:0a:72:9a:c1:7d:
                    38:9a:b9:36:9b:f0:df:00:69:ab:9a:3c:cb:3d:39:
                    7a:5c:67:90:17:eb:51:a7:16:92:ad:fd:d2:4b:b9:
                    07:73:86:ca:16:6e:18:f4:a2:4d:93:1f:2a:ae:13:
                    bf:94:01:ba:da:8f:32:d5:b7:1f:83:c5:01:eb:0a:
                    7b:84:76:14:80:47:1e:4f:87:4e:47:fb:11:91:93:
                    72:14:fb:f9:74:a0:12:73:1d:19:6d:2b:03:2c:6e:
                    9f:41:27:a1:57:9e:19:49:d0:7b:0f:19:c9:00:84:
                    e4:47:6d:0e:77:cb:6b:56:44:d4:a3:66:36:37:0d:
                    89:a2:f5:a0:c9:44:11:91:6a:02:35:fa:56:42:c0:
                    5d:e6:b3:dd:81:29:07:f1:be:7d:27:56:a5:fc:fe:
                    e9:77:2d:b0:85:7b:1d:15:fc:74:69:88:ef:82:92:
                    86:90:cf:b7:23:16:f4:e5:f7:b5:77:6e:0a:60:c9:
                    74:0c:fd:0b:21:46:c8:e8:6d:77:7e:65:f9:c5:af:
                    d3:b8:9f:cf:e5:ac:be:09:06:56:52:ac:81:6f:fc:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0C:12:8F:82:66:B8:FC:7D:99:25:98:CC:2E:39:9D:BA:0D:81:A8
            X509v3 Authority Key Identifier:
                keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5f:ee:84:fc:c5:a7:4a:f0:86:94:2f:7b:01:13:64:22:05:
         6a:a0:b3:fe:17:b3:30:80:71:ef:a4:bd:01:9f:04:de:b3:4e:
         0f:92:6c:af:c9:bc:27:9a:92:93:29:2f:b8:48:db:3f:cc:5f:
         e3:16:5b:71:f4:33:31:b7:a6:7f:f7:8e:e0:86:27:30:97:a1:
         df:3e:40:3a:ca:26:42:3f:5e:6a:76:f2:8a:96:63:1b:f6:3f:
         5d:c6:b0:69:09:89:6c:ff:bc:06:23:fd:e7:28:65:68:c8:bc:
         7b:ba:ec:2d:f6:24:a0:b8:5f:07:3f:a7:ff:5d:07:4d:9c:b9:
         d7:44:59:7b:a7:2f:14:a8:4a:6a:64:6d:79:8a:f0:15:49:5e:
         d0:71:77:87:fe:1e:1b:11:99:e4:bd:65:d7:55:2e:61:cf:6b:
         f6:b6:ec:2a:0d:5f:eb:f3:f4:5f:d0:31:57:a5:b3:93:bc:e2:
         f2:f3:68:4d:e6:47:71:7e:d9:9e:1d:03:95:2e:cc:b5:3c:2a:
         a9:a2:b1:e1:00:22:c4:c2:06:bb:1c:be:91:97:04:d8:e4:c5:
         66:92:26:98:51:4f:0d:76:a7:76:9b:77:05:e8:7e:01:dd:0e:
         98:d4:28:20:f9:d8:5a:2f:7a:23:97:54:18:81:3f:e6:23:ac:
         82:e0:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:52 2025 by rpki-client