Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File:                     1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier:          1Pt3CG8SjYE4qWvUjzFGh47K++Mj5G4rP7J/hKqb484=
Subject key identifier:   11:74:63:55:35:C3:89:A9:48:69:89:DA:79:AA:FB:FB:C3:49:25:BE
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer:       /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial:       019959B39B8EF9403F29AEB47397A4CFCE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number:          01D2
Signing time:             Wed 17 Sep 2025 22:02:46 +0000
Manifest this update:     Wed 17 Sep 2025 22:02:46 +0000
Manifest next update:     Thu 18 Sep 2025 22:02:46 +0000
Files and hashes:         1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: bsiIbJbI4LXsk6soQd440glN26fzw0IWUud3bQdxPPM=)
                          2: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (hash: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:59:b3:9b:8e:f9:40:3f:29:ae:b4:73:97:a4:cf:ce:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
        Validity
            Not Before: Sep 17 22:02:46 2025 GMT
            Not After : Sep 18 22:02:46 2025 GMT
        Subject: CN=1174635535c389a9486989da79aafbfbc34925be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:5d:d4:cd:3f:d7:da:03:1e:92:f3:6f:7e:
                    b1:05:99:0d:39:86:4c:df:30:49:85:51:58:f0:41:
                    b7:d9:f0:f2:c9:f6:de:39:bd:9d:93:da:9c:01:ab:
                    f6:4f:bc:fa:f0:5a:de:e0:55:8a:3a:e5:f1:c3:31:
                    f9:98:a2:3e:1e:63:10:25:5c:ae:39:fe:d6:1e:5d:
                    ce:44:2c:c0:1f:9d:0e:87:88:bb:26:a5:5c:1f:67:
                    a9:34:5f:90:e6:8b:7a:3e:98:40:45:8d:e4:e6:97:
                    bd:dc:b1:98:83:b4:11:20:80:e8:ed:f8:19:cb:81:
                    95:41:9d:ee:49:11:72:e1:a1:54:57:3e:43:a6:24:
                    7c:43:7e:1b:af:1f:22:68:e2:9e:31:d1:35:d1:bc:
                    28:68:c6:61:66:30:76:fb:b5:39:c8:d4:4b:9e:a0:
                    f7:d1:08:44:88:d5:6d:0d:7d:05:36:fc:b1:eb:96:
                    fb:ac:7d:0e:43:72:7b:4b:96:47:ed:a1:43:e8:a1:
                    b3:72:98:14:25:7c:34:af:3d:cf:9c:f9:b9:1d:3e:
                    ea:9e:b7:fb:11:7b:14:eb:5f:22:b9:38:1b:14:95:
                    c8:59:d3:6a:10:2d:f1:5c:7a:1f:da:87:41:23:8c:
                    d7:45:ff:b6:70:e8:06:8a:57:3a:65:d5:9c:09:91:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:74:63:55:35:C3:89:A9:48:69:89:DA:79:AA:FB:FB:C3:49:25:BE
            X509v3 Authority Key Identifier:
                keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:a4:e8:82:00:88:7e:ef:45:b3:3c:f7:9e:8d:96:31:a4:
         cb:7e:c5:e6:19:a2:5e:5b:c6:96:05:17:10:99:b9:d5:c4:d3:
         49:cc:ab:d3:46:02:bb:c7:80:2e:ad:2a:cf:95:1a:68:33:00:
         99:05:80:31:23:26:c4:d1:fe:1f:af:05:91:0a:0c:10:47:e2:
         4a:98:d4:5d:fc:db:28:43:f4:69:f8:a6:b5:85:f1:f2:bf:90:
         c9:5d:25:c1:23:2a:bd:cb:9c:54:e1:cc:92:3b:b0:26:d1:63:
         38:cf:45:17:24:ca:4e:7b:a7:a2:75:15:a4:bf:c0:14:ca:7d:
         09:1a:64:65:fd:78:75:63:da:3c:af:b4:c6:e9:6c:f5:f4:18:
         36:af:ba:a7:81:5f:52:20:d1:5a:8e:1d:d6:98:df:f1:3f:eb:
         6d:e9:ff:ad:a0:fa:27:2f:99:6b:1c:7b:74:22:06:a2:f8:f2:
         c2:20:ad:a4:66:aa:20:04:1a:ac:ea:cd:90:a3:59:e8:97:e2:
         f3:5a:f5:17:16:99:e8:b1:4e:12:8c:6a:d5:a3:5f:7b:eb:60:
         9c:1f:c0:dd:4f:dc:5d:95:ae:bd:af:fb:1b:95:60:0f:d6:d2:
         d6:9d:f0:a0:d1:3f:f9:17:58:3f:e1:fd:9e:9a:82:17:63:69:
         cc:17:a0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:08:14 2025 by rpki-client