Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File:                     ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier:          oNETkKq5X/PP+lYtPjEOhJlNczEUPOMF8pB5qVT380M=
Subject key identifier:   EA:3A:2E:D4:4E:A0:8B:B0:3D:62:3C:0C:9B:CC:61:B7:C2:00:F9:AD
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer:       /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial:       0197507CD32F2C0D0760D3560572F845654F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number:          1511
Signing time:             Sun 08 Jun 2025 17:00:47 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:47 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:47 +0000
Files and hashes:         1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: MD4QJABgRAWQmDk1WC434zd4lWSU5Dym5bGD0RCNtl8=)
                          2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:d3:2f:2c:0d:07:60:d3:56:05:72:f8:45:65:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
        Validity
            Not Before: Jun  8 17:00:47 2025 GMT
            Not After : Jun  9 17:00:47 2025 GMT
        Subject: CN=ea3a2ed44ea08bb03d623c0c9bcc61b7c200f9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:69:a7:62:2a:26:3c:ad:a7:e9:ed:82:07:
                    13:a3:79:ca:be:94:52:3f:c4:3d:01:ce:0e:19:b5:
                    da:92:9b:11:83:7a:2f:10:63:59:19:62:79:9f:f4:
                    05:35:07:0b:0e:ad:9b:38:82:54:ea:0d:ca:a9:df:
                    b2:ff:f7:0a:47:10:34:09:5d:c7:c6:0d:21:8f:50:
                    c6:6b:97:a1:3a:9c:e5:fb:fd:c7:24:01:0a:0f:e1:
                    b8:3a:cd:e6:d6:cf:3f:b8:14:5e:81:9f:57:a0:5f:
                    ee:f3:e7:67:11:03:06:a3:ca:37:0d:f0:32:e6:cc:
                    4c:8f:34:d8:c0:3e:df:e0:32:0f:d0:fe:7b:9f:1c:
                    61:66:bd:23:e8:89:95:83:55:00:d3:b5:09:d2:2f:
                    d3:50:21:7f:cc:51:26:2a:ca:e5:57:e9:eb:9f:4c:
                    3f:6b:6d:0a:a5:60:f8:b8:0f:22:33:21:ec:69:11:
                    c9:bb:ee:b4:87:da:5a:37:44:de:b2:82:1e:f5:2a:
                    29:04:c1:54:0f:b0:41:2a:d4:17:5d:6e:bb:eb:96:
                    e1:93:d4:cd:6d:06:87:12:cd:5e:a9:5e:2a:a6:23:
                    1e:ec:75:0d:08:cf:37:b9:a7:37:b7:50:c7:85:96:
                    24:a2:17:d5:19:4c:75:1d:61:a5:c5:fe:1f:cc:5b:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3A:2E:D4:4E:A0:8B:B0:3D:62:3C:0C:9B:CC:61:B7:C2:00:F9:AD
            X509v3 Authority Key Identifier:
                keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:30:da:e3:65:9c:76:1a:f5:b3:85:aa:b1:3c:14:95:f1:a8:
         d0:6b:c7:08:37:df:86:92:ce:fc:40:91:41:2d:d8:78:12:6a:
         bc:2e:12:18:5f:c7:55:e1:8f:86:fc:38:7b:4f:4f:0f:54:97:
         fe:36:6e:5a:39:0e:e4:4b:b4:da:58:6c:6e:ad:a8:10:d0:1c:
         9f:87:75:01:4b:5e:97:bc:e1:de:6f:1e:79:f0:a4:b0:8f:9f:
         6f:ac:eb:94:28:7b:7b:e0:86:d7:21:e2:4b:cc:50:78:e5:52:
         0d:b8:7c:46:ef:10:7b:dd:84:d5:bb:04:9b:b3:61:5a:65:78:
         81:28:58:9a:9b:72:ba:1f:60:7e:a9:79:53:08:24:62:09:58:
         34:4e:f1:11:6e:b0:de:72:db:38:d6:8e:9f:9f:04:21:39:ea:
         7f:d9:78:9f:80:50:72:94:da:8f:2e:06:07:e3:fc:98:8e:24:
         e3:74:67:cd:ca:e6:97:16:33:76:84:45:bf:a2:2b:b1:63:0d:
         21:79:f5:71:6f:34:f6:f6:1a:59:2e:92:9e:c4:5f:35:7f:d3:
         4c:52:7c:c1:4b:3b:7d:3c:1f:d2:cf:c8:07:0e:e3:16:1e:4d:
         bf:99:07:9a:de:06:93:33:7a:79:89:b8:c3:f3:61:7f:c1:84:
         44:0d:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:50 2025 by rpki-client