Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File:                     L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier:          lj42kCkDpEUnS+bqgyuVQXhQuZCTxwX7E5URd29MUX4=
Subject key identifier:   6C:10:16:0B:E0:41:4B:80:02:F5:E9:4B:16:2E:03:C8:42:62:39:E5
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer:       /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial:       019750469598B835DA475B2E29CB0E7BDD9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 16:01:32 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:32 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:32 +0000
Files and hashes:         1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
                          2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: VUFDxZ01nKsE7f9kBi+0X8cX/lw/DKIkFRcj5x9vF2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:95:98:b8:35:da:47:5b:2e:29:cb:0e:7b:dd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
        Validity
            Not Before: Jun  8 16:01:32 2025 GMT
            Not After : Jun  9 16:01:32 2025 GMT
        Subject: CN=6c10160be0414b8002f5e94b162e03c8426239e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:ad:bb:51:76:ef:f3:37:bd:1f:02:5d:8b:
                    d0:3e:0c:da:de:bb:be:02:a6:8b:b1:4f:88:6b:8d:
                    a0:df:ed:ed:a8:0d:5b:f5:1a:46:82:a0:7c:79:fd:
                    5c:94:22:6f:f0:0d:b6:4f:03:68:53:ac:a6:a7:20:
                    2b:6a:c2:ff:9c:24:1a:42:15:45:7a:49:4e:8c:d0:
                    81:2d:d4:d6:60:ba:20:7a:eb:81:23:53:8a:67:25:
                    4b:ce:3a:de:e8:0a:c1:3b:21:b2:43:fd:31:25:a2:
                    25:c7:81:e7:e3:16:97:fd:82:aa:79:d1:f9:c8:4b:
                    70:25:96:68:03:b0:ac:03:b1:22:dc:f6:cf:a1:82:
                    56:9a:af:4c:b4:61:ec:1a:4b:10:81:ef:bf:b3:37:
                    e8:3d:ef:a1:ec:dd:b2:8b:8c:ce:53:fe:78:4d:07:
                    10:ba:af:23:bc:43:c8:43:18:d3:82:4a:0a:dd:10:
                    9b:56:38:f3:a0:8d:d5:d7:39:75:e6:c8:af:7b:d4:
                    a9:69:70:3c:22:d8:ee:2f:0b:ec:12:0e:0a:33:1f:
                    9d:bf:7b:08:fd:29:d0:4b:12:d3:0f:05:ab:e2:12:
                    df:a9:a1:82:c9:e4:22:c4:33:05:df:de:15:07:ff:
                    34:f8:e8:20:41:74:eb:2c:d2:21:71:19:69:3e:80:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:10:16:0B:E0:41:4B:80:02:F5:E9:4B:16:2E:03:C8:42:62:39:E5
            X509v3 Authority Key Identifier:
                keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:bc:c3:4d:d6:52:1c:ca:3b:04:5f:e7:de:16:58:24:b9:
         be:88:24:9d:1c:d8:62:e6:60:4a:43:e3:8b:57:81:ba:65:25:
         ef:de:c2:ca:f0:d3:b0:ac:f6:22:29:1f:b9:47:82:76:c7:bc:
         38:aa:a7:78:8c:ac:42:40:f4:4f:14:05:6d:bc:42:38:78:0e:
         09:9b:7c:81:f9:ff:49:79:6e:d2:06:7b:b2:22:74:69:36:b3:
         b9:fd:aa:56:05:be:83:33:73:1d:9a:19:fe:6d:29:7f:9d:ea:
         e1:13:3d:21:c1:a8:e3:f4:18:19:e1:24:a7:68:b4:77:1e:bd:
         e8:4a:14:12:50:d7:75:0d:66:c1:40:97:4c:f2:d8:b4:55:ee:
         0c:ef:46:c9:1a:f5:ec:26:9e:73:e0:93:dd:bb:41:ec:64:ad:
         9b:fd:56:f9:71:fe:be:9d:66:f4:a5:f4:79:b7:78:05:21:07:
         b9:cb:91:bb:f2:25:9c:e6:0c:df:0a:b7:3c:71:91:4d:c4:a1:
         f5:31:e3:31:ec:0e:19:21:a8:b2:34:0a:e1:23:46:6b:18:23:
         1d:8b:6a:25:f3:df:3a:1f:bc:3f:22:86:1b:60:dd:f9:3d:89:
         85:fb:cd:9d:8b:8e:0c:3c:36:4f:7a:f3:99:7f:b8:70:f8:98:
         4a:7e:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:03 2025 by rpki-client