Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File:                     kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier:          vhnR615BVJ0Y3SnDW2DFWmmhrtTCBitEhkJTMrCXasw=
Subject key identifier:   19:A4:12:2F:84:CE:E6:08:E2:6A:07:8A:01:71:97:24:2E:4B:44:BB
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer:       /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial:       01974742A06330984A52B82D58D577E56AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number:          1576
Signing time:             Fri 06 Jun 2025 22:00:38 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:38 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:38 +0000
Files and hashes:         1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: ghcjADryBM8qlm4R+T6qIpjhPh8/cS4O8tZTloMA17U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:a0:63:30:98:4a:52:b8:2d:58:d5:77:e5:6a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
        Validity
            Not Before: Jun  6 22:00:38 2025 GMT
            Not After : Jun  7 22:00:38 2025 GMT
        Subject: CN=19a4122f84cee608e26a078a017197242e4b44bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:8e:30:6d:06:72:5a:f4:d8:f3:6d:6c:ed:
                    60:82:01:2c:94:e3:8e:a7:4c:45:2b:18:7a:d8:cd:
                    ea:48:28:2a:b9:32:c4:a1:7d:4a:09:09:6d:70:8e:
                    1d:ff:7d:fc:13:eb:58:ac:d5:29:38:e8:26:a6:4c:
                    91:a8:6c:e3:28:8c:b0:e7:4a:66:a3:3f:c4:77:31:
                    61:87:13:b3:96:19:02:1c:60:ed:6b:0a:2e:14:60:
                    24:d6:13:58:0f:81:96:41:5a:d8:bb:e4:f1:0e:ec:
                    b3:05:86:d9:80:b7:68:50:18:75:8a:f5:02:48:f1:
                    c9:3b:1a:cc:cc:50:9a:a8:9f:d8:58:8e:87:84:d2:
                    31:e3:92:f0:65:68:fb:34:3b:a3:2a:16:00:f1:82:
                    a1:a2:96:80:77:30:1d:6f:02:4b:51:5f:aa:be:66:
                    4f:94:19:db:59:2e:f4:e1:6a:c8:b3:3e:9c:4a:94:
                    6b:c5:d3:3d:95:d8:4d:f5:e6:6f:dd:35:7c:f2:10:
                    33:57:59:93:9d:11:8f:10:12:cb:28:0d:be:f9:62:
                    9d:0d:37:ba:aa:c7:dd:a4:87:5d:a0:60:a6:8c:b7:
                    75:38:f7:9e:89:a3:c3:3a:b0:ef:48:db:6d:79:7b:
                    28:ef:48:e0:89:fc:f9:05:cf:b3:80:6c:35:6d:00:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A4:12:2F:84:CE:E6:08:E2:6A:07:8A:01:71:97:24:2E:4B:44:BB
            X509v3 Authority Key Identifier:
                keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f1:68:43:2c:76:cb:bc:be:15:c9:72:07:ee:09:db:6e:b6:
         99:35:6f:79:50:23:8b:3e:22:41:57:ac:29:5c:9d:c8:48:d6:
         63:95:b9:53:15:6d:ae:81:f6:b0:2c:95:c6:0b:bd:d3:10:61:
         13:81:d5:27:52:66:c8:49:e4:3a:3e:b1:fb:ed:30:1b:46:a5:
         95:63:f4:1b:df:06:f3:f3:6f:96:db:3a:09:4e:9a:03:8e:73:
         31:39:89:92:17:7b:b5:9c:29:20:c5:93:ea:bc:a8:23:95:f7:
         66:d6:fa:ca:f2:f1:88:05:25:49:2c:18:4a:6f:c0:ae:4c:15:
         fe:34:2c:fe:f3:63:76:ea:d8:28:3b:5b:58:d8:16:f0:56:15:
         aa:7e:f9:34:02:6b:8a:ce:4f:4c:84:72:c8:08:01:fd:8d:6e:
         07:64:9e:a9:51:b9:f6:92:41:8e:86:9b:f9:80:44:12:0e:bc:
         e4:7a:aa:24:ea:b8:5a:87:3d:6a:be:9c:9f:6b:3d:35:fe:b3:
         52:56:29:37:11:97:61:9d:20:ca:87:b7:e9:13:c7:0e:8d:76:
         7f:23:d8:2d:d8:97:fd:7d:36:be:55:96:2a:66:87:2b:02:87:
         2a:2c:f4:aa:1e:71:1c:cf:d2:cd:9a:b1:c9:be:48:3d:fe:2a:
         33:bb:ff:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:29 2025 by rpki-client