Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File:                     L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier:          IfJN4tcEsPugD8LYUZQ+dHG7KkOkinx2dMU76/qzZ40=
Subject key identifier:   9E:FC:28:6B:02:7A:7D:DB:63:13:44:1F:77:F5:97:03:7E:24:F2:C9
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer:       /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial:       0197470BF9D778EA8A40804C391877277D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number:          1186
Signing time:             Fri 06 Jun 2025 21:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:56 +0000
Files and hashes:         1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
                          2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: YoiMEESnjs7e90ndDYS0YuJw9K3aoa8xajieDnAHL4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:f9:d7:78:ea:8a:40:80:4c:39:18:77:27:7d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
        Validity
            Not Before: Jun  6 21:00:56 2025 GMT
            Not After : Jun  7 21:00:56 2025 GMT
        Subject: CN=9efc286b027a7ddb6313441f77f597037e24f2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:27:83:21:96:88:90:42:e0:25:ac:53:4a:
                    c3:29:93:bb:ac:27:e7:5e:3f:b5:e4:89:7a:71:3c:
                    96:27:fa:6d:84:ae:e0:ad:59:d7:aa:28:ce:3c:4c:
                    19:59:62:ba:25:34:cc:8f:83:0b:8d:73:d5:ff:28:
                    56:3d:4e:c2:06:f3:5d:e9:f1:81:6b:e5:be:72:a4:
                    6e:e4:ec:25:07:fe:5d:d6:77:8f:08:94:74:d7:16:
                    09:76:42:96:c5:d4:33:51:24:de:91:c8:30:39:12:
                    08:73:5d:80:ee:2a:cb:f2:43:a6:55:41:92:f6:59:
                    f8:28:1f:6e:b5:b5:44:74:c3:4d:06:78:2d:ff:f4:
                    8c:6f:8b:a8:63:f9:03:18:1e:b6:ff:65:13:4b:6e:
                    e5:1c:73:7f:e8:5c:9a:34:8b:09:e1:03:9f:09:ce:
                    a4:47:cd:f1:16:6a:a2:45:83:cf:98:2f:4f:57:29:
                    f3:27:87:95:9c:18:1e:ec:92:fa:74:21:d5:93:5b:
                    b5:ff:a1:63:b6:cc:dd:ac:b1:38:dc:df:ae:65:ee:
                    05:eb:b3:83:eb:fd:9d:6d:9b:46:ed:4c:17:9b:1e:
                    2a:4f:60:1f:e0:86:37:75:47:31:e0:4a:67:cf:59:
                    50:a5:95:12:bb:44:be:da:d8:b8:0b:09:fc:52:61:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FC:28:6B:02:7A:7D:DB:63:13:44:1F:77:F5:97:03:7E:24:F2:C9
            X509v3 Authority Key Identifier:
                keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:8a:6f:0e:15:3b:d7:cc:26:7e:89:f0:ba:55:92:c4:fd:
         99:af:2f:25:0c:56:60:ee:19:cf:77:ea:ca:69:dc:15:5a:d7:
         a6:64:f6:ca:9b:f7:63:45:90:11:7b:ca:26:f6:0e:15:7b:6c:
         ef:d2:0e:27:84:4e:b7:56:b3:dc:7d:db:21:45:d3:8b:d5:5e:
         b6:f9:b6:0e:34:b5:22:a5:c7:ce:d6:fc:99:a0:07:18:a2:9e:
         52:57:66:45:23:77:3f:8c:aa:95:df:12:62:71:c5:bd:c8:20:
         56:a7:3a:9a:9c:cf:a3:3f:cc:ba:01:4f:d2:d1:91:ab:d9:92:
         27:b8:e8:f4:90:48:9b:2e:d0:b8:08:38:cf:ec:23:42:60:19:
         45:64:89:68:08:40:4d:72:01:a4:9a:80:ce:bb:f3:7e:87:2e:
         f8:24:c0:66:80:a8:d0:9d:26:25:9e:57:91:ef:1e:9a:56:d4:
         04:ff:24:78:f7:35:a9:66:b2:8f:09:c2:c7:ef:4c:35:fa:cd:
         1e:04:32:b1:83:4a:00:ea:1e:5f:e7:33:bb:36:d7:3a:9a:d6:
         10:de:d9:16:7a:97:06:20:71:49:23:c3:6f:e7:23:a5:71:b9:
         fe:c7:d8:81:78:8a:00:dc:9b:1c:24:e9:9f:b2:2a:f5:0a:65:
         14:8d:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:28 2025 by rpki-client