Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File:                     Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier:          F7dvmwCP2QkERG7HoKQg4wNO2igQ+LDsmlVsBENxn6k=
Subject key identifier:   1D:8F:D3:E0:A6:35:FC:52:9F:62:E0:C8:EF:EF:04:EC:33:42:FC:63
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer:       /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial:       01974BC43D24160F0E516113D1315F540425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number:          11C9
Signing time:             Sat 07 Jun 2025 19:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:41 +0000
Files and hashes:         1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: hXKqjId3OOun+GSKHVkUnDBPvQ8TiYB4CkGXlVHG010=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:3d:24:16:0f:0e:51:61:13:d1:31:5f:54:04:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
        Validity
            Not Before: Jun  7 19:00:41 2025 GMT
            Not After : Jun  8 19:00:41 2025 GMT
        Subject: CN=1d8fd3e0a635fc529f62e0c8efef04ec3342fc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:33:32:e3:07:d6:49:af:e3:4f:6c:6b:7d:b2:
                    43:30:31:5e:c8:65:00:7f:ec:f8:58:c9:d0:44:5d:
                    5b:d8:a4:60:58:c5:bd:24:78:e9:c6:80:50:c7:68:
                    9c:4b:86:96:71:6e:36:36:df:5a:38:fd:a4:86:56:
                    5d:fb:c3:ae:26:b5:12:73:d9:22:ff:50:d1:bc:da:
                    de:48:37:b0:0c:c8:ed:85:42:3e:d5:af:ff:c0:c1:
                    f6:e2:02:92:2d:ea:8c:d9:b8:a4:75:f6:58:07:c1:
                    21:6e:ba:c9:4a:43:e9:c5:0b:dd:2f:69:59:bd:e9:
                    72:37:90:f1:ef:7c:a4:f1:5d:a2:98:2f:2c:45:37:
                    6b:ee:7b:11:1c:f8:09:bb:93:1c:fa:31:ac:72:40:
                    d0:82:7f:fa:22:cd:d8:49:46:50:7a:4f:0a:7f:d7:
                    6b:d6:8d:d9:f3:d0:b6:a5:d7:89:f2:08:4c:f0:5d:
                    1a:d4:a2:f8:7d:d1:de:eb:30:12:af:aa:e0:1b:3c:
                    aa:44:5f:f9:b9:22:5d:2c:f6:ae:0d:84:89:05:70:
                    d0:56:29:02:f0:fd:29:9c:17:fd:bc:e1:3b:56:04:
                    a4:42:cd:b9:ce:99:0a:61:9a:06:b8:3e:d6:5f:93:
                    f7:09:31:10:ce:6b:31:36:b8:8f:b9:93:cb:72:e7:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8F:D3:E0:A6:35:FC:52:9F:62:E0:C8:EF:EF:04:EC:33:42:FC:63
            X509v3 Authority Key Identifier:
                keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:92:8a:fe:b0:d9:39:f8:e7:56:54:d7:82:ed:87:ab:98:
         db:10:e1:a6:52:e3:d6:be:f3:23:1a:0d:1f:53:67:b4:cc:97:
         ff:61:66:1a:0d:89:df:00:3a:c6:a5:82:53:b0:6a:06:0b:4c:
         87:50:b3:1e:2a:e1:29:3e:15:5b:5b:9a:be:58:ee:b6:c6:97:
         e8:fe:23:61:3e:23:6d:4e:d7:36:92:2a:e6:20:b1:24:6b:e9:
         f8:39:1e:b9:20:a9:98:d3:b3:03:c7:af:cd:90:ac:43:71:27:
         8f:53:ca:e6:ec:75:b5:e9:e3:9f:3b:32:4d:02:a5:1e:42:5f:
         8d:7d:7b:ba:a5:00:11:65:46:1e:9e:5c:53:75:55:ab:de:f4:
         5a:db:2a:45:3e:7e:ed:ed:fc:74:a0:c3:56:c4:14:75:52:a4:
         76:75:4d:e2:1a:c0:5c:b0:b7:fa:a9:24:ae:b4:ba:2f:20:ae:
         e0:17:47:35:d7:94:bc:76:80:d4:47:e2:58:a4:fe:b1:f0:62:
         88:51:5a:c6:a1:e0:09:2a:5f:63:a2:e5:55:ea:f2:57:71:e9:
         b3:c1:87:81:ba:c6:bb:6b:8d:e0:fe:85:6b:ca:bb:ce:e5:b5:
         82:66:6c:d7:7f:dd:12:0e:61:32:8b:8b:42:ff:05:2a:65:49:
         5b:17:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:53 2025 by rpki-client