Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File:                     T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier:          tpeij9QAq0E+J6EHkXDDXOjQDDNQYaz8Tduq1JotX3o=
Subject key identifier:   82:0D:85:55:40:0B:58:6A:5E:A4:6D:B1:68:31:20:7F:A8:CB:2D:EF
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer:       /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial:       0197684E93617BC54C117FEEDFC855FCCD86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number:          0E23
Signing time:             Fri 13 Jun 2025 08:01:09 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:09 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:09 +0000
Files and hashes:         1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: BFhxmM0/Gic0cTc2gXiW2KXxrA4XFfY/iqc1pwgK/D4=)
                          2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:93:61:7b:c5:4c:11:7f:ee:df:c8:55:fc:cd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
        Validity
            Not Before: Jun 13 08:01:09 2025 GMT
            Not After : Jun 14 08:01:09 2025 GMT
        Subject: CN=820d8555400b586a5ea46db16831207fa8cb2def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:d8:66:b0:7d:2c:e8:70:51:3b:6e:3d:cf:
                    a2:b3:14:0a:25:53:07:4e:ad:fc:e0:c6:5f:be:0d:
                    2f:af:0f:c6:a0:65:f5:49:97:ce:3b:a3:a5:e5:e5:
                    0c:7e:37:8e:5a:a3:7f:21:02:b4:e1:03:63:28:b3:
                    6f:cc:4b:22:9f:3f:5b:29:fd:80:b2:f3:09:10:6a:
                    60:08:78:93:15:cc:f8:02:04:f9:80:b5:91:e1:1f:
                    d3:b2:c9:7e:3f:f6:37:e8:53:58:d0:3f:46:ab:b0:
                    9a:ea:59:21:a3:ed:93:e2:14:69:bf:da:4a:15:7e:
                    3b:ae:28:41:a1:5c:46:11:70:49:1b:46:43:34:58:
                    cf:83:ee:f7:a1:c9:81:b2:d4:30:51:49:12:89:61:
                    32:f9:e0:66:9b:bc:77:fb:e1:87:26:f2:46:d9:e2:
                    93:12:75:ea:8a:a1:e4:46:32:55:08:c4:90:e8:fc:
                    f9:00:a3:6e:30:bd:74:a0:57:c8:f3:0f:9e:9d:90:
                    a0:28:08:4c:7d:79:9d:83:81:44:ba:48:07:cd:a4:
                    25:fe:0a:1c:46:04:92:28:3c:fc:80:ab:8f:4a:d2:
                    af:77:d6:a5:ec:40:14:0d:0f:0e:f0:4b:e2:ba:d0:
                    a4:dd:b6:a4:30:5e:72:c1:38:25:c0:b6:a7:29:8b:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:85:55:40:0B:58:6A:5E:A4:6D:B1:68:31:20:7F:A8:CB:2D:EF
            X509v3 Authority Key Identifier:
                keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:a8:cd:9a:da:df:dc:b0:7a:bd:ce:2c:7a:19:ac:9b:e1:
         46:0f:a0:a2:e1:cf:03:88:d5:a5:33:b7:10:36:e8:74:c0:77:
         66:81:c5:ab:9b:bd:b1:a6:07:80:d4:90:0a:17:8c:c1:4f:ca:
         f5:8b:7f:85:2c:72:91:5f:4c:cd:4b:b6:8b:9f:6d:d2:4c:25:
         0a:aa:c7:23:b7:b1:26:a0:35:8e:1b:4e:57:76:74:04:76:7a:
         85:f8:89:be:9a:15:be:53:81:00:00:58:eb:9f:19:fd:70:bc:
         77:ae:04:4d:81:d9:00:9a:a4:6a:34:53:ff:ef:fe:2f:ea:78:
         95:c1:c9:18:d5:5b:69:c6:48:fc:e6:cc:da:7c:df:3a:9c:42:
         3a:3e:04:01:5d:c5:b2:f3:6b:10:27:61:ee:9a:01:cb:f4:43:
         fb:96:70:02:fc:b6:5e:5d:b8:a7:b2:d5:54:88:42:3b:11:c6:
         91:f3:23:12:41:9f:72:83:5d:ec:12:17:9f:ba:65:87:b2:9f:
         70:b4:90:2a:55:20:46:27:57:e6:ee:06:ad:a5:d2:49:cd:5d:
         80:cf:ff:41:c9:fc:7f:0f:80:d7:ca:7e:c2:06:61:9a:67:20:
         a6:52:52:41:2b:8c:c7:a9:37:f2:53:f7:e9:44:c8:45:c2:8b:
         4c:fd:bb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:53:18 2025 by rpki-client