Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File:                     T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier:          p+Ia3HFacSHPmjQ1JS/OC+pV3elcoPGrF8dXcCdHp0M=
Subject key identifier:   89:C9:66:11:0B:B3:05:06:F2:A8:59:A1:A5:F3:99:B9:1F:1F:EA:38
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer:       /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial:       0197647180F26DE1259B6C30BA61280B2EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number:          0E21
Signing time:             Thu 12 Jun 2025 14:00:49 +0000
Manifest this update:     Thu 12 Jun 2025 14:00:49 +0000
Manifest next update:     Fri 13 Jun 2025 14:00:49 +0000
Files and hashes:         1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: +tuSGBa3/64IAuIwH+6QR5Klqx8Ynv4EIPlss7qAYIY=)
                          2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:80:f2:6d:e1:25:9b:6c:30:ba:61:28:0b:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
        Validity
            Not Before: Jun 12 14:00:49 2025 GMT
            Not After : Jun 13 14:00:49 2025 GMT
        Subject: CN=89c966110bb30506f2a859a1a5f399b91f1fea38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:c8:e3:42:5e:d2:93:8e:3f:99:bf:14:16:
                    59:6b:be:86:6f:6b:de:e4:f7:5c:2a:57:74:da:36:
                    f8:07:cb:01:66:db:5b:37:38:9e:b8:23:83:11:38:
                    3f:3d:a8:a2:26:41:0f:04:d2:f8:77:33:3b:db:25:
                    50:aa:67:67:5d:68:0e:60:5f:c4:e1:4f:6c:7a:e3:
                    6c:39:1a:ab:03:e5:ac:7a:fe:76:34:48:82:e6:50:
                    16:8a:91:3c:98:e7:1a:5a:f0:6f:41:55:78:fc:c8:
                    01:a3:fb:70:62:34:79:35:64:7d:26:63:b0:b2:c5:
                    59:a5:a6:da:b9:f4:c8:01:72:9f:a2:93:e5:37:1a:
                    dc:09:43:de:47:82:97:8f:f1:cb:4b:70:ec:54:82:
                    ce:a0:81:2e:04:62:39:e1:ad:5a:06:61:8b:a3:c6:
                    74:5d:51:05:0a:f2:3e:ce:ee:2d:de:1a:2f:df:b6:
                    c8:85:17:b7:42:d7:99:45:e2:1c:e2:6a:9a:04:ec:
                    3e:63:70:ad:8e:b3:a3:67:63:cd:6b:98:0c:ba:9a:
                    7f:8b:24:e0:c6:18:f7:29:a3:f6:6c:86:9c:85:5d:
                    29:35:9c:08:c5:cc:b2:9a:e8:bf:84:91:72:fb:ba:
                    1f:b9:ab:8f:c8:2d:b5:4d:ab:f1:95:f5:e4:59:81:
                    e2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C9:66:11:0B:B3:05:06:F2:A8:59:A1:A5:F3:99:B9:1F:1F:EA:38
            X509v3 Authority Key Identifier:
                keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:96:6d:d9:c3:5e:58:ed:97:bd:6c:c6:cb:89:8c:a8:bc:
         59:95:ad:a6:3a:14:5a:7b:35:08:ed:fa:1c:f8:d1:b4:10:55:
         d9:0d:ab:56:26:ed:c6:55:d2:3f:10:25:f5:1b:86:e9:6a:9d:
         d0:d9:41:8a:33:05:73:4d:cf:34:8e:c7:4b:e8:60:92:4d:f5:
         c0:76:d7:5d:e2:bf:3b:50:35:29:2d:9c:76:91:51:2e:db:52:
         cd:8d:47:3c:d6:86:fb:25:13:47:42:30:af:fd:87:79:07:1d:
         76:63:1f:0e:1e:84:34:7a:13:c7:df:01:4a:c8:16:fa:26:fc:
         8a:de:21:12:8e:0c:22:2e:d6:60:fc:8b:4a:61:40:a5:21:b9:
         19:be:60:b3:64:35:76:f0:2d:1d:0b:cb:7b:e4:d1:48:ad:90:
         2a:64:b3:01:e6:bb:fe:2c:17:ab:34:57:06:6f:3f:a3:ac:d4:
         3c:d1:f3:eb:cc:ce:5e:89:7e:f5:34:b1:7d:41:7f:b4:c2:29:
         f5:c9:3f:6e:65:c5:73:1a:2a:1e:7a:7f:3c:0b:24:93:0b:95:
         60:73:a2:aa:68:bb:2a:a2:39:45:d2:d5:b4:ed:6e:18:70:52:
         4f:46:db:f4:18:8d:18:85:51:fa:6b:b0:4b:21:7a:6e:24:0f:
         b5:2c:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:05:23 2025 by rpki-client