Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File:                     lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier:          V9fXIGohSqpm275X6GGz34nwsi8jDo6xEFIH5VvxzEg=
Subject key identifier:   65:10:B1:21:45:95:3F:8A:65:B1:0D:B9:E1:47:24:B9:1D:1D:D6:04
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer:       /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial:       01975CB8254C251FC5259F0301E39EBDF85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number:          1585
Signing time:             Wed 11 Jun 2025 02:01:01 +0000
Manifest this update:     Wed 11 Jun 2025 02:01:01 +0000
Manifest next update:     Thu 12 Jun 2025 02:01:01 +0000
Files and hashes:         1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
                          2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: Wf+2d2dH50Z3io2P8ldBW1I+slirLZq8CeodSWITDOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:b8:25:4c:25:1f:c5:25:9f:03:01:e3:9e:bd:f8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
        Validity
            Not Before: Jun 11 02:01:01 2025 GMT
            Not After : Jun 12 02:01:01 2025 GMT
        Subject: CN=6510b12145953f8a65b10db9e14724b91d1dd604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:21:57:07:2f:49:96:95:c4:a6:df:b7:c2:
                    47:43:6e:f4:60:1d:6f:68:aa:c1:5c:64:1a:a1:99:
                    3b:90:ca:57:c4:f7:5e:f8:fa:bc:ac:99:f1:c7:38:
                    8d:2c:9d:cc:7d:09:1b:6f:4c:0a:92:83:0a:e7:3a:
                    d4:e2:5b:7b:a7:fe:b2:08:98:51:8f:fe:48:da:36:
                    65:ec:4f:30:73:77:9d:1d:8a:a6:d7:73:44:07:e0:
                    b3:90:91:f0:28:e6:62:75:90:41:ef:16:44:ea:f6:
                    61:e7:a6:ab:01:d1:df:99:9c:6d:9a:a6:7c:d3:a5:
                    ae:19:66:69:1e:01:61:d0:27:4b:10:bb:0c:be:98:
                    29:b5:87:63:bd:05:9e:f5:5a:ba:c9:48:df:4f:3e:
                    bb:7c:fe:a0:21:d9:4e:9b:d4:2c:e2:ac:b8:b3:9a:
                    b7:23:f0:7a:16:ca:fa:9d:d4:3f:55:92:c5:aa:62:
                    28:3c:c1:d3:20:3f:be:3d:b0:69:f3:c5:08:92:b7:
                    d1:f2:b3:a0:2d:37:72:a1:e4:21:f3:ec:7c:a2:a2:
                    47:22:83:30:43:73:51:ee:4c:f4:ec:73:61:56:09:
                    52:37:ec:79:16:1e:e7:05:39:0c:f3:09:d8:f0:58:
                    19:77:f6:b8:e7:9c:91:4c:12:ec:0c:25:68:79:1b:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:10:B1:21:45:95:3F:8A:65:B1:0D:B9:E1:47:24:B9:1D:1D:D6:04
            X509v3 Authority Key Identifier:
                keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:1f:de:b3:d7:74:0b:60:06:f7:97:7b:b6:ca:80:0d:29:
         89:4b:3b:12:de:5d:2d:fa:20:55:e6:21:b5:3a:15:44:a7:bb:
         94:54:e4:5b:ad:8b:83:ba:48:a9:21:46:f1:ec:b8:62:f4:7c:
         9d:17:95:05:ce:23:9f:c7:d5:71:12:64:09:20:f2:a3:e7:c5:
         0e:64:c6:77:e5:4f:00:48:91:ad:cc:77:30:1f:67:c4:2c:92:
         88:1a:81:6d:99:fd:32:5f:cf:b8:58:9e:b1:f4:5a:24:ee:df:
         e2:8f:14:ef:be:36:0a:fb:df:96:bf:fb:79:8f:c9:21:a0:9d:
         93:9d:c7:4a:08:8b:76:1a:12:b0:a0:70:90:bf:22:f8:70:a8:
         15:db:80:98:6f:bb:39:f4:cc:c5:6d:f7:27:31:06:4b:b3:ff:
         1c:55:44:a3:67:2e:78:96:df:2d:44:d4:95:23:9f:0e:64:06:
         b0:ab:86:08:9c:51:dd:51:f9:d8:1e:f0:c3:bc:8f:e7:99:d3:
         74:7c:f1:6d:68:45:f9:6b:cc:a4:18:d0:0b:ee:b3:0a:40:a7:
         fd:f1:de:91:57:2c:a1:09:f3:b7:f6:79:53:65:f6:23:21:35:
         8f:f2:28:2a:64:c7:cd:a2:44:a3:ab:d7:df:41:df:f4:e7:c9:
         c2:19:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:11:05 2025 by rpki-client