Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File:                     1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier:          In6QYEDKPwKZMmjNWRd/S/IOKL3l2JWZw48001jay0E=
Subject key identifier:   8B:FB:41:AC:06:63:CB:10:99:CB:38:90:64:32:A3:D5:AE:AB:37:76
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer:       /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial:       01976E1910AB3180B177B34AE9B15938E9E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 11:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:25 +0000
Files and hashes:         1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: aJ6OTIZ6qC5JVA1e411Cxg38aeB+daM0diELUd8/R8I=)
                          2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:10:ab:31:80:b1:77:b3:4a:e9:b1:59:38:e9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
        Validity
            Not Before: Jun 14 11:00:25 2025 GMT
            Not After : Jun 15 11:00:25 2025 GMT
        Subject: CN=8bfb41ac0663cb1099cb38906432a3d5aeab3776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:05:9c:da:69:6f:9f:98:1e:4e:82:1a:bf:
                    07:97:50:11:43:5b:5a:33:1d:fa:f9:89:24:46:9e:
                    7b:74:ac:36:ef:e2:55:70:cd:82:a0:84:b1:38:09:
                    06:1a:42:43:db:8d:eb:e3:ce:cb:1d:65:f0:87:22:
                    3a:d7:b4:a8:bb:f9:34:e4:8b:0e:a6:48:45:fa:f4:
                    91:bb:e5:d9:ed:a8:b0:fb:f0:4d:6f:75:42:e9:6f:
                    e8:52:b3:be:1e:5c:6a:90:12:e9:79:db:6b:44:17:
                    ce:8b:62:00:aa:67:cb:98:57:20:75:2d:dd:91:af:
                    e1:5a:6c:4f:cc:7c:c9:9f:b0:ef:4c:01:b7:88:f3:
                    57:82:62:d6:de:1d:a1:2e:bf:a2:c5:18:6f:27:24:
                    3d:2e:c5:9e:77:22:7d:dd:fe:75:2b:90:ff:11:fa:
                    d1:46:96:7a:50:55:56:04:de:71:34:87:05:be:a8:
                    aa:7a:d9:91:e3:f3:9c:0f:0f:49:89:aa:b0:25:5c:
                    2b:3f:2c:f3:d6:02:a3:8f:f9:89:83:32:ae:9c:d7:
                    ce:fb:e8:32:aa:bf:50:20:36:2b:3b:28:8e:04:ca:
                    71:69:37:c9:de:22:03:bf:8d:82:16:12:bb:ce:10:
                    4c:d9:95:fc:3a:20:a4:03:95:c5:2f:4e:1c:f0:a0:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FB:41:AC:06:63:CB:10:99:CB:38:90:64:32:A3:D5:AE:AB:37:76
            X509v3 Authority Key Identifier:
                keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1a:7a:90:58:d7:95:6d:8d:fd:87:b2:e3:5b:47:b7:72:b9:
         a3:b0:57:fe:ff:34:1d:5b:d5:d8:60:d2:7b:12:1a:6f:a9:78:
         e2:e7:4f:47:f8:0d:84:60:1e:7b:67:33:94:8f:a4:3e:ff:55:
         3e:26:c5:15:09:71:b4:65:8d:c0:ed:18:f8:7f:0b:c4:94:30:
         16:f7:95:19:19:74:ca:84:a4:70:7e:0f:93:4a:66:c7:94:c9:
         bd:8c:5f:47:47:7e:c1:b5:0a:6d:bb:14:3b:27:d3:87:2f:a3:
         b8:78:a4:f9:e7:19:da:2e:af:55:2a:52:0f:20:4b:44:90:28:
         bb:ee:12:d2:d7:02:18:69:cb:f0:77:cf:8e:93:b9:53:94:c4:
         08:19:b1:bf:bd:f4:85:f6:74:7f:47:b9:da:dc:02:7b:8e:59:
         0e:ee:16:8b:4a:f9:42:28:c3:92:74:ea:da:ce:b3:b0:df:1a:
         17:9c:b6:82:96:80:db:73:94:b7:3b:59:ad:17:0b:f1:d8:fc:
         0d:25:c5:35:7b:e0:36:c6:87:bc:8d:a9:72:62:4f:44:9b:5a:
         a9:4e:08:41:25:d2:a3:f9:dc:a7:ee:01:74:53:52:42:0e:8e:
         96:ac:4b:69:94:7a:81:43:98:c3:3b:ee:f0:1c:63:b9:d8:a0:
         84:3c:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:19:08 2025 by rpki-client