Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          IYqWrorShr8flXn+s0Glif8rp7GHIouyDTBASUsgtqs=
Subject key identifier:   9C:81:DA:E2:FE:1C:0F:30:88:3E:3D:04:7B:07:66:1B:44:E1:21:AA
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       0197B745B1DACD0070881F299B5383EFDC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0AFB
Signing time:             Sat 28 Jun 2025 16:01:27 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:27 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:27 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: 6mSwsTwq1n5C8yLO8M0bqybbV9IcxCttIZH9Dc99zSg=)
                          2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:b1:da:cd:00:70:88:1f:29:9b:53:83:ef:dc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Jun 28 16:01:27 2025 GMT
            Not After : Jun 29 16:01:27 2025 GMT
        Subject: CN=9c81dae2fe1c0f30883e3d047b07661b44e121aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:9a:62:3b:a5:42:08:2b:e3:7f:4b:77:e1:
                    5d:80:d3:fb:ac:77:7c:31:61:17:38:9f:9d:2f:1c:
                    3f:a5:76:fa:ad:56:59:4a:91:fb:4f:8b:3c:7a:74:
                    89:c4:96:23:42:0a:2b:60:8b:03:98:0a:65:c7:9b:
                    9f:64:6e:2d:d3:70:4f:19:c6:d8:a7:38:b0:b3:32:
                    95:02:14:57:af:fc:4c:ce:e7:08:16:51:de:0a:07:
                    b5:94:fb:eb:cc:70:54:c3:0b:15:4e:49:1f:56:71:
                    79:64:f2:ad:ee:ee:87:85:31:49:b2:20:0c:48:ea:
                    18:6d:a5:76:73:f9:6b:cb:df:9f:98:c5:14:c0:21:
                    fb:65:57:f3:8b:c0:6c:c0:d6:af:6f:9c:15:5f:ca:
                    8c:3f:73:cd:2e:b9:29:7d:f8:da:d9:65:08:44:a4:
                    33:cb:54:3c:42:4a:d7:5a:6a:0e:64:5c:ee:1b:8a:
                    c6:6b:fa:15:89:3b:f7:2e:21:3c:0f:18:8e:91:49:
                    02:44:90:97:7d:5a:cf:47:61:43:14:c1:b8:9f:a0:
                    2d:55:85:7c:aa:71:f3:8d:a5:28:b2:29:db:2f:f2:
                    93:8f:58:83:e4:ce:c2:d9:37:bb:01:ca:91:c3:1a:
                    f3:2b:db:bb:a9:79:ce:70:6d:66:88:3b:82:96:3e:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:DA:E2:FE:1C:0F:30:88:3E:3D:04:7B:07:66:1B:44:E1:21:AA
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:db:3c:6c:8f:9f:21:b9:d3:94:53:90:4a:88:8c:57:bd:7a:
         86:32:5b:ff:9e:89:0f:02:ff:26:c3:75:56:9a:a6:5f:58:18:
         a8:20:73:bb:94:8c:49:41:5a:21:6e:de:73:90:91:59:54:1c:
         4b:29:61:7e:b8:73:44:de:b4:70:22:09:67:b2:d3:d5:6d:91:
         0f:87:7c:af:07:9b:2d:f0:90:ff:2b:4f:23:b5:4b:1a:1d:80:
         58:8c:cc:22:8b:7e:b8:6f:8d:48:95:45:3e:9c:f4:07:49:95:
         b2:a5:ab:69:6b:c5:01:d8:51:f8:e8:81:d8:2f:b2:5a:f7:5c:
         8d:a5:06:8e:53:0f:d3:e5:93:0c:f1:d1:4c:f1:02:8d:94:45:
         df:4f:52:dc:66:98:c1:55:f4:0d:2d:e2:27:87:1c:de:2f:35:
         50:66:72:2a:fe:3c:b0:a7:5c:c1:e0:ab:5a:28:9f:7d:31:15:
         d0:18:2f:ac:1b:89:a0:e0:8e:7f:25:1f:cf:62:70:61:9a:81:
         f4:ef:e5:04:a4:7e:4b:f0:b7:4d:9d:83:16:c2:3b:52:00:51:
         cf:71:5b:ee:7a:3c:59:aa:ae:b3:cb:1a:5f:84:30:cd:7d:ac:
         c4:8f:b2:65:09:99:f6:9f:cd:f6:89:aa:a5:31:ae:c4:70:8f:
         ba:76:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:10 2025 by rpki-client