Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
File:                     1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json)
Hash identifier:          RWGgp7//p5glSSQcA9C6EaVzntCGP9N7B1Vm/TIb9Lk=
Subject key identifier:   EA:BD:61:D1:29:C1:7C:3E:2C:63:B2:C1:89:E7:8F:0B:CD:1D:38:FE
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Certificate issuer:       /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial:       0197B77CD90FE778806C3E8B392D516E09EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
Manifest number:          12A0
Signing time:             Sat 28 Jun 2025 17:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:41 +0000
Files and hashes:         1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: nma5w5HRaPJ9lkEhCUUcKuTT859jf5n2u4WKxk2OTz0=)
                          2: QajEwkbx04DeU-__NIG_To3nAd4.roa (hash: DL3wmR5aQwUYr9WHU8u6HM9lbpHPvXLenfBtN39yssQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:d9:0f:e7:78:80:6c:3e:8b:39:2d:51:6e:09:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
        Validity
            Not Before: Jun 28 17:01:41 2025 GMT
            Not After : Jun 29 17:01:41 2025 GMT
        Subject: CN=eabd61d129c17c3e2c63b2c189e78f0bcd1d38fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:69:03:17:47:ff:8f:88:1b:c3:4b:b8:82:
                    0a:84:06:50:72:e9:3e:de:74:1c:c3:ec:96:ed:f5:
                    c4:d7:28:19:da:7c:42:7c:85:7d:cd:44:1c:d2:74:
                    a6:c7:8f:0b:b6:7d:a5:97:21:af:1c:ad:a4:01:f6:
                    c4:e3:26:be:f0:84:62:f9:b3:32:77:ac:7c:09:44:
                    50:56:e8:cb:8f:02:36:20:b3:3d:c4:d4:e1:f5:5f:
                    25:98:b1:a4:f0:90:5e:4a:81:89:75:36:0f:a8:3c:
                    75:68:20:f1:05:75:60:8c:14:04:1e:22:5f:be:a2:
                    bf:45:e1:85:5f:f8:19:ff:60:8f:37:d1:4d:b8:8f:
                    7c:55:ab:14:d5:2d:1a:de:80:ea:24:34:b0:f6:ef:
                    02:25:f5:02:50:93:02:9e:bf:96:2c:e3:d1:07:81:
                    fb:c7:1e:a6:a0:a5:43:3f:1a:ab:6d:cc:46:2d:69:
                    9a:79:7c:c4:82:bb:88:df:64:7d:3f:3b:f2:1e:b1:
                    60:77:b0:93:2a:a1:9c:0c:ed:f0:a7:b6:0b:e1:79:
                    f5:30:df:9b:b8:31:8a:83:3a:2a:ca:c1:6d:fd:ca:
                    1f:48:f6:b1:ba:4d:aa:06:0b:c4:42:76:b6:13:1e:
                    db:90:cf:92:a1:fa:1d:4c:a7:64:64:bb:e5:1f:18:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BD:61:D1:29:C1:7C:3E:2C:63:B2:C1:89:E7:8F:0B:CD:1D:38:FE
            X509v3 Authority Key Identifier:
                keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:db:1f:8d:1a:85:16:80:83:f4:4c:01:bc:4a:e5:0d:52:
         be:0a:99:34:0a:c2:04:04:bd:e9:d8:ac:e0:47:54:c3:a5:25:
         cb:fa:da:d2:73:91:36:e1:f8:50:51:be:de:3d:87:f9:1f:8b:
         b6:29:a4:90:fa:df:f3:69:37:dc:41:75:e0:dc:9b:21:a4:82:
         4c:4d:2a:99:72:00:ef:bf:81:a3:88:c4:c8:b7:55:dc:16:0c:
         c4:a7:e1:59:e7:c4:a5:2a:ed:48:4e:ee:86:65:99:f9:bb:ac:
         ab:51:d8:2d:13:cd:f2:78:2a:b0:60:98:15:78:65:5b:c8:38:
         b9:34:3e:45:17:bc:83:ad:08:f8:77:8c:a6:f1:1e:db:0c:53:
         5e:71:d6:d0:c3:fc:b8:a4:5b:d2:9f:d5:66:9e:c6:35:d7:4f:
         6d:04:93:0b:1d:2d:c8:5e:86:7c:a0:aa:74:da:be:52:48:00:
         65:ef:e0:80:cc:b3:a9:59:7e:fa:d7:7b:12:4f:10:7f:d5:07:
         bd:47:e6:f9:4c:9c:ec:3f:17:51:fe:ed:69:fd:cf:39:2f:44:
         51:12:49:0c:59:7f:fd:51:a8:d9:1b:89:7a:ae:32:bd:ad:c9:
         02:b6:a4:c5:03:a4:d3:ca:98:71:84:3e:75:6f:cf:db:fb:46:
         d5:68:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:10 2025 by rpki-client