Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
File:                     Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json)
Hash identifier:          qB59Wc9xM73yNksD4yb7IGj9DM9SxMvZoGSNpqPMGH0=
Subject key identifier:   9A:2F:1B:9C:B0:23:89:E2:46:1F:D3:EE:F2:3C:4A:33:98:A6:A7:F4
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Certificate issuer:       /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial:       0197B70E8D7E5CB29780FEAD8308FA86FBB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
Manifest number:          57
Signing time:             Sat 28 Jun 2025 15:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:13 +0000
Files and hashes:         1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: Y+w/b4gye+YRdkOH2q0R/e1S4tCrr3siNCITh+DaQfw=)
                          2: kJ_ZNbK3slQcy_TN55gyoHn1G0k.roa (hash: wZeyZOyIkRQ2u4cIoDaxSKEDydGOPToWwbH3yN/22T0=)
                          3: kQkp36SbEQB7MU7q6cnQaUoCZaM.roa (hash: n6V1Zj2QKNcqa6JYQoxZObwJco51jIWrlQ6TKDXJI7w=)
                          4: sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa (hash: iZDBjHvTi8UzC06Eug4ypR0vGR21QkFz4J3Uc1Ac+5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:8d:7e:5c:b2:97:80:fe:ad:83:08:fa:86:fb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
        Validity
            Not Before: Jun 28 15:01:13 2025 GMT
            Not After : Jun 29 15:01:13 2025 GMT
        Subject: CN=9a2f1b9cb02389e2461fd3eef23c4a3398a6a7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:2e:ab:0d:af:8e:b3:3b:7a:14:3a:27:d3:
                    36:ca:59:00:06:cc:03:27:3d:07:21:32:63:6b:52:
                    b1:28:79:7e:03:9f:4b:fb:34:2a:2f:77:8c:9d:79:
                    12:61:d4:96:1d:91:8e:d8:42:2a:61:64:20:e4:a0:
                    e1:07:b2:aa:5e:9b:26:e4:68:a1:22:83:05:8b:5b:
                    ed:bf:9f:29:a6:a9:ef:a3:de:3f:96:09:11:ee:e0:
                    93:a3:1c:a1:5d:33:3c:21:c0:12:fb:c7:cc:6c:98:
                    3d:01:b8:4e:a1:fb:09:83:4a:84:87:cc:2f:21:b0:
                    00:fe:23:0a:62:4d:8e:45:20:19:ce:d3:db:52:a7:
                    e8:ff:07:a5:09:8b:cc:57:5e:b3:10:f6:d2:50:52:
                    d0:dc:76:48:c6:a3:72:27:af:76:af:ec:90:aa:df:
                    6d:5f:02:38:25:f5:aa:cd:a0:6d:b4:48:51:98:c1:
                    e5:7d:e5:cf:a5:47:0a:f7:c5:d5:ca:f2:cd:ef:4b:
                    6b:b6:a7:68:63:05:54:f5:d7:79:49:ee:2f:12:42:
                    93:c6:6f:ec:00:77:8c:27:07:54:4d:e3:b1:73:35:
                    15:b9:4b:fa:31:cf:24:8f:43:10:6d:8d:1f:cb:29:
                    ef:78:87:17:b2:76:ec:d1:08:e1:86:ed:94:dc:e6:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2F:1B:9C:B0:23:89:E2:46:1F:D3:EE:F2:3C:4A:33:98:A6:A7:F4
            X509v3 Authority Key Identifier:
                keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:9a:71:a8:42:a2:9f:5d:26:20:cf:a6:ce:05:52:47:02:
         d6:4b:e7:2a:1d:3d:50:26:6a:4d:02:c9:66:c0:08:65:16:6c:
         b1:6f:d1:b1:f8:d9:9a:69:51:94:ad:cf:f7:6c:2e:d4:bd:48:
         ed:81:5f:de:aa:14:cd:fa:fc:72:b9:2e:29:41:97:58:b8:c3:
         d9:23:df:33:1e:58:35:1e:aa:f2:43:69:a5:d4:cc:13:6b:55:
         49:12:49:88:45:73:70:ef:dc:3e:d5:2d:45:0e:30:d9:81:e4:
         4c:bc:1e:0e:ee:61:df:fa:6c:7a:7a:5e:a1:14:31:9e:87:41:
         a7:6a:03:7d:2f:df:92:dc:7b:42:1e:e8:60:d8:07:80:d7:46:
         7a:6f:43:73:e7:18:7b:68:3b:ef:ea:24:50:b9:07:f3:76:2e:
         6e:12:4c:0f:f6:5a:dd:09:87:8e:8c:22:ea:e3:ee:32:b7:66:
         fd:72:18:8a:4e:7c:d9:ca:3e:ab:13:9c:da:cc:58:a1:50:f8:
         7d:0c:9c:3d:6d:c4:b5:e4:7c:e4:b5:a0:79:b5:ad:0b:82:15:
         58:d6:5a:bc:ba:58:fb:7b:26:9a:77:d8:30:db:a2:f9:cd:e6:
         82:32:ec:2b:07:2d:5b:c3:d0:ad:5a:fb:2a:1d:c8:22:b4:d2:
         df:e3:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:26 2025 by rpki-client