Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
File:                     1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json)
Hash identifier:          W/8zDt9bC4K6Mue6+q4nUO7vlz9zi+LSNIABT5blF5c=
Subject key identifier:   41:21:97:4D:1A:A5:93:C4:2F:4D:C5:FC:17:1B:3D:84:27:D7:97:C1
Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Certificate issuer:       /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Certificate serial:       0197B6A0AACC49621C8FB46C91307191F8B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
Manifest number:          062B
Signing time:             Sat 28 Jun 2025 13:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:11 +0000
Files and hashes:         1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: ZDO+XHB6i+YqzNK73G4DSitxsxUfeY1oPZvlppPkn5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:aa:cc:49:62:1c:8f:b4:6c:91:30:71:91:f8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
        Validity
            Not Before: Jun 28 13:01:11 2025 GMT
            Not After : Jun 29 13:01:11 2025 GMT
        Subject: CN=4121974d1aa593c42f4dc5fc171b3d8427d797c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:34:ea:45:0f:d0:41:2b:9c:9a:da:16:c7:
                    47:07:43:58:89:ae:73:00:e7:35:76:63:28:9e:17:
                    c8:0b:fc:c1:e4:6c:e8:02:0a:69:d2:9d:3c:1b:a3:
                    ee:c3:4c:ff:37:1a:b1:14:29:1f:31:4d:00:0a:26:
                    97:03:00:73:be:c1:69:22:62:4a:32:35:ba:f2:47:
                    ea:b5:e9:85:cb:72:84:dc:40:7f:52:bd:ea:a5:d3:
                    67:5d:06:dc:3d:ad:1c:76:2f:92:30:e6:c3:33:61:
                    32:14:d0:20:b1:d2:6c:12:63:62:7c:b7:42:a0:51:
                    09:a2:01:7b:e9:c3:28:f1:f5:e6:dd:3d:c1:c2:dc:
                    86:ad:10:f9:91:45:f6:dc:ad:04:c3:e0:ab:72:f2:
                    5f:da:62:4e:d8:3e:bb:dc:b6:44:36:39:14:14:a6:
                    70:e3:e9:db:18:ce:49:80:84:14:42:4a:f5:51:ba:
                    09:ee:9a:ec:df:e9:59:d4:db:79:02:2d:6f:5d:26:
                    30:0a:ad:e6:a9:51:0d:23:95:53:1a:f0:98:5b:3c:
                    24:78:52:c2:6f:a1:d8:03:96:63:ed:64:b2:27:b1:
                    b2:9c:52:0c:3e:f6:cf:37:52:5b:f7:2e:7b:f3:e8:
                    8f:c6:6b:48:41:cc:cc:a4:2f:f4:26:50:3a:ba:5f:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:97:4D:1A:A5:93:C4:2F:4D:C5:FC:17:1B:3D:84:27:D7:97:C1
            X509v3 Authority Key Identifier:
                keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:13:25:93:61:07:cc:a4:15:fc:4f:b6:a5:4f:57:05:ac:c5:
         63:cc:27:de:f5:0b:fb:70:82:25:c9:0a:0b:47:d5:f8:05:5b:
         0c:9f:37:ef:5c:e4:ec:13:a0:93:99:c2:2c:1e:05:7c:54:fa:
         c9:fa:2c:3d:6e:98:b8:5e:eb:22:9b:30:b7:8e:5b:c6:86:c3:
         e0:87:6f:32:09:da:7f:e1:b6:35:4c:e5:c3:be:99:62:f3:87:
         68:d4:b9:ef:82:43:fa:e4:70:b6:68:27:19:c1:8c:bc:4f:4f:
         91:65:92:2c:1c:9b:a4:2e:cb:a8:ff:54:e8:27:7d:79:51:25:
         ce:88:c0:9e:d9:30:6b:65:1b:26:f8:fd:ae:6a:6e:7d:07:46:
         3c:6a:a7:21:59:95:1c:6f:7c:86:ba:2f:5e:a5:ff:f3:c1:fa:
         ab:fb:1f:d0:45:f1:51:6a:c8:c5:29:bf:ae:cf:e6:1d:bd:b2:
         15:bd:af:48:e4:56:98:1c:80:2e:11:14:47:6b:ce:27:5d:4c:
         e3:63:cf:0f:0c:18:00:68:cc:c5:cc:90:eb:70:26:34:86:ba:
         a8:d6:90:1f:02:ce:0e:b2:a2:3a:dc:22:ae:44:a6:13:f0:6d:
         1e:ed:a7:3c:96:60:58:fc:ad:05:6f:90:97:fa:84:0a:fe:8a:
         15:25:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:32 2025 by rpki-client