Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File:                     1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier:          ck7ZDxgQ4oxnEyBbvxdLzDRIKpRmBeZzTy7DLnd3iAk=
Subject key identifier:   D2:C1:81:0D:3F:46:67:D2:A7:4F:74:4E:29:BA:8C:4F:E4:D4:F1:AE
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer:       /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial:       0197B5FC6713E4278EA00525A06D40091295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number:          0806
Signing time:             Sat 28 Jun 2025 10:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:46 +0000
Files and hashes:         1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: AKriWxyezhx/KOB0eMi7+xuUu6GbKagPct+9I4P4fuw=)
                          2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:67:13:e4:27:8e:a0:05:25:a0:6d:40:09:12:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
        Validity
            Not Before: Jun 28 10:01:46 2025 GMT
            Not After : Jun 29 10:01:46 2025 GMT
        Subject: CN=d2c1810d3f4667d2a74f744e29ba8c4fe4d4f1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:04:f1:83:5f:28:ca:28:1d:f6:f6:de:21:
                    59:4b:e2:8f:94:75:98:c8:d3:13:cb:66:94:b8:fa:
                    4c:8c:28:b6:0c:a6:4c:1d:59:a7:05:20:48:ca:bd:
                    22:93:30:61:3b:31:5c:56:37:df:4d:1e:8e:76:28:
                    45:94:4e:cd:41:d7:0a:3a:d2:5e:7b:a7:f2:fc:2e:
                    b9:7d:ec:ba:08:ee:4b:3c:bf:5f:dc:04:9a:c9:7f:
                    07:f0:5f:3a:0b:7a:79:5a:d7:5e:be:28:85:1a:bf:
                    1d:3d:66:9e:bb:f4:6a:82:d0:0b:26:9b:14:4b:88:
                    30:9f:52:42:02:2f:bd:0e:13:e1:ca:52:95:05:96:
                    4c:c8:24:db:71:17:be:19:11:6c:9e:23:c1:56:de:
                    90:e0:e7:dd:61:56:67:22:e7:73:14:04:5a:0c:34:
                    08:c7:3e:60:8e:3f:11:95:4d:55:c4:1f:5c:1d:1e:
                    84:1e:50:cf:98:c7:55:77:fb:00:0f:47:9e:47:5e:
                    91:c6:54:df:c2:47:cc:7b:05:b7:cd:4f:6f:12:89:
                    25:29:04:df:aa:4a:eb:ee:7b:b0:af:96:70:bc:1b:
                    0a:3a:02:9e:81:8a:85:b4:b9:2e:d3:2d:81:9e:30:
                    17:83:99:d8:29:38:b1:be:6d:04:34:0c:ba:02:20:
                    7c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C1:81:0D:3F:46:67:D2:A7:4F:74:4E:29:BA:8C:4F:E4:D4:F1:AE
            X509v3 Authority Key Identifier:
                keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:6e:a2:5b:b8:77:26:ca:9a:c1:9f:2d:b8:f1:7f:70:e4:
         c6:11:1b:d8:04:2e:7f:87:78:f1:c9:20:48:be:83:46:de:16:
         dd:4e:7e:30:18:b1:ef:a6:a9:d6:19:86:9c:ec:af:03:7c:3a:
         d1:db:8f:42:4e:9f:25:79:f0:58:6b:0d:9d:30:66:e7:bd:e6:
         35:47:0a:2e:3e:55:71:a0:15:83:df:83:c7:35:ba:7c:c0:bb:
         de:64:7d:a1:62:dd:bc:2b:a7:d5:95:c3:5a:46:1d:50:c9:09:
         27:63:de:f4:ed:56:ef:df:c4:a4:23:0c:37:f1:1b:28:aa:16:
         0a:f4:92:d5:d6:b2:b6:91:f8:74:46:00:f1:ac:bf:d3:af:1d:
         bb:1e:f8:30:1e:58:f4:27:5e:da:f4:10:70:c2:0b:aa:e2:e8:
         16:4d:93:3c:d6:e5:b8:23:22:96:83:78:3e:b6:25:df:77:8e:
         77:20:90:06:86:8b:5c:95:1c:c4:fb:38:ab:6e:d9:a8:26:5e:
         9e:c0:74:22:52:82:ad:7c:b7:bf:aa:3b:c8:7a:bc:1a:38:07:
         23:8d:f8:5e:aa:e2:ec:9c:6b:d9:eb:c3:55:87:98:c2:bc:7b:
         11:3e:bc:fd:cc:42:b6:d4:48:e8:dd:86:38:5a:7f:d8:61:ec:
         62:66:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:10 2025 by rpki-client