Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File:                     1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier:          m5GnLhHW+tOzt6YfCvf2uLC4esyhF7poVVz4FrViupM=
Subject key identifier:   74:43:35:1C:26:EF:F0:A6:AB:0D:86:42:2A:AF:B2:0B:43:E9:75:61
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer:       /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial:       0197B6A0F894C37B648415904632A5EAB118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 13:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:32 +0000
Files and hashes:         1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: 4XMe3dDudawnnUlqaqWIMl07gH05p6vf0mq9xVBsGEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:f8:94:c3:7b:64:84:15:90:46:32:a5:ea:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
        Validity
            Not Before: Jun 28 13:01:32 2025 GMT
            Not After : Jun 29 13:01:32 2025 GMT
        Subject: CN=7443351c26eff0a6ab0d86422aafb20b43e97561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:01:b7:7a:ea:4f:e4:93:00:95:db:ab:78:
                    1d:35:fa:94:32:1d:39:b1:5a:b1:51:32:51:7f:e4:
                    98:dd:25:97:cb:c0:62:dc:d6:7e:ae:0a:6e:49:21:
                    ee:17:19:2b:8a:e1:aa:08:67:25:ee:93:f4:14:aa:
                    f5:14:76:dd:3f:12:d6:79:39:18:85:6c:d4:0e:83:
                    02:cf:ee:19:2e:cb:fe:86:e5:2a:68:4e:34:08:9e:
                    99:22:88:7c:e9:06:36:17:76:04:0e:87:13:cf:fa:
                    58:b1:53:e5:a3:07:4f:ac:86:bd:85:ce:32:0e:c6:
                    79:77:68:df:64:a9:13:05:8c:ec:7c:73:ac:8e:15:
                    62:78:ac:4e:6a:76:ea:4e:e2:86:5a:89:ab:2f:18:
                    4c:52:18:d7:02:b8:bc:bf:4f:8c:1d:bf:eb:a0:7b:
                    d3:2c:6c:47:ad:63:8e:81:03:30:f8:0d:33:4a:de:
                    1e:35:cc:ca:db:f8:e1:36:ed:6b:84:f6:64:b2:3e:
                    5b:d3:da:33:d4:33:cd:29:a0:b6:c2:81:6e:b0:db:
                    48:14:86:33:bb:a7:fd:1a:0a:2e:90:a1:00:67:3e:
                    e6:d7:37:4f:79:7f:72:22:73:39:5e:ac:a3:ba:c4:
                    ee:0d:e1:54:9a:1b:d6:89:68:93:04:95:7a:15:b9:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:43:35:1C:26:EF:F0:A6:AB:0D:86:42:2A:AF:B2:0B:43:E9:75:61
            X509v3 Authority Key Identifier:
                keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:d9:25:0d:65:df:94:11:a7:59:ce:62:1d:53:90:81:fb:
         37:b2:d0:1e:8f:5f:f3:1f:4f:63:ac:00:eb:15:45:37:59:06:
         c3:92:5e:71:6f:12:3b:6c:07:5b:54:08:fe:3d:e1:14:f3:45:
         1c:66:51:ea:16:3d:93:10:e6:a4:b7:49:3f:a5:af:58:31:68:
         cf:78:d7:a9:cd:8e:4c:0c:cd:1d:bb:51:9e:e1:62:c8:ee:fb:
         b6:ae:78:5c:70:ca:ed:6d:d3:56:c8:16:58:78:41:f3:a7:36:
         0b:2f:41:73:4f:7f:3c:87:93:c8:94:93:f9:83:1b:36:aa:bc:
         78:7c:52:1b:44:c9:bb:8d:23:4c:60:49:f2:4d:a1:aa:8d:47:
         30:6f:37:77:56:ad:c9:38:3a:93:f1:42:69:a9:d4:db:9a:db:
         6f:02:10:eb:7b:78:19:74:f0:8b:03:a0:92:a8:6c:34:e4:51:
         21:d0:22:69:0c:cc:ec:c1:6f:01:1b:77:cd:c5:d0:8e:ec:f9:
         7d:c5:07:da:d5:51:e2:8b:47:33:3b:9d:ea:33:4e:1b:ae:84:
         82:39:e1:4f:11:7a:3e:ec:e4:ca:b2:a2:83:df:31:a2:05:e8:
         68:ef:83:8a:22:ac:d7:01:f9:b4:87:4a:4f:70:22:72:a9:ac:
         37:bd:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:04 2025 by rpki-client