Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File:                     8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier:          Ry8bxea1PbdAfDxfGvm4i4ydXswJ3R9HkmBGZ7mzLXA=
Subject key identifier:   5F:35:09:F9:0D:81:DC:CB:C8:50:9F:D1:F2:25:84:07:90:12:80:FB
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer:       /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial:       0197B6A1055E3B162F59DA31D7261AB5AA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:01:35 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:35 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:35 +0000
Files and hashes:         1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: ExfQSoxRp7W/erA64bM4uDc+eT911nzJz7EbHcwxECw=)
                          2: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (hash: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:05:5e:3b:16:2f:59:da:31:d7:26:1a:b5:aa:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
        Validity
            Not Before: Jun 28 13:01:35 2025 GMT
            Not After : Jun 29 13:01:35 2025 GMT
        Subject: CN=5f3509f90d81dccbc8509fd1f2258407901280fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:bc:1c:85:5e:1e:db:f0:c5:03:c3:0a:cf:
                    92:97:ec:88:2c:aa:45:dd:0b:d0:24:25:12:40:f7:
                    3a:08:46:4e:28:36:3b:01:0a:b9:36:10:c6:37:86:
                    02:57:96:84:25:2e:2b:87:ed:4d:9f:79:9e:e3:3e:
                    f5:51:66:7f:4f:f2:2a:46:18:63:a9:4f:9b:e1:15:
                    97:23:43:97:7a:09:2e:90:17:2a:8d:25:6b:14:eb:
                    6a:af:da:af:58:e3:e2:d9:12:43:73:96:81:8f:02:
                    48:7b:b0:65:72:c1:6e:0b:78:e2:cd:18:ec:e5:6c:
                    35:1c:b3:0d:b5:0b:24:20:9b:ba:01:70:f3:6c:69:
                    c2:07:b8:80:f9:e1:f0:d3:d7:d6:b2:74:0f:7e:38:
                    d1:21:b5:bb:66:cd:ff:7c:1f:38:43:36:6f:a7:20:
                    80:4e:0f:40:9e:27:8b:6b:e5:4f:8f:39:1b:80:eb:
                    b3:dc:f7:a1:9e:85:64:4d:8b:a0:27:be:ad:03:f1:
                    d5:04:7c:8a:60:c1:7e:92:9d:bc:e0:c6:ae:8e:37:
                    a4:a3:38:d8:3a:d2:28:ec:b4:2e:89:fa:22:b1:f0:
                    15:72:98:53:ce:b8:10:7e:d8:08:b2:05:57:48:b3:
                    85:7e:ec:50:33:60:12:ec:1f:b0:7e:7d:0a:10:97:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:35:09:F9:0D:81:DC:CB:C8:50:9F:D1:F2:25:84:07:90:12:80:FB
            X509v3 Authority Key Identifier:
                keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:8c:19:2f:c2:e2:a0:0f:3e:d1:d2:f6:51:d3:67:8e:31:
         d7:60:99:7a:de:bc:1f:3a:9d:1c:bf:ec:f3:cf:0b:8a:fc:6c:
         4f:f7:30:7a:40:19:b9:5c:57:59:e9:c0:b9:29:7c:97:79:f9:
         a9:9f:ef:aa:ec:28:4f:74:ae:87:94:04:d6:4a:1e:de:34:fb:
         b7:52:01:21:c6:80:83:b6:83:86:bc:f0:47:41:30:40:e4:e5:
         ae:f0:fe:76:36:de:9e:a7:bd:b3:83:8f:43:65:2b:14:c7:9e:
         d2:69:ad:03:db:34:4e:76:9e:95:61:2c:09:ce:be:28:a6:bb:
         98:11:d1:a5:ed:17:01:5a:d8:63:c3:96:e9:db:b4:c2:af:b9:
         c6:b1:5e:ed:49:bc:33:34:c8:e4:41:21:eb:e4:eb:1a:bc:5b:
         29:8e:5e:4b:5d:11:03:74:52:3a:1c:a3:95:30:15:9f:6c:58:
         eb:87:9d:fd:a9:d5:cb:7d:48:cb:f4:9d:33:85:76:24:9d:dc:
         dc:31:49:fb:91:54:91:c7:63:95:bc:0f:bc:4a:7f:6b:8f:14:
         02:ca:19:3e:f3:e8:ca:ca:7f:65:ad:a5:0f:74:bb:e9:69:e3:
         dd:87:ef:16:77:c4:b8:63:02:60:8f:ec:49:85:91:c2:56:3d:
         77:46:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:08 2025 by rpki-client