Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          p3JcE6+wMsGGh50x2rc4ryjnQZ9iAXffHnI+5jYvdHw=
Subject key identifier:   94:EC:78:AD:19:B9:B7:3C:5D:5E:6A:03:23:20:64:92:36:7D:BA:11
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       0197B77C493365ACC92C143B256FCAF7EC23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          1594
Signing time:             Sat 28 Jun 2025 17:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:05 +0000
Files and hashes:         1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: 66ehai2BjmHyMaj38OeMoM8fBcH2WlTJIW7T6gVu008=)
                          2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:49:33:65:ac:c9:2c:14:3b:25:6f:ca:f7:ec:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Jun 28 17:01:05 2025 GMT
            Not After : Jun 29 17:01:05 2025 GMT
        Subject: CN=94ec78ad19b9b73c5d5e6a0323206492367dba11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:46:05:8c:9d:79:84:c2:43:b2:7f:7a:1e:
                    fd:c9:2c:d5:a7:4e:ea:b9:bc:36:ac:c1:8d:4b:98:
                    95:35:e6:55:71:10:30:c1:e8:0e:9b:17:db:23:7b:
                    db:b9:a7:9c:74:23:8d:51:6d:ca:11:85:20:ce:7f:
                    56:98:66:d0:e3:74:9c:be:10:1d:00:03:ae:3e:7b:
                    e1:a6:67:b1:6f:71:74:91:44:37:5a:7e:a9:37:cc:
                    fe:9a:21:b4:92:fd:81:6a:c6:58:f4:b7:a7:33:ce:
                    93:17:c3:51:7a:38:1c:79:5a:45:41:6b:80:7e:de:
                    bc:ad:75:a3:1c:78:27:4e:89:f8:09:a9:03:66:ee:
                    15:ce:c9:8d:a7:60:89:2a:08:fc:f3:b7:28:8d:66:
                    81:42:c2:eb:7e:b2:13:e5:71:1d:ac:80:e6:85:27:
                    1b:f3:0d:b4:2b:9a:3d:c2:36:12:50:d4:19:12:a0:
                    bb:aa:27:4d:db:33:b6:6f:be:1c:60:55:7f:45:30:
                    40:c9:05:38:2b:bb:d1:1e:3e:3c:94:84:ab:8d:9c:
                    0c:3d:b0:04:2f:aa:b4:3b:49:8d:7f:25:af:c8:a0:
                    34:21:7d:bf:5a:91:47:fb:cb:59:ba:c5:ab:cc:29:
                    d3:0e:6d:d9:70:c8:ea:e8:ae:01:1f:66:5e:cb:72:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EC:78:AD:19:B9:B7:3C:5D:5E:6A:03:23:20:64:92:36:7D:BA:11
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f3:9a:1b:c9:05:31:2a:7f:b5:9f:78:bf:7d:6b:7d:fe:0b:
         e4:aa:68:e4:9d:26:52:01:9e:fc:e3:59:ff:d2:44:c6:82:cf:
         6d:43:cb:ea:8b:1d:a6:59:24:34:b7:cf:37:e0:c5:24:81:75:
         96:94:eb:97:3e:59:46:44:0f:a9:6c:2e:7d:15:37:5f:de:b1:
         be:44:88:fb:04:15:f3:79:8f:f8:ac:e5:c8:77:ee:01:b9:2a:
         30:cb:2a:d4:9c:60:81:38:6d:15:9b:31:6b:f6:d8:3a:cd:e8:
         03:62:f6:13:d1:95:e7:6f:57:9f:30:09:a7:93:91:82:02:a1:
         f9:8d:32:0f:2a:ea:a2:a1:53:18:2e:2e:35:61:3f:e3:14:72:
         74:c2:7a:4e:36:4d:f3:ad:fe:fb:1d:ba:1b:5d:22:bf:e5:c0:
         8c:e0:55:ec:89:29:14:98:66:90:03:58:52:2a:21:08:8c:7a:
         0d:99:d6:30:db:62:45:99:4f:da:f7:69:80:51:95:ef:08:b8:
         ca:1d:b9:a5:2c:7a:36:00:dc:20:e7:25:6d:ed:fc:a1:66:3b:
         00:94:ed:ef:bd:ac:02:cb:3b:63:81:3f:aa:75:e6:58:13:b6:
         b9:c9:91:03:53:74:de:b9:09:f3:f3:d3:f8:fe:dc:4f:8c:d1:
         79:d6:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:58 2025 by rpki-client