Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File:                     D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier:          V0E1BjKlP8vxVIEJVDXtK7S64VXgbSRHNVJ5n35KYHo=
Subject key identifier:   C5:1C:94:D7:7A:3A:87:51:DA:25:C1:F9:14:DC:0C:8E:5F:DC:B5:4C
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer:       /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial:       01976DAB1AE337151C4749C5524B262117A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number:          148D
Signing time:             Sat 14 Jun 2025 09:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:19 +0000
Files and hashes:         1: C4mXoWlE0u2rZTvygZOHRccieT0.roa (hash: 2pjG126FZCESeR0DqPSbBLsbSndNcZCXbWy82O0JVRw=)
                          2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: jklnOMiJ4DCrNMHeYiq/9bbUHHcH2eBQlOaaAe4ZXgc=)
                          3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
                          4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:1a:e3:37:15:1c:47:49:c5:52:4b:26:21:17:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
        Validity
            Not Before: Jun 14 09:00:19 2025 GMT
            Not After : Jun 15 09:00:19 2025 GMT
        Subject: CN=c51c94d77a3a8751da25c1f914dc0c8e5fdcb54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:3d:a4:3c:59:46:2b:6d:38:ca:46:fa:0d:
                    a8:f6:41:24:28:cb:19:6e:df:46:82:91:5e:35:93:
                    b5:21:53:01:2b:59:d7:d4:8b:cc:2b:02:5c:ae:24:
                    79:cb:de:cd:69:5c:8a:d6:14:f4:11:2e:df:ed:26:
                    05:31:31:dd:1d:94:47:e0:ad:70:00:b8:7f:eb:9e:
                    a1:47:ef:11:76:92:9f:b6:ae:12:13:9b:68:da:56:
                    b9:2f:60:a4:f7:fb:8c:55:0a:a1:dc:1c:a6:3f:e0:
                    73:94:da:b1:ff:1f:2c:38:c9:01:2b:38:11:39:b3:
                    4c:f3:55:a7:99:2b:ca:31:52:c2:9b:ed:5b:aa:d1:
                    04:f5:0f:99:34:18:bb:83:c5:c3:06:12:32:21:ba:
                    ea:d6:bb:60:5f:c5:ae:c4:8b:75:1c:e1:8e:55:c4:
                    c3:7f:52:8d:1b:7c:bf:89:a6:0a:60:00:25:3b:9b:
                    0d:30:8b:54:b2:ad:06:0c:ed:7e:bf:a4:f4:3d:fe:
                    dd:8d:20:66:e4:5e:03:83:dd:78:da:30:09:73:3f:
                    6c:6a:67:b5:bb:7e:eb:b2:54:e3:d9:79:2f:35:40:
                    de:87:9f:fc:40:cc:29:94:de:ca:3d:e3:26:b4:86:
                    1e:61:0a:39:9a:56:7b:27:2e:8b:4a:da:2a:19:b1:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1C:94:D7:7A:3A:87:51:DA:25:C1:F9:14:DC:0C:8E:5F:DC:B5:4C
            X509v3 Authority Key Identifier:
                keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:22:b8:24:dc:15:40:39:ad:24:0a:58:66:6e:88:ed:bd:60:
         27:40:6f:f6:e1:b0:57:53:5c:bd:f8:89:8e:3b:b9:ba:17:b9:
         02:c6:53:a3:97:bc:8c:97:1a:80:72:63:4e:13:25:b3:8c:6e:
         da:71:43:14:bf:df:29:46:d8:e3:95:20:1a:1a:ff:5f:1e:1f:
         0d:29:91:41:14:24:ca:43:e4:07:be:3c:24:19:94:78:e8:0c:
         f7:09:0c:a6:89:d8:91:2d:ad:74:95:f5:58:d5:67:83:b6:c5:
         b0:a1:d4:9f:7b:ea:a2:3c:44:f4:10:dd:7d:6c:b1:6e:5c:39:
         4a:a6:9b:3e:fb:ae:76:74:15:7d:5e:61:32:21:60:da:08:e2:
         d8:1e:87:e1:48:69:6c:38:c3:b1:a1:51:f9:cd:e1:e5:5d:27:
         28:ee:d5:1f:ce:3e:4a:61:56:c7:03:33:33:e8:46:0a:f5:95:
         48:56:07:1b:0d:61:e4:b5:c4:b1:31:fb:be:1e:82:98:93:50:
         a1:97:a5:ba:5c:c4:13:76:e8:06:33:ff:28:29:2b:25:60:4a:
         37:82:e6:2c:37:87:82:21:6f:6b:2f:8c:58:60:71:e3:07:93:
         b5:85:7f:66:17:79:41:68:62:25:90:2c:c5:65:40:78:97:15:
         15:81:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:07 2025 by rpki-client