Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File:                     Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier:          5ynMMjNgy8yeGpsRClwFNcEq5Q+JDaV+nlTzLt1pJEM=
Subject key identifier:   E1:3D:79:9F:59:87:37:A0:8B:E5:F0:E6:B7:CE:EF:3B:25:A0:53:51
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer:       /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial:       019771880570F4A583AA78F6D56E844AC960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number:          11F0
Signing time:             Sun 15 Jun 2025 03:00:29 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:29 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:29 +0000
Files and hashes:         1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: 7DKtasAr3MLs6BaCP/rKGX1HiRuj39tbIAqGmkFu31U=)
                          2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:05:70:f4:a5:83:aa:78:f6:d5:6e:84:4a:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
        Validity
            Not Before: Jun 15 03:00:29 2025 GMT
            Not After : Jun 16 03:00:29 2025 GMT
        Subject: CN=e13d799f598737a08be5f0e6b7ceef3b25a05351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:a4:32:a3:ba:57:99:33:07:28:69:49:3d:
                    b5:27:31:7f:d7:c9:a4:bd:78:e7:38:00:07:d3:8a:
                    38:45:ae:7d:fb:3a:d0:b1:df:8a:93:c6:f1:57:37:
                    af:ea:88:de:ae:a8:bd:67:31:d4:ff:aa:2c:46:19:
                    52:6a:13:2b:b6:f4:3d:4f:79:d8:b3:8c:7e:ff:be:
                    af:db:a2:da:e9:3e:9f:aa:61:4d:b2:3e:a0:9d:e7:
                    05:46:f8:53:26:64:82:40:99:45:82:c8:96:69:4c:
                    2c:73:37:93:48:a6:9d:d5:cc:93:fa:fa:c3:09:9d:
                    bb:67:f5:5d:d7:16:ff:cd:47:d3:00:1a:40:ae:e8:
                    14:b6:02:29:3f:13:ba:2a:bc:df:0c:28:80:40:3a:
                    5b:cc:71:f7:d1:ac:61:a9:59:ca:4c:4a:9f:18:af:
                    7b:e2:bd:ed:b9:aa:58:1c:67:8c:72:26:b6:09:fe:
                    85:23:c2:27:4c:15:74:a3:ef:e9:4c:5d:ee:3a:57:
                    5a:41:ef:c2:f9:a9:5b:9b:36:70:35:49:17:eb:2b:
                    f8:53:27:ec:52:0e:82:13:24:d7:c1:e2:5f:dc:4c:
                    58:19:31:62:3c:87:97:a8:af:2d:0b:ef:d6:31:c0:
                    77:fd:17:9d:32:82:67:57:7f:6f:9e:54:46:83:5a:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3D:79:9F:59:87:37:A0:8B:E5:F0:E6:B7:CE:EF:3B:25:A0:53:51
            X509v3 Authority Key Identifier:
                keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2c:d7:4e:6c:e5:11:32:d9:48:4d:0c:25:24:64:0c:95:d0:
         35:75:30:dc:e5:7a:a3:e2:46:ad:56:db:a8:12:07:7e:fb:96:
         a6:db:53:73:78:06:53:fc:f1:00:ad:31:b5:3f:51:2a:07:8d:
         f7:7b:84:a2:84:15:67:d7:eb:ad:b1:30:f9:aa:fc:de:00:e4:
         4e:a3:6b:f2:4e:3e:a9:75:52:2e:ac:83:ea:84:31:ed:22:ce:
         21:a7:2f:9d:22:d8:82:9b:1d:22:3b:ce:68:c2:ea:9c:05:98:
         b0:62:31:ea:b0:f7:c8:d4:af:29:d9:59:53:44:41:48:c4:35:
         2d:05:ae:58:1b:6e:cb:35:83:35:99:7c:e6:cb:ec:97:a6:09:
         76:34:97:52:5b:e0:d2:1a:c5:02:de:c9:d3:84:b6:f0:e7:6e:
         52:e8:d7:83:fb:35:12:4c:d2:b6:8f:7b:9d:3c:f9:23:08:35:
         53:49:8b:83:a3:fb:b3:ee:3f:af:1d:49:e8:46:67:99:39:35:
         30:45:f9:3c:3d:ed:9d:6a:e4:79:24:bc:e1:8d:9a:d9:b0:2d:
         5a:83:60:17:af:a6:63:5a:bf:65:83:99:ba:64:de:e3:7b:1d:
         7f:3d:dd:a5:90:fb:bf:2c:a0:38:70:fa:65:b3:ac:1b:b4:88:
         85:36:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:31 2025 by rpki-client