Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File:                     0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier:          TfPrhrXz68jrbEsPNgEWXtHHP8jDSty2zpT5Sx3Vw8Y=
Subject key identifier:   3B:CF:1A:AC:C2:85:E0:71:47:41:B9:A2:8F:24:4F:23:54:AD:A8:61
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer:       /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial:       019873E26525E3AE1B95B2BD0CC99DD527F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number:          0BE1
Signing time:             Mon 04 Aug 2025 07:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:13 +0000
Files and hashes:         1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: N61zfydlnCdHRsRvs4Xv9syyqjzA8RSH/7S3ng3d5Fs=)
                          2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:65:25:e3:ae:1b:95:b2:bd:0c:c9:9d:d5:27:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
        Validity
            Not Before: Aug  4 07:01:13 2025 GMT
            Not After : Aug  5 07:01:13 2025 GMT
        Subject: CN=3bcf1aacc285e0714741b9a28f244f2354ada861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:ce:0a:1e:0d:78:85:57:db:4d:ef:42:1b:
                    ad:6c:5e:ad:f2:ce:a0:16:4b:a4:b9:ac:fb:33:86:
                    45:25:9b:a9:c7:5f:c5:68:f1:a2:13:1a:91:ec:b4:
                    ab:a2:f0:39:05:88:13:ad:5d:d7:35:6a:8f:c7:8f:
                    eb:aa:d3:c0:d9:ec:76:a8:b3:34:35:1d:5c:c4:6d:
                    c5:0b:46:26:75:47:ab:af:bb:e2:7c:f6:c0:2e:01:
                    96:00:ad:7c:f7:a1:34:3c:64:ed:2f:48:c1:01:cb:
                    3a:f8:14:5a:29:05:6b:0a:5c:1a:82:26:2f:bb:02:
                    d4:69:59:73:80:03:ef:fa:6a:9b:5f:ca:10:2d:55:
                    66:49:31:e9:64:bf:fd:84:dd:30:22:86:b8:0b:d3:
                    17:fb:6f:61:8c:d0:d8:7f:80:2c:75:ab:06:51:93:
                    1b:ac:9d:6e:cc:84:15:cc:47:d8:66:ff:02:19:95:
                    25:10:33:fa:e2:f9:7e:0d:89:b0:05:5b:37:2a:43:
                    84:f1:1e:ff:1c:f3:4d:19:54:58:73:c5:bb:16:0e:
                    48:2e:9b:24:0b:06:b5:c4:46:0f:ab:78:4a:19:57:
                    bd:1d:e1:ba:06:03:b8:f7:93:e1:8d:3d:6c:dc:3c:
                    cf:24:29:3a:44:fe:d4:e9:72:d2:fb:f8:58:84:56:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CF:1A:AC:C2:85:E0:71:47:41:B9:A2:8F:24:4F:23:54:AD:A8:61
            X509v3 Authority Key Identifier:
                keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:da:7b:99:e4:2b:23:f6:3f:1c:9f:68:97:b9:b9:78:b5:78:
         e5:ae:35:e3:6a:a0:4f:86:57:fe:fb:e4:40:c0:ba:a5:ff:88:
         b9:a8:dc:33:da:ea:35:89:6a:da:b6:cb:2b:a5:3b:fe:ad:61:
         79:5e:10:64:8f:3d:22:2d:22:c0:52:9f:e8:71:90:26:60:9c:
         78:ae:07:27:15:4f:88:80:cf:11:f2:51:7a:68:89:c6:75:1f:
         26:c4:1a:f7:34:78:5f:e6:86:a9:1a:68:fd:24:5f:18:52:1e:
         eb:f4:d1:d2:80:8d:28:62:c3:e5:71:3a:3c:9e:66:cf:41:34:
         98:bb:ee:79:c6:81:55:11:de:b2:1a:ee:2a:dc:2e:f9:d0:76:
         cf:4e:80:50:62:04:43:54:91:8d:6a:b5:0c:a5:83:a5:19:56:
         32:b9:c4:1a:9a:0f:61:bf:fa:c4:18:3c:de:eb:c2:ad:17:d7:
         e6:29:0b:8c:a6:c3:46:52:a2:79:a3:ed:08:c1:1a:d4:53:0d:
         f4:91:9a:50:78:e6:cd:65:ce:e9:f2:66:34:a0:25:8d:01:fa:
         10:b6:1f:bb:82:61:c4:af:fd:40:72:60:6b:ae:bc:b5:32:8e:
         8f:46:9f:58:05:13:db:d9:07:db:32:85:d1:25:00:19:28:e4:
         e8:ec:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:31 2025 by rpki-client