Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File:                     2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier:          KuDyhBVFG0kL4z7XUCrrceS6/Y9/fMG+Oyj/INpfESk=
Subject key identifier:   DF:C8:F5:54:E0:66:F8:4D:15:71:9C:58:26:DF:22:CC:D9:27:BB:25
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer:       /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial:       01976BBD86AB8E64990403D14DBF64B72EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number:          151E
Signing time:             Sat 14 Jun 2025 00:01:12 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:12 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:12 +0000
Files and hashes:         1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: V0W5/JfwM8Te0w48dPjwPBVpTFIqZSnAeESGs465pjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:86:ab:8e:64:99:04:03:d1:4d:bf:64:b7:2e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
        Validity
            Not Before: Jun 14 00:01:12 2025 GMT
            Not After : Jun 15 00:01:12 2025 GMT
        Subject: CN=dfc8f554e066f84d15719c5826df22ccd927bb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:fb:f7:9e:aa:8e:a9:c7:0e:b3:c0:6e:0c:
                    3e:e9:e4:5b:40:6e:99:1e:78:85:40:07:fd:ea:9c:
                    58:2e:b5:42:ba:80:86:d1:9e:8c:03:48:1b:6e:26:
                    ad:a3:96:90:9b:d2:72:84:3b:0e:ca:ed:dc:55:29:
                    1e:17:5f:9f:46:2c:78:73:b6:6c:06:64:bb:f3:e7:
                    57:94:5d:04:8b:89:92:67:46:af:6b:f9:90:44:6d:
                    1d:a9:db:c6:b6:29:ab:b9:b5:83:75:3e:03:f1:b0:
                    1a:14:4a:8b:2d:6c:a7:78:42:56:33:9d:d1:10:0f:
                    20:75:83:ff:e8:d3:79:55:1b:5c:6e:03:be:40:bf:
                    7c:34:10:d9:ad:d4:55:46:4a:eb:01:ca:73:04:56:
                    9e:51:37:8a:b7:33:f5:eb:4c:2f:4c:2c:75:5a:8a:
                    31:f2:51:f0:3c:31:a6:42:8e:be:28:2c:c6:27:8a:
                    15:27:77:d9:69:79:07:44:69:74:c7:97:d4:ed:4c:
                    f0:d2:86:f5:16:7a:6e:b1:25:10:1e:4b:8d:fb:de:
                    a7:1f:40:55:a2:2e:5e:6e:1f:71:a7:23:98:db:79:
                    33:30:1e:5d:5b:a0:4d:2f:99:9e:06:f9:3b:af:07:
                    fa:f9:39:c3:68:d4:c2:d0:52:d0:bf:f3:68:5c:e4:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C8:F5:54:E0:66:F8:4D:15:71:9C:58:26:DF:22:CC:D9:27:BB:25
            X509v3 Authority Key Identifier:
                keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d5:a1:8c:d9:b9:10:e3:01:02:8a:e5:bd:c6:9f:ef:08:6a:
         a9:57:7b:f4:c5:5d:a4:a1:4f:ae:39:88:6c:2e:4e:79:7c:fd:
         3e:37:e4:22:82:e8:a4:4d:da:e6:43:b3:d2:f2:7d:48:23:55:
         6f:49:86:bc:17:63:f0:fc:b2:d7:23:c3:b2:e7:10:21:d8:41:
         e7:e1:f6:58:b3:b1:00:6b:62:9a:dd:33:9a:15:ae:71:ef:b4:
         57:c4:61:5a:57:58:6c:7e:fd:6a:a4:22:e8:d5:c9:55:98:86:
         22:7c:11:39:f0:37:89:3b:c8:17:01:de:b4:44:c8:ac:1c:2a:
         cc:6a:97:57:66:54:f7:d9:9d:c1:31:b7:a4:ee:f4:06:ce:74:
         ed:f8:34:67:fa:d8:6a:f8:64:bd:91:c0:ae:7f:0f:be:95:b1:
         9d:d6:fd:c1:5d:cd:d2:cd:48:df:e5:be:84:4b:59:df:ec:90:
         2e:8f:9f:92:4d:a6:a5:24:f5:e8:07:89:ab:47:57:dc:a2:44:
         9c:f5:7f:fd:90:19:6a:2a:09:3b:3a:1a:5d:7b:76:81:42:9a:
         6f:e6:0e:e3:46:ac:10:4b:3c:65:ca:bd:dc:d1:18:c3:bc:96:
         43:58:94:03:d7:7e:bc:c4:48:08:2f:51:61:53:d5:0c:dc:2c:
         fc:70:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:23:44 2025 by rpki-client