Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File:                     lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier:          qxGd4UpnTdmA6b9C4BHWu/ZXvUutEJqfb3l+6WRXJUM=
Subject key identifier:   87:CE:AD:3B:EC:E9:6C:4C:D5:C4:58:D4:E3:2D:A0:C8:1D:F4:A3:B4
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer:       /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial:       019769CF092980CC6854737895E272A99792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number:          151D
Signing time:             Fri 13 Jun 2025 15:01:05 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:05 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:05 +0000
Files and hashes:         1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
                          2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: wVEXGvhO5Hl8Uu/wz+Gl7bkwnsLYqUB4dqy/TOw3OqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:09:29:80:cc:68:54:73:78:95:e2:72:a9:97:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
        Validity
            Not Before: Jun 13 15:01:05 2025 GMT
            Not After : Jun 14 15:01:05 2025 GMT
        Subject: CN=87cead3bece96c4cd5c458d4e32da0c81df4a3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:60:16:c3:70:fd:8d:17:13:58:3e:06:66:
                    0c:3e:fd:8c:25:0c:42:73:c0:a9:50:24:fc:84:46:
                    44:f3:35:c4:23:6a:9b:22:83:1e:32:36:26:4a:67:
                    af:01:c5:d0:1d:b4:07:ad:92:a3:db:fa:41:49:1b:
                    91:6d:97:c3:a0:53:c9:57:94:e3:34:a0:69:d1:fd:
                    a6:5a:ae:27:dd:11:5f:5b:6c:53:45:db:14:f8:27:
                    d8:40:36:3e:91:61:92:e9:91:88:ad:cf:4b:b9:a4:
                    01:a6:34:93:88:0b:f0:bd:5d:b1:04:87:e9:c4:89:
                    71:f7:c0:34:d4:00:e8:5d:c7:92:2e:4d:c8:35:ad:
                    d4:f6:5a:c1:5c:29:43:e0:f0:49:80:74:18:89:fb:
                    37:4c:76:08:6a:a7:97:4f:63:b0:b2:0d:fa:a9:75:
                    08:14:5e:5c:96:50:9d:67:be:9b:d1:ab:50:8d:2b:
                    c4:d7:90:cc:a3:18:8a:ec:a0:55:76:23:76:23:8e:
                    66:0c:cc:ef:fa:2e:2e:0c:06:6b:d2:03:d9:7f:66:
                    3c:67:f3:45:e7:c8:01:8f:b4:b2:5c:1d:2c:05:a6:
                    6f:2b:9f:6e:9d:d0:e2:bb:e5:df:64:51:26:07:44:
                    60:5c:45:75:18:bd:cf:39:e7:a0:2b:ba:41:b8:44:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CE:AD:3B:EC:E9:6C:4C:D5:C4:58:D4:E3:2D:A0:C8:1D:F4:A3:B4
            X509v3 Authority Key Identifier:
                keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:25:72:fa:94:d5:39:58:48:bd:ed:14:91:dc:71:1f:c0:cc:
         5b:91:45:93:76:a1:bb:ad:a2:d2:95:60:80:58:65:26:e2:68:
         0e:40:a8:86:6a:48:db:a6:76:54:15:46:c0:99:c0:ee:87:8c:
         99:88:f6:d7:d1:c6:cc:03:5d:bc:e6:16:54:0a:0c:ab:82:5b:
         99:35:ff:c6:66:da:dd:d9:0f:e2:ca:90:ce:65:16:58:d0:df:
         83:90:9d:32:1c:69:ee:e8:01:b7:38:6b:51:7f:00:bb:97:29:
         fb:4e:f5:13:45:2b:01:b9:a2:78:f6:1a:14:0a:07:04:45:ca:
         de:5e:7d:98:b1:09:09:3d:48:49:9e:c3:b5:58:bf:44:13:95:
         a2:84:7b:b4:59:c2:09:48:96:b8:3f:22:de:a1:01:bd:1e:f1:
         ef:75:10:2f:4d:30:af:13:4f:b0:4e:84:a2:a7:17:e2:bc:28:
         6f:29:03:01:bd:21:e5:07:b6:e8:25:3f:1b:c1:b2:bc:91:f2:
         cc:bd:76:22:f2:bc:d7:8c:1f:b0:2b:0b:6c:6b:3f:2b:19:e5:
         3f:50:06:d1:19:8c:d9:47:85:3a:82:ad:e4:67:53:ef:9c:54:
         50:25:d8:76:43:42:5e:31:fc:2a:c6:cd:e0:95:52:ec:d5:9e:
         7e:06:f6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:32 2025 by rpki-client