Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File:                     Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier:          dVB1o+JQ9n+SygaCMe1F9FX/oVFBJCu7rpOI8ficwRo=
Subject key identifier:   94:9F:E2:22:35:C7:D3:17:02:6D:E0:A4:5E:D7:33:DC:14:16:31:FA
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer:       /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial:       019787D91D244AB8D050908CEAF4CC91E91F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number:          15B0
Signing time:             Thu 19 Jun 2025 11:00:42 +0000
Manifest this update:     Thu 19 Jun 2025 11:00:42 +0000
Manifest next update:     Fri 20 Jun 2025 11:00:42 +0000
Files and hashes:         1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: W84JdT26gdEb8AfaLnftiw8w2/UUnaU9GkJi4GonEOI=)
                          2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:87:d9:1d:24:4a:b8:d0:50:90:8c:ea:f4:cc:91:e9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
        Validity
            Not Before: Jun 19 11:00:42 2025 GMT
            Not After : Jun 20 11:00:42 2025 GMT
        Subject: CN=949fe22235c7d317026de0a45ed733dc141631fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:c7:c0:bf:4b:92:8b:b2:75:8b:4b:07:74:
                    ea:01:53:6e:ed:99:c2:1f:08:99:33:4b:bf:b6:31:
                    40:f1:35:f0:c9:42:48:84:cc:63:f4:83:15:35:e8:
                    b8:12:fd:90:87:56:5b:37:d8:85:46:62:1f:14:3b:
                    ba:7b:4b:9e:15:7d:b1:17:4f:27:f6:ac:ac:64:cb:
                    c6:47:76:df:51:92:2d:17:3b:2c:6d:67:83:79:99:
                    69:f7:ea:ec:db:19:2f:fe:83:8b:e0:63:6d:f0:1d:
                    83:8c:01:5e:49:03:b2:d3:6f:9b:fc:ea:e6:8b:9f:
                    2d:85:29:48:0d:60:06:18:e8:8a:c7:72:6e:7f:5f:
                    4e:35:8a:82:f0:86:54:78:97:7a:f9:83:1f:ba:e6:
                    53:19:a1:95:10:57:e3:e9:20:44:01:2a:19:e0:56:
                    fc:77:33:90:fa:84:e4:0f:8c:8e:8c:fa:c3:1a:61:
                    e0:1a:1b:62:b5:7c:96:6e:16:33:e0:8c:ef:e3:b9:
                    0a:db:9d:d0:c7:c4:75:db:6a:9f:52:f3:02:f8:b1:
                    bd:09:da:5d:01:42:c8:26:af:b9:66:45:b2:ef:3f:
                    0e:39:31:b9:14:93:64:c5:d2:01:91:be:78:8d:0d:
                    ad:e7:8a:df:69:a2:5a:be:49:ed:04:8b:06:20:9b:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9F:E2:22:35:C7:D3:17:02:6D:E0:A4:5E:D7:33:DC:14:16:31:FA
            X509v3 Authority Key Identifier:
                keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:7a:64:05:10:bc:54:a5:e1:a5:f7:a6:7f:54:fb:86:ca:97:
         c7:a2:43:96:61:77:c4:31:4f:80:9f:2d:7f:e0:b6:cd:02:60:
         5e:85:32:90:b2:68:a1:bc:00:8f:8b:2e:d5:47:f0:90:2e:f6:
         0e:55:bf:46:84:b9:ec:2c:20:ca:0d:cc:53:b6:b1:9c:83:5c:
         b9:2f:8c:7e:df:e2:f4:ff:f8:8a:b4:b4:c6:7f:3c:86:b2:79:
         12:3d:4b:b1:fe:e3:4e:6b:70:9e:31:e4:5c:f2:34:d4:ab:c2:
         de:8d:78:c9:3b:1e:9d:2d:61:cd:a8:38:69:0d:30:6b:b5:c1:
         05:43:49:c4:42:05:8c:cc:9b:88:70:71:da:7f:bf:48:1e:dc:
         e1:e8:78:a0:0d:3e:66:03:12:fd:28:2b:aa:cd:0b:f6:36:62:
         b6:38:3e:4f:e4:b9:5f:93:31:9d:e7:96:ea:c6:1d:3f:92:48:
         76:cc:e0:c6:98:4f:1e:98:14:50:8c:6e:53:5e:cc:5b:f0:25:
         1a:e4:bb:d1:7b:04:10:1b:5c:e2:be:f9:8d:b9:4c:f8:21:7e:
         34:7f:a5:bc:74:91:20:df:58:d2:e9:57:f5:5b:ef:70:9c:a6:
         05:91:7a:90:d3:04:bd:4e:a6:cb:5c:de:54:3d:72:e9:9c:a8:
         4a:c4:12:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:53:05 2025 by rpki-client