Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File:                     0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier:          0v28RwihpnXongXGW6FPETqMhQM5z0yAtvhGbROlcMI=
Subject key identifier:   13:44:D3:43:04:D8:09:E3:B6:E7:E9:02:6E:F7:D6:7B:A2:01:74:93
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer:       /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial:       0197903765963A91A0FF276B74B86231DBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number:          15A2
Signing time:             Sat 21 Jun 2025 02:00:38 +0000
Manifest this update:     Sat 21 Jun 2025 02:00:38 +0000
Manifest next update:     Sun 22 Jun 2025 02:00:38 +0000
Files and hashes:         1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: LRBio7Q56kOUkaZysP55b9IR6yM/9mcoFtGLpiHOlF0=)
                          2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Jun 2025 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:90:37:65:96:3a:91:a0:ff:27:6b:74:b8:62:31:db:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
        Validity
            Not Before: Jun 21 02:00:38 2025 GMT
            Not After : Jun 22 02:00:38 2025 GMT
        Subject: CN=1344d34304d809e3b6e7e9026ef7d67ba2017493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:45:a6:fe:38:a7:75:50:d5:f4:d7:78:b3:
                    c2:1b:cc:f0:a5:48:16:1a:53:80:89:66:00:2f:4a:
                    5b:1b:f3:b7:de:bb:cc:47:78:84:a0:12:e3:30:44:
                    50:4b:20:f6:b5:6d:ca:bb:cf:50:06:15:d9:a0:56:
                    88:66:13:97:a4:1b:5d:c1:5e:7a:d9:61:65:a5:2c:
                    82:bc:d4:32:f5:2e:79:98:78:a9:96:2f:1e:61:a7:
                    d6:23:11:46:5a:fe:3b:12:c6:e7:17:b0:e4:e4:ba:
                    ad:07:77:fb:12:9c:2a:b2:55:fb:6b:19:8b:40:a1:
                    b9:a2:35:e7:6c:85:d9:01:b4:bf:68:1c:6c:92:53:
                    7d:80:08:9b:e6:c6:aa:a5:85:12:3f:15:cc:82:0b:
                    04:fc:08:59:21:fa:1e:3a:30:21:aa:0b:08:17:51:
                    9a:96:c1:fe:ee:9d:38:6c:60:30:31:d2:44:30:90:
                    c5:3c:37:39:1e:b3:e7:5e:a6:ad:d6:9d:c0:b1:bb:
                    f4:ea:ab:48:8d:eb:f7:68:44:21:6a:41:e4:bb:9f:
                    95:6a:13:75:2c:6c:97:63:c0:f3:7c:c8:99:4d:20:
                    52:c3:90:6c:fe:e4:c2:8f:8a:c0:45:27:9d:1d:2e:
                    db:a1:4d:93:30:a3:d8:c5:14:de:70:27:e1:e0:66:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:44:D3:43:04:D8:09:E3:B6:E7:E9:02:6E:F7:D6:7B:A2:01:74:93
            X509v3 Authority Key Identifier:
                keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:39:67:9e:84:e2:59:76:fd:8c:86:a3:14:21:24:78:b2:
         5b:53:1e:be:03:22:3c:0e:cb:2d:57:1a:0a:53:8c:ae:4d:87:
         5c:28:5d:6e:3a:89:f6:22:40:cd:6f:0f:de:ee:81:c9:d3:40:
         7b:86:b3:e7:6f:5b:f3:41:cd:f1:ec:03:c3:b8:ee:48:ea:70:
         a4:81:32:aa:5e:2b:aa:14:f8:fe:99:b9:6f:ab:14:25:16:9b:
         5c:af:a1:57:0f:2c:b6:dc:57:61:0b:dd:f7:6a:7d:72:2e:25:
         10:f1:56:e8:da:df:e8:16:7d:8e:6d:4c:03:2f:67:fd:21:0e:
         c0:49:44:06:d2:2f:ef:31:43:41:91:33:93:75:a7:0c:3d:e8:
         01:ae:37:50:df:9b:1b:c5:76:11:5d:1c:74:0c:14:99:d8:0c:
         e3:0e:fe:a8:60:76:4d:18:32:28:79:fc:87:97:70:11:e0:af:
         b8:da:53:fa:0b:ca:13:8a:8f:e1:69:2f:d1:98:dc:31:1c:67:
         ed:0a:73:41:68:d3:02:dc:87:be:45:b3:1a:dc:29:32:a4:97:
         92:90:e9:80:e1:be:07:c0:3c:0c:af:c8:94:b2:bf:c8:84:c9:
         8e:81:fa:36:84:99:69:ab:fe:a0:f2:ec:12:48:a4:74:b4:70:
         a8:d1:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:18:17 2025 by rpki-client