Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File:                     1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier:          CtG0x97CdCezUBH29vTJg55Vk9z0rly/VquLVTk+X0w=
Subject key identifier:   73:9F:EB:EE:AA:7F:FB:EB:69:1E:FA:D6:8F:B1:8C:F9:8E:3C:78:E4
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer:       /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial:       019768BBC458AEDDAF9DECEA3C133C0F8D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number:          15B5
Signing time:             Fri 13 Jun 2025 10:00:25 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:25 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:25 +0000
Files and hashes:         1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: dFABVoqNxF4Gqo7DpxvX+d/fm2FVbPZAqeYbCoJcdCs=)
                          2: BLXtsOUKyjdzK6aUOnCi71Mjrfo.roa (hash: 5RpGYLrJit43EcAURB9h1zI7H1uWOJSb9Qx7yrRnckQ=)
                          3: V-GIRa4RhBB5m370Enq6or4JiHM.roa (hash: UFAtbOA2t0xq9xi4Z+YcT3sVB/rcW17aDpzABEqf3T0=)
                          4: VrkSL_uLOzBJaQboxgGZhD5yRHs.roa (hash: uhelo2jKYMgJm7cPXMljK9cyP0e88kVGFreD1+QpSuE=)
                          5: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
                          6: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (hash: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=)
                          7: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (hash: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:c4:58:ae:dd:af:9d:ec:ea:3c:13:3c:0f:8d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
        Validity
            Not Before: Jun 13 10:00:25 2025 GMT
            Not After : Jun 14 10:00:25 2025 GMT
        Subject: CN=739febeeaa7ffbeb691efad68fb18cf98e3c78e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:e8:6d:5d:9e:35:58:0b:e1:e7:fb:c6:41:
                    86:57:c2:44:7c:55:ce:0d:3d:ea:6d:d5:f3:ff:09:
                    1f:de:aa:2d:1e:28:76:fa:15:a7:c9:0d:96:bd:f1:
                    26:48:f3:84:45:19:42:51:87:f3:02:31:63:14:7c:
                    89:4a:0c:f3:cd:2a:9d:14:e6:c6:aa:fc:5f:5e:dc:
                    a7:51:3c:ff:4c:73:6b:e5:e8:09:e6:ed:e9:f0:12:
                    ae:d6:52:50:2f:81:54:67:2e:91:84:74:2e:f2:65:
                    b5:9f:23:a8:89:1b:c8:68:09:65:0d:bd:61:37:06:
                    99:1c:23:3e:78:54:01:d0:38:ed:20:ec:96:6b:69:
                    8b:5b:9f:e7:fa:83:ba:72:fc:6f:86:e7:cf:0e:73:
                    fa:42:07:3f:2c:6f:e8:83:36:2e:77:d2:74:ae:72:
                    cf:f3:74:28:8f:35:4a:54:11:c1:c1:fe:fa:d9:df:
                    2a:77:eb:9f:29:b2:42:eb:6b:7b:dc:fa:e0:bd:08:
                    0b:2b:25:12:0b:51:0f:1b:14:e1:5e:c9:71:e2:6c:
                    26:3e:78:17:b0:a9:ae:eb:23:03:30:99:86:d3:14:
                    9b:b0:73:48:a6:35:5b:c9:66:fc:36:1b:ef:bf:00:
                    b8:90:1d:c4:b2:77:5e:34:6f:55:12:0b:1b:33:fd:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9F:EB:EE:AA:7F:FB:EB:69:1E:FA:D6:8F:B1:8C:F9:8E:3C:78:E4
            X509v3 Authority Key Identifier:
                keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:03:8a:2e:b8:3d:70:f2:62:33:31:75:ca:f8:ed:57:22:5f:
         2d:1d:8e:45:87:ce:74:fd:94:04:8d:59:46:76:c7:d8:a7:7f:
         ee:da:ac:90:b1:55:99:c8:91:5b:37:0a:92:f7:3c:dc:26:c0:
         7b:09:0a:f4:9f:d4:40:b8:7a:20:85:6a:76:2a:e7:c5:a6:ff:
         b5:ac:93:4a:5b:85:35:f0:13:03:46:68:a6:d9:65:df:f4:4b:
         f7:2d:88:bc:9a:33:58:fb:96:b5:f1:0e:d4:99:d1:02:f9:43:
         ee:c0:27:4e:c0:dd:57:0a:98:1b:f8:ae:e3:cf:dd:24:13:c5:
         ce:d7:70:a3:a2:03:1e:da:d1:83:b2:16:f3:20:d6:e2:15:25:
         66:64:97:d3:cc:1f:20:8e:08:1a:5d:73:79:24:c5:bd:d7:0f:
         76:fd:69:55:3a:fe:81:5d:53:66:8c:ca:26:71:c2:2f:56:ec:
         c4:72:a0:72:fb:b6:d4:d9:16:03:dc:f1:89:0d:89:6c:ad:3a:
         63:b5:11:6f:6a:8f:36:2d:b5:01:11:d3:6c:21:e3:38:27:c4:
         68:27:2c:05:4c:fb:a7:93:82:be:d6:9c:b3:60:15:d5:e6:06:
         bc:75:09:33:62:58:bf:1a:e8:70:3d:1f:4f:e1:d7:ca:02:85:
         6a:8c:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:55 2025 by rpki-client