Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File:                     15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier:          sGpZhK7HLy3MgNPufTpFW6Ngft8fSaArICs51TN9Dm8=
Subject key identifier:   21:73:5E:B9:D0:42:E1:51:F8:94:D7:F8:A7:EF:B0:97:23:C9:F4:38
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer:       /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial:       01969372123A9DDB0CD12683A634C36948B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number:          0D22
Signing time:             Sat 03 May 2025 00:00:48 +0000
Manifest this update:     Sat 03 May 2025 00:00:48 +0000
Manifest next update:     Sun 04 May 2025 00:00:48 +0000
Files and hashes:         1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: ClXWB8qGlMgGREa5U83up+DUfksxyhefVm1HQf4a7wg=)
                          2: ZllkD09XX0UjmpDgviQyHJhN0tQ.roa (hash: cXj6wMyOUxluunshyfWaumFrSwMD+oIYxgPqs4SCj1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:72:12:3a:9d:db:0c:d1:26:83:a6:34:c3:69:48:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
        Validity
            Not Before: May  3 00:00:48 2025 GMT
            Not After : May  4 00:00:48 2025 GMT
        Subject: CN=21735eb9d042e151f894d7f8a7efb09723c9f438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:5b:0f:85:d1:7d:4a:80:e7:05:1d:34:13:
                    8a:5a:c1:e0:f8:8d:91:31:88:d4:b5:ad:c8:e6:98:
                    c4:b1:e7:4d:c7:ee:f3:44:29:fb:4a:58:67:0e:2a:
                    3e:9e:fb:22:3b:d2:4f:42:29:69:3d:7a:15:5f:59:
                    14:be:4e:fa:32:d7:d4:8b:45:62:ab:d1:76:8a:26:
                    a1:20:9f:dc:e6:c7:30:63:7c:04:50:05:6e:b0:50:
                    be:08:80:8e:10:1c:2a:24:1f:5f:d6:bb:50:bf:ef:
                    b5:a1:28:a5:a8:47:04:23:82:bc:00:ec:ef:71:a9:
                    df:1d:96:7e:e5:08:da:66:dd:44:c8:d2:3e:e2:08:
                    1a:59:c3:06:de:3e:23:c7:94:d2:28:72:56:60:a1:
                    40:89:be:87:e9:11:57:39:34:57:40:82:1b:fb:0f:
                    5b:e4:ef:84:a0:3b:83:6b:4a:cc:f9:b6:0e:7e:a3:
                    60:d7:d7:8f:25:18:3b:0b:c3:45:06:c8:28:bc:04:
                    26:51:42:22:25:45:04:72:a0:d5:98:12:c3:bc:69:
                    03:06:6b:41:ea:9c:e8:b6:3c:92:8c:31:d7:23:b3:
                    1c:76:30:ed:ce:61:ef:47:ee:cc:85:62:6b:65:5a:
                    58:57:e3:ce:19:9d:21:2e:01:65:8f:bd:8b:e5:b0:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:73:5E:B9:D0:42:E1:51:F8:94:D7:F8:A7:EF:B0:97:23:C9:F4:38
            X509v3 Authority Key Identifier:
                keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:9f:16:26:79:a6:1a:b8:37:91:f8:a3:8b:cd:cb:3b:70:
         f8:fc:6a:22:e8:e6:78:3a:0c:62:60:bd:58:90:62:ac:3f:75:
         71:44:03:2c:d2:58:a0:4c:22:bf:cf:61:2c:2f:4e:02:da:97:
         b3:f0:f7:de:d2:7e:58:29:23:27:00:1a:78:bd:38:c0:03:dd:
         0a:df:4a:7d:f5:81:51:77:10:b0:18:43:1f:d0:7c:d3:0f:ef:
         93:ca:fd:94:a1:71:fa:eb:7f:59:4c:53:a6:e7:08:ca:79:1c:
         72:f8:fa:9c:2a:1c:ee:b8:70:26:9e:b8:3c:3a:cb:02:ca:86:
         e3:ef:ac:3c:3b:50:54:75:77:6b:d3:58:34:c0:8f:38:3d:5a:
         7b:f0:ac:10:74:d9:c4:fb:39:a4:f1:d0:fd:5e:5a:18:c5:44:
         b3:80:3b:57:c3:a5:e8:40:98:8e:51:cf:c8:ce:45:7b:02:dc:
         57:92:56:2f:59:1a:0f:bf:c4:ce:28:3f:00:7c:c5:29:82:9f:
         6d:16:fc:ab:b2:0b:8e:bc:83:ca:ae:78:41:d7:33:b7:79:b4:
         7f:c0:19:77:3a:11:17:77:d0:22:47:f6:6e:87:97:2a:61:b0:
         b1:e1:86:79:2c:14:2b:f8:79:29:58:47:b1:43:d0:44:17:02:
         02:1c:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:58:56 2025 by rpki-client