Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File:                     9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier:          lPdef5ZmtErweRAkU9kTtdt8ycZ255E2EJg5STO4O5A=
Subject key identifier:   01:55:C7:D4:2B:1C:53:A1:22:1A:F6:EF:22:13:BF:A0:5C:F0:FA:73
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer:       /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial:       01976D3D860240689192F282B9A3B136D3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number:          142C
Signing time:             Sat 14 Jun 2025 07:00:37 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:37 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:37 +0000
Files and hashes:         1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=)
                          2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=)
                          3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: zelyfEnSOWOL4CL5qdj2JHSPhA4N4THBx8ag8p04E6o=)
                          4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=)
                          5: QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa (hash: JHsP9SRn0z74odoNftVjEsPtUj5FZk/4tMrWE3fymP0=)
                          6: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=)
                          7: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=)
                          8: YcddWRNkcNBtg2GRMDNHHw9mFJ4.roa (hash: G/xopPnzXkAvpcbYnZmulnHRu0yyJM+YK09jXPq59tw=)
                          9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=)
                          10: vyCGGnsFvqliTEx12jYp6lwRAek.roa (hash: l5raYrCV5cZJwg0Ik6+6Zpw1vWa9xl0dKA9pFd0Ksa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:86:02:40:68:91:92:f2:82:b9:a3:b1:36:d3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
        Validity
            Not Before: Jun 14 07:00:37 2025 GMT
            Not After : Jun 15 07:00:37 2025 GMT
        Subject: CN=0155c7d42b1c53a1221af6ef2213bfa05cf0fa73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:3b:6a:1b:37:bc:4d:46:9d:a3:fb:d2:0f:
                    9b:5f:d0:c9:3c:85:74:85:95:a6:6b:69:1a:4e:76:
                    b6:12:f1:67:90:ff:65:98:8e:26:a9:2f:72:b0:7b:
                    6e:a6:e2:a2:d2:d2:76:eb:32:2b:c0:66:5c:9f:68:
                    46:0f:dd:a4:84:43:17:60:5b:22:57:8b:8d:92:48:
                    ac:20:4b:96:69:97:59:de:9e:ab:62:3f:25:fe:75:
                    11:fe:a4:9d:eb:aa:e4:f4:d7:5b:30:62:bd:97:2e:
                    05:3e:d5:91:06:e1:19:cc:68:97:89:21:de:5d:84:
                    68:fe:1e:2d:4d:18:ac:5b:c5:98:3c:de:52:31:7b:
                    51:bc:9b:02:85:bf:a9:4a:e6:ca:33:ab:5d:e7:82:
                    72:1b:03:21:4c:7a:9a:e7:95:75:67:c9:5a:64:aa:
                    d9:32:18:d1:a1:0b:54:f9:73:cc:80:b9:f1:07:38:
                    44:1d:54:fe:55:53:b2:18:1a:a9:ca:6d:71:ec:6a:
                    4e:c9:69:62:06:68:f4:f2:12:03:b5:5d:9f:2d:9d:
                    63:7f:9c:60:65:18:2f:6a:46:66:f7:67:a4:f2:91:
                    95:7f:c9:3c:24:26:dd:9b:e0:62:51:e4:e9:52:5a:
                    64:01:c4:77:d4:b4:98:1b:20:ca:ec:06:f6:60:5a:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:55:C7:D4:2B:1C:53:A1:22:1A:F6:EF:22:13:BF:A0:5C:F0:FA:73
            X509v3 Authority Key Identifier:
                keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:08:ae:1f:8a:a3:b3:b7:ed:c1:1d:df:e2:f0:f0:d1:b4:
         81:cb:74:db:5a:fb:34:70:c5:84:9a:09:71:0c:47:88:8e:06:
         d2:27:9e:ac:aa:d1:9f:de:cd:96:b3:e8:8d:c0:b5:74:2d:ab:
         bd:bd:20:b1:17:f1:41:ae:86:21:bd:0f:22:f7:45:d6:e4:a3:
         f8:e3:42:aa:9f:aa:cc:b6:62:47:72:c3:9b:d9:50:7e:b0:aa:
         ec:16:86:f6:de:33:5c:a4:3b:ab:da:57:75:89:41:47:91:f5:
         72:dd:49:b0:29:c0:72:29:d6:68:8c:47:de:ff:74:e0:1d:7e:
         6e:ba:4c:9b:2c:de:d8:7e:a9:b4:7c:f0:89:fa:15:55:2a:9a:
         07:30:71:8b:01:d9:37:ee:cd:5b:b8:7e:e0:f7:37:34:7e:25:
         e6:ad:ad:a2:00:c9:25:c2:47:c9:83:03:bd:0b:d3:57:55:ad:
         ee:4c:c8:3a:9f:c1:eb:2b:4a:33:3c:3d:4f:13:a7:bb:04:69:
         12:46:2e:49:17:ed:79:32:32:d5:63:5e:1c:fc:c5:6d:28:25:
         a7:fb:d5:c0:22:84:60:8e:73:76:d1:9d:12:90:21:e1:e9:f8:
         54:9b:37:b0:28:c8:ac:a6:82:e8:b6:64:a1:bd:49:4b:dc:65:
         d6:5a:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:43 2025 by rpki-client