Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File:                     IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier:          ngjn4U0wmqVHKLo0S6XWCsV0fq+MatpVqxOvFUBLCBA=
Subject key identifier:   D7:59:A8:13:95:69:D8:9A:CE:4A:A3:13:DF:1C:97:E8:1C:26:23:CF
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer:       /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial:       019770075B2C6C7AEEF78744BB0FFEC2DFBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number:          12C3
Signing time:             Sat 14 Jun 2025 20:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:19 +0000
Files and hashes:         1: IMotTLPla10plwqX_GResv1odqE.crl (hash: IuQ1S+ggZqrvX03gGSeOcdoqm10UH1hVGEW0Ib2+lRU=)
                          2: XkB9FyUrl_hEf3t16Nf8MwiEenY.roa (hash: 5GPl48iaR95a+Okk+L+GbhS4ryo9ZnK1AHkg6Sf4x5s=)
                          3: bSEsv80VTIqhxykqIB8M44nU7N8.roa (hash: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=)
                          4: mDAtJGSElDm2O92EFy5g2Ab4svc.roa (hash: 06wyeaq77omoVi1U61nSXVnjJJye2vIP4bDLXfzxENg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:5b:2c:6c:7a:ee:f7:87:44:bb:0f:fe:c2:df:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
        Validity
            Not Before: Jun 14 20:00:19 2025 GMT
            Not After : Jun 15 20:00:19 2025 GMT
        Subject: CN=d759a8139569d89ace4aa313df1c97e81c2623cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dc:94:77:5c:e5:a5:13:36:b9:95:83:f2:69:
                    ab:d6:f8:74:e6:c1:85:12:3a:e0:a4:bd:d0:65:7e:
                    d2:e7:ed:6b:e5:77:3e:14:c1:2f:91:39:ac:ee:2f:
                    bb:98:db:de:d3:3e:92:a9:2a:a8:97:e6:2d:fc:6a:
                    bb:14:1f:b8:92:bf:51:6b:f5:99:cf:d4:c2:b6:f8:
                    56:a0:b9:fb:32:b2:3f:48:03:98:c1:06:8f:9e:98:
                    b4:14:21:a7:81:a9:93:e3:71:71:74:fb:af:15:cf:
                    88:56:38:29:fc:2d:a3:f8:9a:c0:bf:4a:fb:66:12:
                    01:9e:a3:24:ba:15:4a:a8:7c:3f:f8:ab:b4:3c:f7:
                    cb:5a:60:16:cf:c0:10:a6:d1:31:c6:56:8c:e3:25:
                    d5:87:d5:d1:46:b4:01:68:6a:66:61:fe:f7:c8:2b:
                    9c:04:5f:2b:27:26:48:29:d6:62:f2:17:5e:74:c0:
                    e1:f7:a5:c7:68:27:5f:a8:65:49:95:41:16:c4:10:
                    8b:04:bc:e7:16:6c:e0:b2:ac:ab:f5:11:f1:7d:9a:
                    7f:17:ed:0f:04:00:da:59:2d:ce:ff:91:e2:dc:69:
                    f3:24:a2:64:0f:45:ea:43:54:42:3f:ef:33:f6:bd:
                    37:4c:12:db:85:ba:36:3a:f1:1b:0d:8e:81:4d:73:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:59:A8:13:95:69:D8:9A:CE:4A:A3:13:DF:1C:97:E8:1C:26:23:CF
            X509v3 Authority Key Identifier:
                keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:70:48:99:88:04:a3:74:1e:59:0b:cb:06:70:7b:cf:cb:91:
         d9:81:d0:2d:c4:0e:6f:d0:76:9b:65:d6:72:2c:64:5c:29:05:
         78:e2:b1:2a:24:9a:b8:5a:19:b6:64:ec:90:75:9b:01:17:69:
         2e:3a:cf:7b:cc:d2:32:3a:ad:d8:89:1f:c6:8e:39:c9:7d:50:
         90:d6:be:2c:52:14:8e:f0:3e:30:3e:c0:13:77:0e:86:d7:b3:
         0a:29:62:4b:42:c3:32:b0:e1:db:1f:d8:22:ca:88:7e:e1:b1:
         5d:7b:3c:1e:7e:6e:1d:03:a7:12:24:b3:03:66:02:44:f7:f5:
         a6:45:25:c7:ee:c2:34:f4:fa:9f:44:f0:e7:b5:1a:18:c1:0b:
         72:a4:e3:b5:2a:d0:7f:70:67:a7:28:60:46:df:95:a2:40:36:
         69:b3:63:4d:b2:5d:a8:04:1d:24:6d:15:f3:cd:ee:32:c7:cd:
         9e:6e:9f:9f:4a:f1:ea:77:41:a9:e1:4e:2f:44:d9:cf:bd:5b:
         09:a3:e8:dc:9c:a6:f2:c0:60:b2:a3:0e:8a:d7:11:2b:36:80:
         ef:41:0c:43:4f:e1:8c:61:5f:4e:fa:cd:ae:63:36:4b:5a:f1:
         c2:d4:d9:a6:08:36:e5:57:64:0c:0d:32:61:5c:ec:e6:66:83:
         54:bf:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:32 2025 by rpki-client