Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File:                     0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier:          ScNYqIDC7Blev+iR6ld0XTuZWaoW1rZRAvnYIjo8aO8=
Subject key identifier:   1A:6D:85:BF:7D:DF:E4:5D:46:E4:FF:30:A1:18:CD:0F:19:6A:8B:95
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer:       /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial:       01976D0667B999331558D604DDF30C0EEACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 06:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:25 +0000
Files and hashes:         1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: kLAYEJfgBF73nyXkcvUdkLR7nvbynMBFh1ZyNqwREno=)
                          2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
                          3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
                          4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
                          5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:67:b9:99:33:15:58:d6:04:dd:f3:0c:0e:ea:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
        Validity
            Not Before: Jun 14 06:00:25 2025 GMT
            Not After : Jun 15 06:00:25 2025 GMT
        Subject: CN=1a6d85bf7ddfe45d46e4ff30a118cd0f196a8b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:18:e7:96:21:aa:09:a0:e7:21:db:45:f8:
                    bb:01:8c:20:3a:8e:64:a4:39:81:ec:ee:f0:62:cc:
                    2e:13:03:d5:43:6e:b8:e0:dc:00:ea:fa:dd:b6:35:
                    1d:1e:ff:65:84:99:4b:f3:43:06:29:f0:50:0a:81:
                    4b:05:db:e9:51:01:ea:af:01:66:3b:c9:80:e7:ce:
                    66:ae:16:ea:91:15:94:13:61:82:c5:f2:14:2e:ce:
                    3f:3a:c5:fe:bd:f6:13:6c:59:2e:3f:6f:31:a5:06:
                    09:9a:7d:a6:ef:f9:35:b0:a6:4a:0b:6d:94:ea:3e:
                    ef:c6:77:a4:4f:79:c9:3c:66:ff:6c:cc:30:54:db:
                    b2:06:a4:23:08:4a:1c:e9:e8:ce:2e:86:13:56:60:
                    cd:4c:40:63:a3:a1:6c:8b:49:2f:0e:ea:80:97:81:
                    ee:90:7d:21:c3:da:84:40:6f:85:a2:ef:b2:df:16:
                    c1:8c:87:77:59:43:d8:61:53:a2:7d:b4:e1:cd:97:
                    9f:39:43:a7:59:d1:98:19:f5:6b:f7:6b:34:e1:d6:
                    2f:42:83:57:1c:e6:79:4a:32:1d:9b:ff:c1:8a:11:
                    98:46:3f:be:16:f1:09:bc:39:e6:7e:ff:f9:28:47:
                    42:24:fb:56:d8:66:42:72:24:97:2d:a8:02:ca:16:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6D:85:BF:7D:DF:E4:5D:46:E4:FF:30:A1:18:CD:0F:19:6A:8B:95
            X509v3 Authority Key Identifier:
                keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:af:f1:cd:dc:8a:86:78:ae:5c:89:a2:6f:ba:40:23:a7:1f:
         09:0a:71:af:2c:50:b9:67:7b:c1:25:cf:57:97:ef:72:bb:83:
         39:fa:f4:44:af:b8:55:7d:75:39:2d:ab:1e:bd:3e:bd:3b:4d:
         a5:08:56:68:f4:e2:72:05:66:b9:84:90:fd:cb:ea:38:e2:5d:
         d5:8a:ab:2d:9d:7a:37:d1:40:de:c1:24:42:ad:5f:12:91:26:
         03:62:00:f1:85:aa:98:06:3e:bc:67:69:fe:b1:0f:bc:c6:20:
         66:df:da:bf:ec:9d:bb:2a:d5:93:7a:92:5d:80:01:37:e1:c2:
         7c:b5:24:90:90:4e:ad:9f:7f:ea:70:16:18:eb:46:6a:d9:e4:
         42:e2:8e:cc:ce:65:40:63:56:26:8b:41:34:71:cb:bc:a4:96:
         9a:af:61:fe:27:79:ea:ff:85:6a:be:16:74:f3:d8:3c:6f:80:
         af:23:37:c2:70:57:8c:b6:99:a5:cf:c3:11:a4:18:e3:21:40:
         7a:b9:b3:c8:80:a3:f4:6a:ab:69:e0:dd:c6:83:bb:16:90:4f:
         5c:3e:5c:e1:5a:9f:2e:a5:0c:76:43:37:4b:b9:35:3f:7b:14:
         70:da:ba:73:05:29:a6:ae:c5:df:3d:d5:f5:ca:f0:03:3f:34:
         8f:9c:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:42 2025 by rpki-client