Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File:                     tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier:          DzhfnTwyWHgkwnECQtvukEtzXppXaRgjxq7m/B+gSEI=
Subject key identifier:   15:A0:15:AC:C3:BE:F8:3B:20:27:D4:D0:B4:2C:19:4A:7C:52:88:72
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer:       /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial:       019783C5A60B18D7851BCDD02DDBBCA58832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number:          0F95
Signing time:             Wed 18 Jun 2025 16:00:57 +0000
Manifest this update:     Wed 18 Jun 2025 16:00:57 +0000
Manifest next update:     Thu 19 Jun 2025 16:00:57 +0000
Files and hashes:         1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: 5Op4JtGzIBfYfWe+ctliyRyiYbbaUdwUV2bnVkxP8VY=)
                          2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:c5:a6:0b:18:d7:85:1b:cd:d0:2d:db:bc:a5:88:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
        Validity
            Not Before: Jun 18 16:00:57 2025 GMT
            Not After : Jun 19 16:00:57 2025 GMT
        Subject: CN=15a015acc3bef83b2027d4d0b42c194a7c528872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:14:c4:3b:c7:c7:47:eb:aa:0e:bb:d0:0b:a4:
                    e4:fb:b4:8c:59:7b:e3:60:fd:ae:e3:95:f5:2b:59:
                    45:92:3d:36:d4:1f:49:f2:9f:06:8e:4d:90:75:0b:
                    93:d4:48:50:05:a4:6a:51:ba:35:80:a3:30:41:cc:
                    2c:60:3b:70:d4:24:d0:3f:b8:f2:0d:ab:af:2d:e4:
                    8a:d1:03:6c:6b:76:c3:1f:4b:68:c7:c5:fd:9a:e0:
                    b3:e1:21:64:4d:e4:52:53:9d:b1:3a:d2:10:f3:27:
                    b0:cd:0f:8d:65:7d:73:70:56:a6:87:9c:55:46:0f:
                    a2:b0:7f:d4:89:2b:c3:5e:fd:6e:14:61:96:c5:5d:
                    a3:db:d7:63:36:32:82:1d:0a:7f:27:0c:d4:d8:b9:
                    4b:3b:5b:31:cb:66:2d:dd:9a:f4:6d:0a:d5:65:1e:
                    51:88:ca:38:56:52:af:21:c4:72:84:62:12:b8:2e:
                    ac:ee:de:db:f4:27:ac:59:e1:18:87:a5:4e:22:5d:
                    fd:e6:a4:a1:3c:bc:9d:5e:7a:b6:00:85:88:4c:a9:
                    1b:08:12:ef:28:8d:a7:2e:7c:30:f4:32:0b:d8:88:
                    db:87:2e:6e:22:66:ff:d1:18:f4:0a:0b:41:17:99:
                    d6:1a:ad:e2:00:d9:7e:01:b1:ac:66:a1:11:6d:ab:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A0:15:AC:C3:BE:F8:3B:20:27:D4:D0:B4:2C:19:4A:7C:52:88:72
            X509v3 Authority Key Identifier:
                keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:65:b9:d3:a1:5b:90:e4:44:cf:68:b3:fc:c3:97:e8:d4:b9:
         89:44:50:1d:86:d2:df:97:69:eb:68:37:62:43:4f:92:44:9b:
         3e:e3:91:59:36:a2:39:f8:ee:b1:4c:26:8e:37:86:9f:b2:67:
         27:15:8a:55:b8:52:34:25:76:bb:e3:6b:27:eb:43:51:12:25:
         f2:74:a7:e5:bd:de:5e:3e:f2:4f:71:da:ae:8b:7e:59:63:20:
         eb:5e:94:19:eb:37:80:12:58:eb:40:b5:38:68:e5:8d:ba:d5:
         08:da:d1:d1:04:41:6c:17:1a:34:7b:37:62:04:e3:c6:77:4b:
         63:4a:9b:5f:7a:56:1a:69:3a:a1:b1:10:73:55:b4:99:0c:52:
         23:49:1d:f4:e4:65:f7:dc:b6:f0:1e:c8:34:a4:4d:43:69:c4:
         7b:9a:0a:2f:28:cf:15:72:e9:22:03:16:bd:7b:87:b6:a8:44:
         a6:c2:0e:f4:16:8c:36:bc:f2:ea:48:40:cf:79:0c:16:d5:3d:
         8e:5d:df:5a:83:75:8c:29:bb:7b:86:d6:fa:ee:86:d5:2f:e7:
         52:8e:d5:b3:04:f1:c1:a2:a3:5e:85:50:7d:20:45:71:b3:79:
         2e:fc:71:ee:58:06:94:de:a9:4f:6b:9c:1b:4d:22:7b:78:b6:
         2e:23:be:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:23:56 2025 by rpki-client