Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File:                     0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier:          4gmwgXGN2MB+ariZj22lrpzVyhXma2nbhmlGN+oPjY0=
Subject key identifier:   63:A6:01:3F:B2:F1:D6:2A:95:53:88:79:32:DD:87:82:94:8B:15:F4
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer:       /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial:       019769CE7E5B014F450BB07C34B3B8E383AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 15:00:29 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:29 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:29 +0000
Files and hashes:         1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: Sg+CcUl/sfmGsvU0EstO33IEY8Alu5xPPw3ylSQCFas=)
                          2: irNcQLmJh11TGBELw5uQP7kOVJE.roa (hash: R7pIQc58X7S0CJk6seUtKX1n/5bjuhfl7ShC4vfuTCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:7e:5b:01:4f:45:0b:b0:7c:34:b3:b8:e3:83:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
        Validity
            Not Before: Jun 13 15:00:29 2025 GMT
            Not After : Jun 14 15:00:29 2025 GMT
        Subject: CN=63a6013fb2f1d62a9553887932dd8782948b15f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:d5:ce:0e:b0:70:69:ef:60:4a:4e:db:db:
                    bd:88:c6:30:26:e2:89:1f:25:5f:1d:a1:a7:27:58:
                    fa:74:c8:eb:17:e8:ac:49:7b:5f:84:a3:fb:49:81:
                    4e:8e:02:1e:85:40:b7:03:c7:16:33:50:ab:81:53:
                    c4:3a:d0:95:11:fe:1b:f6:a0:fd:ba:ea:5d:3b:1e:
                    75:d6:b5:a4:67:79:b3:61:c3:37:15:6b:5c:fe:fc:
                    90:98:5f:63:c0:12:02:28:b3:8d:39:9d:de:07:e3:
                    1c:64:b4:aa:b5:1f:04:0d:f3:b6:3d:f5:16:a6:11:
                    47:e4:2f:9d:dd:49:eb:05:77:55:fe:2f:3f:d0:0d:
                    d0:86:1f:16:09:48:0c:aa:97:0b:a4:03:68:01:26:
                    8c:b6:e6:14:c6:61:57:6e:12:91:96:82:cd:04:08:
                    fc:eb:94:4e:51:e9:54:9f:b7:db:c5:5d:3a:9d:87:
                    7d:e2:f3:48:bc:9a:88:c4:48:87:b6:e8:f9:df:a9:
                    a2:05:c8:95:45:1f:e9:35:a6:ab:8c:3e:02:3c:00:
                    c9:66:71:16:be:b0:e9:98:c7:67:2e:b1:ba:90:5c:
                    6e:db:7a:76:19:dc:14:b2:f2:a5:9f:d4:17:c7:f1:
                    9b:f6:2d:29:f2:85:ba:8d:98:2e:5b:02:41:97:3c:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:01:3F:B2:F1:D6:2A:95:53:88:79:32:DD:87:82:94:8B:15:F4
            X509v3 Authority Key Identifier:
                keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:74:06:09:36:c1:60:82:a3:8b:6b:ae:43:d3:e6:3f:18:27:
         09:38:1a:38:b1:72:4a:ae:23:c5:e0:9f:10:e6:65:e2:7f:af:
         9b:70:69:a0:2e:4d:4d:13:14:08:20:34:55:63:f4:e8:e0:ab:
         b6:bd:8d:7c:2f:78:07:69:56:bf:99:b0:09:c6:26:12:8c:e1:
         67:34:a1:df:59:f2:f8:3c:29:7d:73:f2:1d:68:b6:ff:d6:00:
         09:f0:d5:a0:f1:81:36:a2:93:97:9f:7c:dc:a2:90:f7:e7:16:
         27:41:5f:30:08:09:04:05:9a:48:44:99:0b:54:65:43:d2:eb:
         1e:e1:e7:83:78:50:e9:a3:db:47:9a:10:f1:aa:98:77:a6:9b:
         f7:c1:41:76:9f:ce:c2:05:ad:fe:e0:79:7b:12:ed:b0:10:ac:
         86:d5:44:0f:e3:d6:39:43:ef:e9:9e:a1:a2:16:3a:9a:cd:6f:
         27:f9:32:79:17:b3:1b:b9:21:18:8e:44:f7:96:d0:76:dd:65:
         d7:d5:ff:a1:6c:44:fe:94:fe:ee:41:be:ce:0b:f5:00:9a:59:
         04:78:a7:c0:95:8b:b0:6d:b9:bb:22:03:0e:9c:9d:39:25:de:
         52:20:62:a2:ca:f8:71:8b:bf:6c:6d:d1:25:c3:8e:e8:08:58:
         c6:fe:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:33 2025 by rpki-client