Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
File:                     ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft (raw, json)
Hash identifier:          vSkPegPxu5uAQ5fFIi3V6EPcPNWHd4sDHfn2RWdgy8Y=
Subject key identifier:   15:8C:B5:E4:02:D0:7E:72:F2:A6:B6:E2:C6:59:28:4E:B1:64:CC:1B
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Certificate issuer:       /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial:       0197722D08B8D5F53C79721C860C45E41968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
Manifest number:          1D
Signing time:             Sun 15 Jun 2025 06:00:43 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:43 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:43 +0000
Files and hashes:         1: ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl (hash: wlBy95u3WNKjVpUmAwLhRdcQV/wxqGm1htZDsUU1RPE=)
                          2: T6FOCyz_je-bCYNA14loRkLn-go.roa (hash: RTnOVvTVNPz5Tb8FJf3ztpbxOQkBZj4f/NkLYwSkf+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:08:b8:d5:f5:3c:79:72:1c:86:0c:45:e4:19:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
        Validity
            Not Before: Jun 15 06:00:43 2025 GMT
            Not After : Jun 16 06:00:43 2025 GMT
        Subject: CN=158cb5e402d07e72f2a6b6e2c659284eb164cc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:2d:a6:a1:b3:c0:f9:76:e1:55:df:3a:a4:
                    0e:5a:a5:18:c7:3b:be:a3:f4:a1:08:3b:a6:a2:29:
                    14:d6:50:06:3c:65:2d:49:0e:3c:f2:98:52:0c:45:
                    b5:74:09:fb:2f:01:7e:04:92:5c:e5:1f:63:9f:a8:
                    8a:39:c2:02:71:63:a8:93:2b:59:ef:f7:da:82:a6:
                    d1:28:b8:55:c3:18:45:2a:00:ee:09:a2:cc:f3:db:
                    51:1d:fc:5b:ec:a1:13:7e:06:a5:42:a5:f5:71:ef:
                    24:4c:4c:81:da:2f:6b:19:c6:21:9e:50:ef:48:f3:
                    c2:ef:00:06:c0:8c:fd:bb:4e:9d:0d:03:cd:3c:03:
                    1b:05:42:d8:9b:6d:d1:17:ac:0e:ca:82:65:8f:ea:
                    54:f7:af:f2:2c:b6:b9:6b:53:27:cf:81:a0:1f:96:
                    6d:cd:34:04:8d:02:a0:3b:d3:a6:14:1c:4b:a4:f8:
                    17:d2:44:71:6d:54:64:dc:dd:dd:c1:8e:30:38:0c:
                    47:99:58:b4:be:d4:4c:bd:42:6c:d9:06:cc:22:38:
                    7b:59:be:c1:86:fc:79:ff:b3:b3:0c:e7:40:d5:9f:
                    71:2a:a1:0d:f8:91:6c:e5:60:a7:78:8b:be:c5:25:
                    49:b2:a9:6b:f1:92:8c:7f:0b:34:6a:7e:c3:8a:5b:
                    a2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8C:B5:E4:02:D0:7E:72:F2:A6:B6:E2:C6:59:28:4E:B1:64:CC:1B
            X509v3 Authority Key Identifier:
                keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cd:79:0c:49:43:5f:2b:6d:de:4d:24:d7:62:0c:6f:16:8f:
         76:b8:dd:22:9f:d6:09:4e:06:18:97:12:1c:e4:5a:25:21:ca:
         04:4b:df:96:f1:20:57:3b:b2:e4:d2:6c:c9:66:ad:64:81:fb:
         a1:f1:cc:18:16:81:9e:92:bd:4b:7a:2c:55:6a:64:03:89:e2:
         de:73:34:4b:82:de:1b:18:d2:6f:f9:bd:35:4e:21:d3:3b:68:
         18:94:1a:9e:ed:91:f2:ca:3d:22:56:6c:ec:dc:bc:61:7c:87:
         33:91:ae:5f:5c:e2:df:d8:fe:11:8c:d5:79:e9:40:50:7d:ea:
         0e:6b:b0:6e:d9:40:e6:6f:bb:38:66:d5:bd:30:2f:e9:88:9c:
         d9:81:d3:12:07:f7:56:e1:36:0b:be:a3:e4:46:00:48:83:8a:
         ac:25:89:64:ab:30:cd:33:9f:db:ad:5d:25:a5:93:a8:bd:8e:
         18:c7:38:b8:06:94:04:5d:54:39:2d:ac:06:2c:be:47:f8:e8:
         c4:b3:0a:ae:ee:0b:31:82:8d:7c:e2:57:ef:5a:e6:f0:58:87:
         65:87:bc:98:21:f0:ab:0f:1c:94:42:96:70:88:8c:72:6d:6c:
         a8:68:d3:f7:42:58:9b:d8:10:27:05:da:03:46:99:42:3d:85:
         62:de:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:30 2025 by rpki-client