Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          hL9IbpKjcKe1yG4bmnJGIrljIUPR3lx1hgJ6w3A8ajI=
Subject key identifier:   EF:03:30:1A:08:A5:63:40:6B:78:70:35:BE:ED:ED:AD:10:92:1A:24
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       019771515F1AE89515E5E12F3949F965A7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          0D1B
Signing time:             Sun 15 Jun 2025 02:00:47 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:47 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:47 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: VHtB1U1KHFVe0aAgAV03gJExsIffunx842YXZI9kb4E=)
                          2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:5f:1a:e8:95:15:e5:e1:2f:39:49:f9:65:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: Jun 15 02:00:47 2025 GMT
            Not After : Jun 16 02:00:47 2025 GMT
        Subject: CN=ef03301a08a563406b787035beededad10921a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:64:12:e0:46:91:f2:a1:7b:c8:8e:d5:d7:
                    53:c9:2d:72:10:ce:29:6a:09:05:8a:80:dd:19:8f:
                    50:72:94:3a:54:4a:98:8e:e2:25:8d:93:8a:3a:86:
                    d3:c3:ee:18:66:a4:24:b8:d7:54:f7:7f:0a:e7:b1:
                    90:df:94:87:03:96:e8:80:36:a8:0e:e9:33:41:df:
                    72:98:54:ac:cc:60:46:11:6d:77:d8:c0:dc:66:41:
                    82:87:fd:a0:e7:d8:2e:6c:65:d9:5d:3e:f9:38:2c:
                    44:52:71:6a:9d:1c:32:c6:44:5b:c8:20:6e:3e:5e:
                    b5:49:19:9c:2e:00:21:18:61:63:0b:a6:8d:78:70:
                    00:07:08:2b:e0:00:f9:7a:4a:31:78:b5:24:0f:39:
                    7f:51:ac:6b:53:4e:13:86:3b:9f:22:24:30:9f:8c:
                    3d:79:f9:28:50:34:76:3d:e3:06:c2:23:fd:87:47:
                    f5:11:d5:be:bf:3f:45:0b:10:cb:3e:28:1d:2c:29:
                    b8:78:48:e9:36:9b:af:48:60:dc:e0:26:75:d3:6e:
                    7f:d9:12:29:42:21:28:68:f5:2f:5b:c1:f9:2f:16:
                    33:77:b7:4a:0d:18:74:c9:28:75:1b:40:1a:1c:ac:
                    3a:88:c5:77:b8:62:92:98:a4:e5:04:46:57:a7:a9:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:30:1A:08:A5:63:40:6B:78:70:35:BE:ED:ED:AD:10:92:1A:24
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:6f:78:7d:ac:44:9f:76:3e:f5:e9:08:4b:93:63:4d:97:
         93:10:90:68:3e:d1:12:50:17:af:9a:d7:5e:f0:89:dd:a3:9b:
         aa:2a:30:f8:bf:53:e3:a2:79:fe:79:9e:98:ff:0a:7f:f9:e1:
         9f:89:51:bc:12:ea:61:17:68:11:64:53:85:09:2f:b3:ce:d2:
         7e:77:6c:d8:8a:12:6e:40:43:51:e8:f5:70:f8:ed:26:7b:de:
         d9:f8:9a:92:e9:98:7a:76:06:43:b1:0c:73:c9:e1:02:b5:19:
         97:69:c9:8f:ed:75:65:dc:f0:50:34:3c:c3:0f:86:77:db:60:
         5d:28:ea:e5:0c:9e:3d:5b:5c:02:8d:e4:34:55:4f:bf:91:84:
         8c:df:31:9d:2e:df:56:ba:61:fc:9e:15:f9:70:4d:2e:77:a5:
         b6:4e:36:2f:e3:55:6f:2d:57:1b:3e:e5:9c:66:e2:e6:6e:1b:
         e3:ad:5a:4a:32:89:3d:8a:80:63:b6:8d:29:ef:b8:f4:cf:77:
         fb:71:17:69:ae:d5:66:ea:c2:8a:68:22:29:aa:0b:ea:c3:c2:
         de:36:53:90:a6:70:47:c1:dd:28:06:0b:96:14:bf:1e:e3:b1:
         18:66:88:b0:b0:2a:6e:c9:37:a8:35:ae:7e:90:4c:86:61:69:
         e0:de:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:57:29 2025 by rpki-client