Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File:                     0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier:          a0RX8m8xEFBgFlrlMOFZBJnS9OaCNjLvuR0OdG78ELU=
Subject key identifier:   82:36:1F:25:DF:21:96:4B:62:D6:30:E1:2D:E9:42:B9:6A:17:A8:59
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer:       /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial:       01984A09E780C77651519401385ECCA3C609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number:          15FE
Signing time:             Sun 27 Jul 2025 04:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:19 +0000
Files and hashes:         1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: yB2HaUrLOZaE4CRnosSlOqzTkoRtYhyucPY2bqXDjUU=)
                          2: NrSqEKUOU2XauV-i5XcFK6G4SDE.roa (hash: QbfLyNgfhw89ncOBcXtsqNeuurH1zO/6qaF1UEA+u6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:e7:80:c7:76:51:51:94:01:38:5e:cc:a3:c6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
        Validity
            Not Before: Jul 27 04:00:19 2025 GMT
            Not After : Jul 28 04:00:19 2025 GMT
        Subject: CN=82361f25df21964b62d630e12de942b96a17a859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:79:74:60:8a:4a:e5:4b:88:05:ae:f9:3e:
                    f2:27:ab:7e:f3:73:49:77:6e:20:8c:93:c6:74:e4:
                    96:00:fa:a7:fa:d0:55:38:c0:ab:04:b6:a1:d9:c2:
                    9d:56:8d:96:6f:f3:e9:8b:fa:bb:0a:2e:78:ce:d8:
                    f8:3d:a0:36:60:ee:1f:c1:d5:22:c9:7e:d9:10:66:
                    b7:f4:47:80:20:d0:8d:db:d2:40:56:39:1f:d4:22:
                    9f:bc:64:5d:d1:01:55:cb:c1:01:2e:ca:1e:68:bb:
                    8f:9b:d3:86:ff:2a:07:31:4f:c3:93:6a:8c:f2:42:
                    5e:70:ee:0c:df:99:bb:cc:24:89:19:e7:ee:e0:29:
                    36:7f:44:69:35:45:a7:98:77:53:1c:a9:d4:2a:fb:
                    ea:d9:60:c9:d4:bb:c2:32:1c:b2:3b:f2:0d:50:c8:
                    b7:53:aa:e5:ba:c4:47:06:40:37:59:da:bd:30:98:
                    6b:5f:82:7f:dc:9b:df:9e:c7:dc:75:9b:7a:1f:cd:
                    f2:9a:10:75:52:d0:32:e8:9d:64:4c:04:68:62:3f:
                    c5:bc:ea:68:74:77:85:f0:18:20:84:8b:78:07:50:
                    f7:05:bc:64:96:ce:ce:4e:c4:0c:5e:f7:2d:65:ce:
                    f0:a8:32:ca:79:52:7b:01:cd:3f:11:5a:a7:b5:1b:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:36:1F:25:DF:21:96:4B:62:D6:30:E1:2D:E9:42:B9:6A:17:A8:59
            X509v3 Authority Key Identifier:
                keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ef:33:7e:94:f6:38:15:9f:6a:f6:c8:ea:a3:55:00:4b:da:
         b3:82:18:5d:69:74:34:7c:f4:6b:86:35:4e:5e:52:fc:49:69:
         07:a6:37:3a:b3:83:02:fc:07:2e:ce:83:c9:40:ca:52:4c:82:
         4c:33:2e:1e:de:ae:f2:29:42:07:31:b4:f4:73:c9:8c:1f:fd:
         9e:60:04:fa:a2:f9:44:e5:1d:a9:39:70:67:85:d1:9f:d5:07:
         db:9d:c1:75:de:e7:12:0c:de:16:55:91:3b:52:81:5b:4b:d8:
         01:14:3a:0e:5b:19:d7:5e:c9:82:ae:24:ad:24:d2:08:90:22:
         7b:0c:97:be:ba:95:86:ef:ef:12:be:be:ec:1d:d1:79:62:37:
         fd:3a:15:94:59:d8:77:af:b1:34:f1:1f:33:0e:e0:92:92:d4:
         cf:ca:59:c4:4d:9a:40:fd:1e:58:1e:a4:a8:80:e2:27:cf:a7:
         4f:fd:b6:e5:8b:0a:e7:e7:4a:4f:b9:7c:33:80:e8:18:ae:06:
         12:8e:47:7d:c2:f2:bf:6b:83:5f:65:b4:f4:56:21:b6:e1:e7:
         84:b0:6b:be:84:1a:23:5b:88:dc:83:64:37:87:79:38:06:76:
         6e:30:47:21:79:6a:ae:5a:2e:a3:e2:3d:01:9a:00:7b:a7:08:
         59:ce:3c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:36 2025 by rpki-client