Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File:                     0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier:          lX+W7l+okBzHKDK3QCeNrE403YB5U4V/pJLcTod4n3Q=
Subject key identifier:   B2:C0:70:5B:8C:98:57:02:95:38:63:FD:ED:01:26:0D:79:15:1A:D2
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer:       /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial:       01984A0A57BF31A7E2324CE7B8CEE757A905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number:          05C1
Signing time:             Sun 27 Jul 2025 04:00:48 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:48 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:48 +0000
Files and hashes:         1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: Wcp7trMJBvxcv8Dr0/L43oSMNXAT9Cl6xqXbmhp+C2Q=)
                          2: wc2YTTqZu_ZfiRjMD3y02xaUsko.roa (hash: LM/FwSmelKssGweHrskFer212d31QKucqPggfsRe9io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:57:bf:31:a7:e2:32:4c:e7:b8:ce:e7:57:a9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
        Validity
            Not Before: Jul 27 04:00:48 2025 GMT
            Not After : Jul 28 04:00:48 2025 GMT
        Subject: CN=b2c0705b8c985702953863fded01260d79151ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:30:48:ca:11:b8:3c:06:c2:39:d6:eb:97:
                    7c:68:ea:65:5b:e1:60:56:e3:03:12:ef:c8:36:22:
                    fe:a0:b6:91:49:95:11:f3:1f:64:80:75:a1:a5:08:
                    be:76:43:44:fa:89:82:39:50:cf:c1:44:49:49:da:
                    cb:0a:73:3e:04:ec:2b:6f:99:59:40:25:8e:92:2d:
                    9b:c5:5e:01:c4:9a:73:c3:18:df:3c:2d:89:67:2e:
                    1d:8b:59:af:18:d5:a8:c6:0e:23:c2:53:7e:b2:03:
                    dd:ff:48:f8:50:96:3f:ab:3f:3a:61:8d:7b:31:dc:
                    f4:d3:3a:1f:de:62:da:10:57:dd:37:2a:b5:16:bd:
                    f9:aa:74:36:af:2a:4d:40:3a:01:d7:f4:6c:40:7d:
                    8f:8f:c8:dc:85:8a:8e:e0:ce:52:30:08:f0:8f:59:
                    05:7e:d6:b9:ce:88:09:08:b3:bc:0b:5a:5d:4b:58:
                    2f:d5:f8:1c:23:fe:ff:75:e4:44:0b:dd:9c:b6:f5:
                    e5:26:a2:37:72:f3:5f:ba:ba:1c:16:61:49:88:4e:
                    d8:ca:cf:2a:d4:85:02:36:72:12:60:cb:1b:a8:cf:
                    a8:36:94:86:a4:46:1f:25:5d:bb:0e:9a:74:bb:3d:
                    95:05:8e:0b:ab:ad:8e:3a:69:0d:fa:31:4e:f8:6d:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C0:70:5B:8C:98:57:02:95:38:63:FD:ED:01:26:0D:79:15:1A:D2
            X509v3 Authority Key Identifier:
                keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:05:7e:9e:8b:63:17:2e:0b:46:1d:b0:fd:d9:f9:40:82:e2:
         b2:c3:e0:fd:2f:da:f0:18:7e:8f:f4:fe:a8:c4:7f:b9:ac:c3:
         c7:49:63:f5:4e:43:6c:ea:13:46:66:fe:9a:73:aa:c6:67:7a:
         0c:56:c3:5b:3d:ca:88:31:d7:c4:04:79:2c:aa:ed:41:96:d7:
         cd:b6:35:11:fd:99:f1:86:43:7d:bf:4a:b6:d8:a1:2c:ea:46:
         ee:11:c0:7f:c7:4e:9d:43:a9:d7:4e:88:52:a7:3c:95:ec:93:
         8b:ba:3a:36:0b:1a:6c:49:35:27:5c:6c:de:e3:5c:31:fc:43:
         cc:7c:c0:b5:76:09:d1:a1:15:87:b8:ee:ea:b6:30:59:2b:1e:
         8b:96:ad:44:2d:78:bd:a1:f8:fd:f1:d8:b3:15:82:ee:5c:e1:
         e8:ce:d7:aa:c8:f5:a5:4a:7c:9d:cc:c7:40:4a:4f:4e:f3:28:
         c0:c9:f2:e7:e4:f0:8e:c9:73:97:9c:90:51:10:46:8a:59:90:
         53:43:f4:a3:f1:e4:d3:db:81:a2:b5:2b:83:46:9d:62:20:8e:
         60:4c:52:53:8b:d2:50:93:10:ce:ea:dc:73:96:05:e7:5c:4e:
         ea:5d:1f:24:7c:c2:b2:18:14:c8:0f:50:ce:a7:21:bd:04:63:
         3c:89:a6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:37 2025 by rpki-client