Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File:                     2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier:          Itgylp7kR5/XmfFm4QAb6on9ra2LqauMbagFWW/vkbw=
Subject key identifier:   1C:17:82:28:6D:53:B1:B9:2D:05:A5:47:3A:7C:49:70:1B:34:16:7F
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer:       /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial:       01975346C09981513FFC9014DD77EE76325C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number:          09B0
Signing time:             Mon 09 Jun 2025 06:00:35 +0000
Manifest this update:     Mon 09 Jun 2025 06:00:35 +0000
Manifest next update:     Tue 10 Jun 2025 06:00:35 +0000
Files and hashes:         1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: wAzYQ8MQQ2UDJS4WYgI2awNSYm+1KP55VCK9/2eOTi0=)
                          2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
                          3: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
                          4: fWxAWe7FNQHl72525jh3CvQUjPI.roa (hash: wZ498wFmeXSTeDsoNJdQ0818F8qSsmRp/ozGqSUyBQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:46:c0:99:81:51:3f:fc:90:14:dd:77:ee:76:32:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
        Validity
            Not Before: Jun  9 06:00:35 2025 GMT
            Not After : Jun 10 06:00:35 2025 GMT
        Subject: CN=1c1782286d53b1b92d05a5473a7c49701b34167f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:7d:ad:82:0d:34:2c:59:dd:c7:c5:59:b2:
                    88:14:65:2d:14:42:53:43:42:3e:40:e3:60:e4:a0:
                    56:16:3f:0e:aa:79:6a:10:e6:b1:87:fc:92:19:d7:
                    17:e9:4a:2a:36:21:bb:78:50:75:47:07:b2:12:6e:
                    76:ec:97:e9:fc:72:38:5d:c9:ff:ed:39:28:1b:9d:
                    73:71:fb:b1:f0:43:85:57:c3:92:76:1a:98:f0:1f:
                    02:73:d5:00:60:3c:68:c0:c9:b2:a9:ab:86:d1:e4:
                    90:7e:87:24:42:52:90:f4:79:1b:76:3a:b8:94:ff:
                    b8:fe:18:76:bc:8d:d5:27:b1:4d:f3:fb:b0:85:97:
                    c5:38:2d:5e:79:2d:ab:2a:ec:d5:73:80:e3:cc:cd:
                    8c:0e:cd:9a:28:6a:2f:43:44:5c:c7:35:45:e4:3b:
                    d6:6c:36:aa:59:98:3f:20:20:f4:2f:78:5a:d9:c0:
                    2f:99:cb:59:61:64:73:1d:68:4e:ff:b4:6d:6e:c5:
                    29:f5:3c:6f:ab:bf:16:34:73:96:b0:37:f5:9c:66:
                    8d:ed:2e:ad:48:30:47:08:10:c6:27:a0:79:b5:13:
                    5b:62:7e:6b:11:3d:17:6a:7c:c0:a0:bd:1a:3a:04:
                    26:d2:02:49:ca:d0:9a:27:8f:24:48:ab:d6:ab:f6:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:17:82:28:6D:53:B1:B9:2D:05:A5:47:3A:7C:49:70:1B:34:16:7F
            X509v3 Authority Key Identifier:
                keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:bc:f1:e5:c8:12:61:22:8e:3e:dc:23:b2:b6:8a:15:ad:3b:
         32:9b:c7:6d:77:20:98:0d:ec:8e:ca:43:55:47:5e:fa:42:65:
         b8:c3:8d:2f:78:18:51:0c:6d:76:7b:87:78:56:7e:91:06:17:
         16:07:6b:a6:72:6d:ba:24:1c:a8:16:a9:d2:7d:78:cc:3d:b2:
         25:e0:1d:97:6a:31:99:67:e0:67:9c:5f:78:a6:83:a5:30:07:
         d8:df:95:ad:9b:06:24:fc:ad:3c:1e:7f:12:7a:f9:cf:53:7e:
         d9:7c:ba:5c:46:23:6a:71:27:a0:06:06:5e:bc:56:c3:29:4e:
         be:bc:dc:9a:c4:76:00:e0:9b:b1:0f:8b:73:75:51:a4:a4:4a:
         ef:b9:cd:e8:88:57:2e:70:2c:f9:67:0e:e8:c8:58:b5:60:b4:
         1c:d5:59:eb:7b:f4:a3:70:8b:f8:b6:a2:c1:18:c1:cf:91:b9:
         d1:8d:72:3a:ba:df:3b:f1:3c:8d:31:ab:42:3f:e7:32:6a:1c:
         c2:3c:58:b1:df:4d:37:1d:5d:c6:e7:4c:03:1a:e7:2c:06:cf:
         27:eb:7e:15:7c:6c:99:5a:b2:ea:4e:92:03:35:52:84:59:c7:
         0e:90:d9:c4:d9:2f:6e:af:c9:9f:01:5b:27:68:c7:1d:a4:ad:
         07:6a:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:28:05 2025 by rpki-client