Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File:                     V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier:          dyOWpQVkt/gCCqIIONlj5FiUChCF9/A7htFqjTuRoJQ=
Subject key identifier:   0F:EB:07:62:4C:8F:42:31:ED:A7:84:13:DE:4E:A8:BC:D5:C7:59:6B
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer:       /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial:       019764DF19DCAE295DDFCFBC940946805D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number:          151C
Signing time:             Thu 12 Jun 2025 16:00:32 +0000
Manifest this update:     Thu 12 Jun 2025 16:00:32 +0000
Manifest next update:     Fri 13 Jun 2025 16:00:32 +0000
Files and hashes:         1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: 28kd6MGexHnTPKLExq9K3eeqb0uhIwvqyUJfo4Wqam4=)
                          2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:19:dc:ae:29:5d:df:cf:bc:94:09:46:80:5d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
        Validity
            Not Before: Jun 12 16:00:32 2025 GMT
            Not After : Jun 13 16:00:32 2025 GMT
        Subject: CN=0feb07624c8f4231eda78413de4ea8bcd5c7596b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:f4:42:92:9f:a9:fe:8e:7f:87:cf:2b:b9:
                    f5:84:54:32:2c:66:34:e3:08:58:f3:5a:f1:a9:ab:
                    42:fe:3b:3b:83:c2:25:ff:c0:38:8c:9a:94:95:61:
                    18:14:9e:4f:e8:0c:08:97:2d:26:84:b9:b1:2b:c5:
                    c5:b0:cc:09:91:1b:67:97:59:be:ee:02:e2:4d:ff:
                    49:71:29:ba:04:bf:67:ef:f2:ff:d5:d3:53:9f:ce:
                    8e:94:4f:16:c3:58:42:31:44:62:fd:94:22:f2:af:
                    c2:5c:e0:10:a3:85:1d:e0:ba:47:95:99:14:10:fe:
                    50:c9:a0:94:e8:57:c3:d7:ad:08:2b:86:bc:9d:96:
                    78:5e:26:22:b1:85:58:d1:2b:8d:a9:9a:1f:ce:dc:
                    dd:07:bf:71:33:5f:8f:39:a8:69:a2:9c:bf:50:8e:
                    a9:80:c5:42:b0:67:48:96:eb:52:cb:a6:93:d8:31:
                    db:59:85:e9:52:b7:86:bd:cf:c3:98:6f:1f:83:63:
                    90:c5:50:ef:19:17:e2:10:3b:70:d5:81:22:c0:03:
                    84:67:74:f1:fa:2b:e1:1c:f3:d0:b6:b2:f8:f3:bc:
                    de:ee:ce:c1:29:27:e0:17:74:d1:a2:3b:53:23:67:
                    9e:65:23:6c:fc:d2:99:92:27:e9:ee:a9:20:8e:cd:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EB:07:62:4C:8F:42:31:ED:A7:84:13:DE:4E:A8:BC:D5:C7:59:6B
            X509v3 Authority Key Identifier:
                keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:18:bb:c4:d0:0f:16:62:ab:8f:99:21:e5:06:5d:43:c2:8e:
         de:d9:da:10:dc:4b:00:43:77:b3:d6:d0:90:2b:d7:e8:d1:77:
         21:c4:13:03:14:84:f7:bb:e2:1c:b2:27:ac:d5:d4:2d:be:a9:
         32:95:c4:0d:a3:06:9b:80:e9:2c:02:59:46:02:cd:70:ae:6d:
         9b:a9:ef:6b:f7:81:70:19:95:48:88:03:38:8d:ff:13:ce:fa:
         aa:f9:b8:15:6d:80:f8:06:44:ba:d8:b7:0a:ed:ce:45:cd:14:
         6c:ac:35:12:c3:43:e5:ff:f6:81:16:8f:0e:d4:6a:07:79:6c:
         f1:ab:65:72:93:2a:c7:74:fe:0b:9a:d7:9c:67:31:0d:20:cf:
         0c:dc:25:51:1f:c3:17:4d:c6:d8:56:af:f1:29:e7:14:7b:e4:
         2c:58:fb:e4:4a:27:84:24:bf:21:f0:17:c4:9b:34:5f:bc:93:
         8b:72:eb:29:f6:dc:ee:7d:5d:cb:9a:0d:09:8a:82:60:e1:74:
         3e:5b:f4:57:28:b4:d4:78:c3:8a:31:9f:21:fd:bb:be:86:52:
         77:28:73:44:d7:e2:56:a5:41:97:99:4f:26:dd:55:31:bd:bd:
         fd:de:a1:00:fb:65:10:43:57:b0:89:5d:07:01:13:aa:1c:07:
         72:0c:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:41:45 2025 by rpki-client