Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File:                     15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier:          mn6iV3KchJM0vPe6juSUCOR7Oj85K9r1haKPEjYe1v4=
Subject key identifier:   2F:08:F0:9F:7E:34:93:1C:2F:52:61:FA:96:C7:CA:9A:EF:BF:09:85
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       019754233A12555651EDBC68C247CB12D752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number:          0C8B
Signing time:             Mon 09 Jun 2025 10:01:24 +0000
Manifest this update:     Mon 09 Jun 2025 10:01:24 +0000
Manifest next update:     Tue 10 Jun 2025 10:01:24 +0000
Files and hashes:         1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: 8wbV0EVDQunDkejf+5aQzdeRu2dAbiORdIxF7LsJ5S0=)
                          2: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (hash: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=)
                          3: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:23:3a:12:55:56:51:ed:bc:68:c2:47:cb:12:d7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: Jun  9 10:01:24 2025 GMT
            Not After : Jun 10 10:01:24 2025 GMT
        Subject: CN=2f08f09f7e34931c2f5261fa96c7ca9aefbf0985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:fc:96:d4:9d:62:8e:16:b9:fc:7b:e0:32:
                    5f:bb:39:eb:0b:71:43:3f:52:fb:f4:1d:3a:8d:aa:
                    86:76:35:2c:ea:ff:15:bd:70:66:4a:7e:e4:3f:b3:
                    23:64:f2:b1:64:c0:87:13:24:2c:ee:f9:58:9e:a3:
                    97:c8:93:de:53:21:2a:92:f8:de:60:66:0d:bc:92:
                    fc:db:8f:81:0a:5b:ff:55:47:7a:4a:50:de:7b:1c:
                    7e:d3:9c:c7:94:83:2a:c9:b0:5b:c4:3e:a7:de:29:
                    fe:f3:7b:a2:e7:6f:49:5a:2c:4e:51:0c:6b:65:27:
                    fc:72:d1:13:c2:05:28:1c:24:cd:27:e3:ee:ca:b3:
                    91:c8:3c:ad:56:64:a1:9a:3c:8f:18:2b:0e:0a:11:
                    e1:c5:d2:94:b4:99:e6:0e:78:65:d5:e5:15:be:f9:
                    d7:43:f9:70:02:c7:02:c8:22:61:88:70:41:49:a2:
                    42:73:70:d7:9b:fc:ab:c4:9c:81:2b:f9:b2:21:cc:
                    49:d5:a4:82:b7:2a:1a:3d:c2:dd:66:e7:aa:c9:28:
                    e2:05:67:45:62:5d:d0:86:08:6b:4b:db:ca:11:20:
                    ab:18:2d:a7:ec:18:aa:67:75:5b:3f:6b:fb:9f:25:
                    a7:d7:93:65:ea:57:98:85:b1:78:a9:5f:29:75:41:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:08:F0:9F:7E:34:93:1C:2F:52:61:FA:96:C7:CA:9A:EF:BF:09:85
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:a0:66:45:93:29:7f:e3:43:1d:28:46:08:19:b4:fa:97:
         26:d6:fb:77:93:5d:2e:76:39:e1:90:1c:b9:3a:86:98:b3:19:
         d8:35:ad:7e:b8:f6:e3:9a:1c:55:5d:05:9b:48:94:0e:85:61:
         d9:a3:48:fe:f9:06:8f:a6:fb:1f:6b:8e:ab:3a:b5:43:d1:1b:
         6e:92:be:e0:89:2c:2c:fc:81:b1:4c:d0:1e:6f:48:16:8a:d3:
         34:36:7e:aa:f7:b3:a2:c0:fe:6d:02:8e:f5:f4:5f:e0:f4:aa:
         eb:30:33:96:8a:32:53:bf:3b:33:2a:b1:6f:2d:03:99:c1:54:
         7a:12:76:c4:52:3d:31:88:be:8f:19:f7:ab:75:1f:51:48:4f:
         e9:f9:bd:8c:8b:65:3e:84:4a:74:ee:46:41:0a:63:4c:73:a1:
         6e:cf:44:a9:d2:10:a8:59:95:17:0c:d9:cd:04:2f:53:bc:4d:
         f4:fb:40:bb:00:3b:fa:29:fe:b6:a2:f6:15:55:1f:ea:91:15:
         22:04:1d:42:88:15:98:ca:78:46:26:87:60:e1:36:0f:43:4f:
         c1:57:40:b9:c8:02:3a:4f:8b:d6:a7:29:7c:3e:db:be:5b:cd:
         60:e2:c1:a3:30:9a:91:aa:02:61:ea:4b:e0:1d:fd:db:b7:a4:
         96:a7:0d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:42:09 2025 by rpki-client