Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
File:                     DpMafPLalMzUoq_OI_OS1AYdVvk.mft (raw, json)
Hash identifier:          LzA8niQdur3rtXGjsHok/txQbBEo2fRrbwk/xhQFlyI=
Subject key identifier:   72:B4:B1:08:66:8C:E3:D8:7C:8B:B9:0F:F4:00:EA:77:D3:83:79:0D
Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
Certificate issuer:       /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Certificate serial:       0197499F5C0448D0045926C8B041C4C0358B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 09:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:09 +0000
Files and hashes:         1: DpMafPLalMzUoq_OI_OS1AYdVvk.crl (hash: xuXODkXsce/J7fc4gHfJYHRLUwY9RmUISeyXhsv7M0c=)
                          2: zrVCLm24sPlxLqzgeyn_JvpDItw.roa (hash: /XNKRA78yIF9Dhp7x0h4gHGlf9HOKwu6T6mJ6i6aMCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:5c:04:48:d0:04:59:26:c8:b0:41:c4:c0:35:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
        Validity
            Not Before: Jun  7 09:01:09 2025 GMT
            Not After : Jun  8 09:01:09 2025 GMT
        Subject: CN=72b4b108668ce3d87c8bb90ff400ea77d383790d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:96:62:cb:8b:c3:7e:03:3f:81:d7:ab:6a:
                    26:20:89:fa:9b:1a:8d:75:7e:d7:4d:50:71:f1:93:
                    c3:68:2b:4c:a6:d1:2a:3e:cb:ff:f9:97:bf:4f:f5:
                    ad:ed:a9:7f:10:4d:aa:ac:0b:44:47:2b:a0:98:64:
                    6b:9c:2d:11:b1:8a:8b:03:7b:d6:71:8f:17:3e:e9:
                    97:35:db:d4:35:74:9c:fd:cc:b2:8b:fd:17:7c:17:
                    87:e2:85:75:d0:5f:45:e4:4e:80:72:c3:d2:ba:67:
                    18:c4:d6:3b:8d:69:9f:d2:b9:6b:35:75:9a:bf:4c:
                    a5:e3:66:e2:72:e5:82:c2:ec:32:4f:43:bc:5f:f7:
                    da:1c:1c:5d:7a:7e:01:b5:00:66:eb:9f:6a:8e:d9:
                    44:3f:4a:37:7a:c5:32:f1:41:b1:68:36:b2:7b:a0:
                    47:1d:3c:95:a6:a7:38:27:50:a7:03:18:48:eb:b8:
                    5a:db:fc:9f:26:b3:8e:3d:70:2f:be:32:32:65:b9:
                    b5:92:dc:8c:96:f7:6c:36:83:6f:3a:a2:bd:e2:11:
                    1b:e5:f4:bf:b6:d9:e4:20:99:a2:e9:59:b7:b1:27:
                    34:32:5b:f4:69:5b:cc:e7:45:e1:56:76:62:bd:02:
                    1c:9d:8f:08:7d:88:da:3d:82:2b:38:f3:d5:0e:de:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B4:B1:08:66:8C:E3:D8:7C:8B:B9:0F:F4:00:EA:77:D3:83:79:0D
            X509v3 Authority Key Identifier:
                keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:92:d0:b5:8e:a7:e9:28:74:9e:46:dc:f9:16:f1:22:e3:d1:
         f1:4d:61:d9:75:ad:c0:96:2f:54:6d:9b:3c:e6:ba:05:af:91:
         4c:a7:1a:21:ae:2b:a8:3f:ba:f1:4c:d5:b0:ed:82:6f:1a:09:
         2c:72:1f:ff:ec:e4:46:52:f4:ad:68:da:1d:4b:53:ac:1d:3b:
         b3:ab:50:ea:09:da:9c:28:c6:c2:71:6f:d1:b3:a0:ae:7a:6c:
         f6:00:99:37:20:17:bc:43:b2:c0:15:8f:88:74:7f:4e:e6:1c:
         81:6a:cb:c6:74:9a:cc:2c:70:a9:4c:20:fb:16:d9:dc:c9:2c:
         3d:92:8f:4c:c6:1b:07:27:6e:e3:b8:0c:6d:df:69:83:af:97:
         84:cc:e8:a1:35:3a:7c:e3:31:26:be:c1:19:e1:0b:2a:35:4a:
         5b:f1:6c:a3:31:fa:a2:27:65:01:e4:91:c0:cc:08:f6:97:0d:
         42:f7:52:db:74:82:a0:26:4a:ee:e3:e0:ba:65:f9:d8:f1:ae:
         f4:42:d4:be:d5:1c:63:4d:7f:41:2e:1f:99:b0:1d:b9:d5:8e:
         73:b4:e1:bf:87:03:df:9b:4a:82:82:eb:c6:c9:98:e2:b5:9f:
         c2:58:1f:10:9e:64:fd:ff:2c:0b:c1:ac:c8:a5:a7:21:c6:15:
         ed:05:89:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:09 2025 by rpki-client