Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File:                     0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier:          k6NDZCjlr+9meVZjSNP+jnTIZHzTHuGteqOpGXGSc4E=
Subject key identifier:   70:E4:57:AB:A2:57:5F:15:81:59:E7:DE:6D:BC:C9:EF:18:28:7B:48
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer:       /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial:       019749D586D344568117A5175DB4540FB79F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number:          150D
Signing time:             Sat 07 Jun 2025 10:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:19 +0000
Files and hashes:         1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: xDWjf4TL3K4rGN7vY+DKNWeuD/cuUpLzUHtfecK8TLM=)
                          2: aLQQDXXyyFCFCxYHC8_say5CLUI.roa (hash: zI2tGfqAmXq7ygJfVvFOBT2dePoqj3hccAoRf3t6VUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:86:d3:44:56:81:17:a5:17:5d:b4:54:0f:b7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
        Validity
            Not Before: Jun  7 10:00:19 2025 GMT
            Not After : Jun  8 10:00:19 2025 GMT
        Subject: CN=70e457aba2575f158159e7de6dbcc9ef18287b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bc:0b:ef:ce:77:4a:32:e0:a7:ad:57:ef:e5:
                    a7:51:b2:14:ac:ae:e5:30:c8:41:3b:76:1b:83:27:
                    30:0d:cc:44:87:05:90:ad:ff:c2:13:6d:20:a1:39:
                    1d:37:d3:b1:82:5d:56:84:12:c8:99:9a:0c:c3:0f:
                    81:65:ce:7f:d5:75:40:17:ec:19:19:f0:03:80:c2:
                    d8:3c:b0:b1:ac:4b:b1:32:77:94:66:42:d0:c1:5e:
                    a8:92:7e:52:84:91:76:c5:57:40:74:ae:52:26:30:
                    b1:a4:ad:74:52:ad:37:1d:17:88:40:a5:79:cb:8c:
                    8c:55:fe:17:e8:9d:0b:9d:78:51:04:4e:e5:3b:15:
                    b8:25:63:de:7b:02:7c:69:13:8e:14:0b:52:13:26:
                    31:72:c4:f2:2b:5a:df:18:bf:3d:34:ad:bd:3d:41:
                    23:87:ee:56:fa:89:2f:4c:0e:53:47:c5:5c:5f:82:
                    a7:73:5e:bc:26:b7:22:e3:f8:60:e0:9e:f5:98:5b:
                    68:45:c2:8d:00:98:c1:e0:ae:4f:e5:4f:e7:2c:40:
                    5d:f3:c9:d3:56:63:3e:9f:14:33:ee:02:8b:fa:4a:
                    9e:90:57:8e:3b:a6:06:97:0b:5d:01:7f:1a:fa:7d:
                    dd:96:a6:96:cd:9b:c4:23:4f:b0:f0:c7:4c:4f:0b:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E4:57:AB:A2:57:5F:15:81:59:E7:DE:6D:BC:C9:EF:18:28:7B:48
            X509v3 Authority Key Identifier:
                keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:71:76:db:f6:eb:fc:03:16:77:48:df:3e:1f:bf:3a:14:ca:
         04:58:21:74:0d:bc:00:3b:7d:1b:cf:13:52:98:86:18:1a:d6:
         26:0c:be:7b:0f:12:6a:3a:e0:27:3b:9b:87:19:7f:bb:20:be:
         5b:be:67:f8:ec:0e:db:f4:c7:45:b6:67:46:a8:95:90:de:bd:
         3d:73:fe:5e:4e:3b:2b:cc:8c:f7:8a:d7:98:9a:bb:78:12:21:
         de:09:42:6b:7d:89:03:c1:41:b7:3b:ca:ec:57:c7:c2:0e:0e:
         20:eb:72:0d:60:8d:ea:a4:cf:11:09:36:d0:d8:0b:c2:d8:83:
         31:70:cf:52:b0:c2:13:7f:ec:89:db:70:9d:40:84:d1:45:fd:
         4f:3f:a4:80:aa:fd:d9:8a:2e:24:f9:51:35:0a:a7:53:ec:e3:
         cd:5e:1b:75:50:aa:fc:e6:b2:d9:82:12:ad:b5:3c:fe:66:2e:
         2e:8e:90:96:d2:e0:38:8e:68:cf:d1:c4:bf:37:71:ae:5b:60:
         23:b4:08:66:b7:82:7b:8f:05:2e:c9:4b:06:6a:a5:f0:dc:c6:
         43:63:c4:70:83:56:fe:a7:3d:d5:c7:5f:02:89:18:d3:b2:28:
         14:61:d5:7b:f5:a6:9e:7d:16:6a:a2:bb:b4:2e:fc:9f:c4:0f:
         5e:d1:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:10 2025 by rpki-client