Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File:                     T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier:          LHC6gembvGak3OfxF4CLjyV9pP/FAXrs+HWKUKglV+4=
Subject key identifier:   81:1A:EA:5D:5D:8B:B1:06:4D:CE:75:09:D7:FA:61:20:7C:60:F0:7F
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer:       /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial:       0197B77C0677F52B8B8719C2413B61CCEDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number:          132E
Signing time:             Sat 28 Jun 2025 17:00:47 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:47 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:47 +0000
Files and hashes:         1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: JlGGwsrOE04j4qgIpDiQ/QtUS6ElkbS2HFoDy2tQXS0=)
                          2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:06:77:f5:2b:8b:87:19:c2:41:3b:61:cc:ed:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
        Validity
            Not Before: Jun 28 17:00:47 2025 GMT
            Not After : Jun 29 17:00:47 2025 GMT
        Subject: CN=811aea5d5d8bb1064dce7509d7fa61207c60f07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:a9:60:1c:b4:29:38:fb:64:cc:64:1d:bc:
                    0f:f7:3d:e2:9d:c7:35:0e:db:8d:85:72:33:4d:3c:
                    ea:66:a4:fb:4b:fa:1b:da:84:e9:c7:04:d8:42:19:
                    ce:cb:e7:52:c1:cd:8a:51:86:f0:c4:44:cc:49:2e:
                    01:f1:92:d5:6c:73:7c:19:3c:fb:2a:1f:b7:ae:93:
                    c8:1e:80:de:a7:59:68:30:94:1f:3e:b4:5d:7d:9b:
                    e2:b1:eb:4b:e9:49:af:1f:05:69:1f:ab:58:3f:a0:
                    b9:81:ae:87:6c:c5:b8:9d:17:ba:1b:cf:f2:b0:2c:
                    44:18:45:b5:67:e7:8c:ee:11:d1:6e:00:f0:cb:3b:
                    80:c0:7f:2d:1d:a4:ae:e8:12:27:96:88:ce:4e:2e:
                    63:9d:dd:1f:ab:9b:e2:8d:81:58:f9:3f:51:66:6b:
                    b1:7f:c8:d3:85:b3:86:d4:75:8e:2a:c3:dc:aa:46:
                    28:44:03:45:61:b4:af:ad:0f:26:23:f4:b4:4f:42:
                    b7:7c:3b:69:27:10:d3:3f:e0:4c:81:be:02:3f:6d:
                    77:14:e4:a0:82:65:5c:a0:68:5e:83:82:fd:df:95:
                    2a:96:ce:fe:9f:bb:62:39:bc:ad:e6:65:a9:07:c6:
                    f2:42:fc:2b:82:97:eb:4c:cd:01:cc:18:bb:90:56:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1A:EA:5D:5D:8B:B1:06:4D:CE:75:09:D7:FA:61:20:7C:60:F0:7F
            X509v3 Authority Key Identifier:
                keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:5d:2f:f3:d8:67:b8:62:fd:a4:06:4e:b4:95:bd:18:47:
         9c:b0:d6:4e:b9:c6:32:e4:18:fc:17:75:0d:4a:5c:56:05:b7:
         6a:d1:b0:3f:50:ea:99:75:8b:ba:00:4b:22:65:d6:af:dd:74:
         4b:3f:86:41:a5:17:e8:f1:4b:bd:97:a2:02:50:4c:bb:38:28:
         15:d4:3a:00:1f:2b:fb:b3:1b:9f:71:eb:0a:6b:b2:d7:e4:ee:
         f1:55:08:c3:ed:2c:69:67:70:ca:56:5e:6d:85:7c:9e:14:c1:
         6e:68:d6:ec:39:21:de:95:dd:c4:5c:8f:d2:34:91:84:0b:e7:
         f7:c4:26:dd:25:fa:fa:ee:ba:a6:d4:2f:ed:98:75:04:c9:2f:
         61:90:bf:95:72:ff:57:37:2f:0a:1b:14:bc:32:7b:ec:71:ce:
         01:0f:9a:7e:54:4c:da:d4:a8:67:cf:7b:21:3b:a2:0b:9d:06:
         f9:5b:3f:60:60:91:3a:4b:d6:c7:26:49:fa:b4:50:89:93:4d:
         33:e9:b1:c5:32:24:d8:4c:d7:d5:f9:4c:89:1c:52:87:00:2b:
         4f:f2:2d:4c:1f:95:04:38:68:1e:b0:b8:65:c6:0d:29:b8:8d:
         1d:b3:a6:db:04:06:ab:22:7e:63:8b:ba:23:41:e8:02:a5:65:
         ee:a6:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:30 2025 by rpki-client