Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File:                     0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier:          MekfaHp3qPU24O+aNlyEYwliZAU4rNzjPTSQf8e13i8=
Subject key identifier:   BC:51:C3:F5:D4:24:69:55:55:56:11:F9:F5:35:E0:FD:7F:A1:4C:96
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer:       /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial:       0197B9D8A303493BFE0B366470010BB37CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number:          15B5
Signing time:             Sun 29 Jun 2025 04:01:11 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:11 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:11 +0000
Files and hashes:         1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: h4AzuSLzL9yUINPvIJMt54aEP4VmT+UMORjMDJYTQD8=)
                          2: 2dNcgj6MvN9n_fYFlGVJH7IP5P0.roa (hash: NdXmI8eBdfB68znJPh1CIG8Aqd8Jvbrd0RbmQ639jeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:a3:03:49:3b:fe:0b:36:64:70:01:0b:b3:7c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
        Validity
            Not Before: Jun 29 04:01:11 2025 GMT
            Not After : Jun 30 04:01:11 2025 GMT
        Subject: CN=bc51c3f5d4246955555611f9f535e0fd7fa14c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:50:7d:20:26:ee:63:15:86:9c:cb:4a:b5:
                    eb:9e:cb:f2:9b:33:17:e0:22:be:a4:24:ff:3e:dc:
                    20:c6:f2:ad:10:f5:e0:3b:20:a4:dd:66:16:27:d9:
                    07:0e:08:8c:d3:b6:8c:2a:f2:90:c3:3b:6a:18:74:
                    af:50:24:70:a7:99:72:97:56:f6:13:5d:26:62:26:
                    6b:b7:fd:57:f3:d7:6c:dd:31:28:31:aa:dd:bf:c7:
                    78:b9:91:a2:db:ed:a1:23:8e:09:53:0d:b8:ea:f0:
                    1e:09:93:80:87:6c:12:fb:75:17:a2:1b:32:73:77:
                    e2:51:a8:f8:6a:2e:16:04:60:03:91:2c:2c:ef:e5:
                    24:17:31:f9:02:d3:ae:39:35:c4:38:8c:d7:db:5a:
                    16:41:42:e0:25:89:d1:cb:87:0a:7c:c8:41:ff:b3:
                    d7:15:1e:4f:0f:d5:73:f9:32:ca:33:96:ef:d0:3f:
                    d8:58:1b:5e:6a:c0:84:01:a9:b9:dd:65:26:6b:91:
                    54:c1:12:a1:54:37:b7:72:8b:1e:af:05:05:1f:d2:
                    ad:7d:2d:58:d7:83:a4:12:ea:92:cc:35:f7:c7:9e:
                    ff:0c:58:72:20:39:15:97:f8:7c:b8:eb:16:cc:f4:
                    67:85:1c:f9:49:8d:27:ef:ef:5c:23:9e:2d:52:38:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:51:C3:F5:D4:24:69:55:55:56:11:F9:F5:35:E0:FD:7F:A1:4C:96
            X509v3 Authority Key Identifier:
                keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:55:07:6d:b9:60:d1:13:35:3c:d9:01:fb:7f:b0:6e:6d:f9:
         d1:06:70:f2:c5:21:34:d9:22:55:bf:6c:8f:92:5a:28:f0:87:
         df:04:67:8f:a6:70:fa:42:0b:25:59:fd:1e:3b:0b:72:59:05:
         66:98:5b:31:d1:2f:48:6e:3c:8e:93:32:21:7f:a5:9b:5b:1b:
         f6:ba:70:4c:67:a9:89:dd:f4:d0:1c:aa:53:9c:74:0a:db:ac:
         17:d4:72:65:e4:f0:4e:4f:a5:22:19:f5:ac:07:a4:c3:65:bf:
         2c:ae:5f:28:9b:7f:ac:7f:39:c4:37:9d:53:98:b3:2c:87:72:
         2d:99:53:7b:13:45:d2:56:d5:29:03:97:45:ad:8e:e1:a3:f2:
         4c:46:af:8c:d8:25:d6:94:1d:9e:e8:f4:f7:6b:58:c0:7c:a9:
         a6:1b:d3:17:0a:08:20:a4:99:ed:98:f2:fb:d3:c0:37:27:a5:
         8e:f6:1a:d6:cd:cf:4d:7c:cd:39:02:7a:fd:53:66:1a:fd:40:
         be:dc:4c:63:f0:41:4b:87:41:f3:0c:dd:6b:55:0c:59:50:6d:
         f8:28:d0:b7:6c:19:1d:8d:ba:8e:3f:ad:8a:e6:f5:4b:de:d7:
         fd:f8:a4:63:0a:48:23:b7:27:23:23:86:17:de:d2:77:36:ff:
         33:8c:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:52:44 2025 by rpki-client