Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          ndyuJHRELYzY4zLYgxtwMjp4/ya+vIZi0v3hdoy8Dwc=
Subject key identifier:   41:7C:04:C3:D8:16:23:D8:18:76:45:AD:90:DD:78:24:CC:1F:7A:6A
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       0197BA7DD5FB262E33FBC795A34CA871C153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          15B4
Signing time:             Sun 29 Jun 2025 07:01:38 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:38 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:38 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: bYtsYj4Yo3Y/7rF2IFEDqMMMTKltP83FDDEhq01Ty/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:d5:fb:26:2e:33:fb:c7:95:a3:4c:a8:71:c1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Jun 29 07:01:38 2025 GMT
            Not After : Jun 30 07:01:38 2025 GMT
        Subject: CN=417c04c3d81623d8187645ad90dd7824cc1f7a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:dc:7b:39:30:cb:5d:a4:42:12:82:d7:bb:
                    52:56:87:19:51:cb:1d:52:22:0c:90:6a:68:ab:06:
                    af:cc:90:c7:cd:9c:f4:fa:27:c9:03:2f:01:2d:76:
                    c0:97:1d:38:bb:78:d2:fa:ba:bf:d2:f7:e0:9d:f9:
                    ee:92:c2:0e:ef:50:36:9e:b5:ec:c7:32:f2:c5:47:
                    8d:ed:30:1b:6e:2a:e7:79:0e:04:d8:8f:a4:29:f6:
                    e9:32:4f:24:15:fd:a4:c4:5a:f2:00:7f:f4:2b:d9:
                    66:19:d3:01:8a:05:26:60:3a:94:70:34:17:93:0d:
                    54:95:ba:94:53:12:4a:41:92:33:cc:67:9f:d3:51:
                    cb:ce:55:33:71:07:17:7a:d4:3f:74:91:2b:96:c8:
                    85:fe:ce:22:65:f3:f0:fd:04:91:ce:c3:72:d1:00:
                    d4:36:a4:95:d4:a1:1d:10:50:41:f1:a0:e9:75:b0:
                    b8:e2:7a:93:7a:8f:2d:c0:f9:f4:1f:a7:ae:4e:c8:
                    04:57:38:68:0f:a4:10:97:14:94:6b:6b:a4:57:b3:
                    dc:83:ca:6d:30:b0:97:23:24:b5:ec:39:00:0a:33:
                    df:38:9b:25:98:53:c1:f4:08:d6:05:7b:dc:62:ca:
                    22:43:24:71:a3:36:ac:94:3d:69:51:a5:a0:7d:ce:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7C:04:C3:D8:16:23:D8:18:76:45:AD:90:DD:78:24:CC:1F:7A:6A
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:c4:7b:ee:78:d9:93:7b:9a:40:8d:3a:70:16:38:d3:13:
         c7:4a:07:32:40:68:ec:e6:cc:bc:ed:15:1f:da:18:f5:f4:2c:
         83:f3:4d:fe:e1:38:f6:1e:c0:c1:ee:e0:78:3b:41:83:77:5e:
         d6:a0:72:c4:47:3f:f1:07:e3:b6:8c:75:19:05:b5:f8:a0:4f:
         83:e9:58:51:c4:f2:1e:14:2b:a1:82:a9:15:ec:4d:19:12:40:
         50:12:79:38:46:b1:69:92:d1:78:b5:bc:fe:d3:29:6a:2a:b5:
         71:4a:8c:46:71:e0:ad:2b:d7:eb:f0:9c:16:e8:97:41:72:56:
         46:9f:5d:21:f1:67:2f:37:95:7a:e5:38:86:9a:f3:94:dd:8b:
         c5:62:de:a5:3f:fb:e0:60:aa:4c:25:32:e7:4c:b2:7a:e9:fa:
         b2:ac:7b:9e:99:ff:e9:0d:f1:1b:1a:9c:a5:98:03:ce:2c:7d:
         ec:4e:a9:5c:39:d2:a3:10:95:58:4e:c6:b3:20:72:7e:98:8e:
         62:79:aa:e9:22:d2:6b:44:e9:ad:81:be:2a:de:16:d1:c8:fc:
         d0:f0:49:40:5f:f7:1c:05:68:ac:13:2e:3f:f7:5a:dc:96:0a:
         1b:3e:66:02:80:f7:05:1b:0f:6a:01:c7:44:72:e2:7b:52:e4:
         1b:bf:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:42:53 2025 by rpki-client