Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File:                     lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier:          GUTKn1yW7LS0Hg3cWnpcLlKz4Sv3hLr+6t7/OOLiXwg=
Subject key identifier:   FB:2B:1A:A0:09:57:72:58:F3:77:11:FC:D6:17:90:47:00:C5:C5:3C
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer:       /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial:       0197C349992E57184AAFE1F82168CAE63D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number:          15BF
Signing time:             Tue 01 Jul 2025 00:01:09 +0000
Manifest this update:     Tue 01 Jul 2025 00:01:09 +0000
Manifest next update:     Wed 02 Jul 2025 00:01:09 +0000
Files and hashes:         1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=)
                          2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=)
                          3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=)
                          4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=)
                          5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=)
                          6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=)
                          7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: lSXoJeVt3Gq0tpkY3szcaZpnKZmUELsQYCbCHXz5wYM=)
                          8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:49:99:2e:57:18:4a:af:e1:f8:21:68:ca:e6:3d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
        Validity
            Not Before: Jul  1 00:01:09 2025 GMT
            Not After : Jul  2 00:01:09 2025 GMT
        Subject: CN=fb2b1aa009577258f37711fcd617904700c5c53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:22:50:e6:12:9e:ca:37:5c:a4:2f:5e:1e:
                    7b:d9:7e:55:b6:de:76:29:c1:3e:96:4d:e8:a3:d2:
                    cc:ac:a3:1b:c1:35:df:cd:30:1d:b4:79:6d:d7:2c:
                    e6:8a:97:ad:e6:8c:23:e2:a5:f4:36:dd:12:31:cf:
                    ba:85:0b:db:71:7b:4d:e7:d7:c5:70:54:72:4c:22:
                    a3:91:43:24:65:96:7f:d8:79:c7:1a:c9:25:75:90:
                    a9:fc:e3:22:52:f4:25:00:f4:d6:3e:77:b4:5e:b0:
                    c6:1a:96:e8:e5:19:2c:a1:79:09:6e:5d:c1:fa:52:
                    12:87:f4:d8:fe:ee:fa:9f:85:5c:e3:3d:0e:c5:da:
                    d4:a5:7e:f1:6d:50:17:d3:6d:8c:90:0b:2e:85:45:
                    6b:f8:c4:e9:bb:ef:dc:0e:7c:b2:56:3b:21:61:c5:
                    e6:57:30:95:9b:41:2e:f2:62:ac:29:17:d3:93:c6:
                    3a:37:42:d0:70:91:55:24:50:87:c9:f8:42:16:e1:
                    74:63:fc:32:6b:8d:01:79:a4:b0:66:08:f9:c1:38:
                    15:16:bb:5e:db:20:86:f0:2b:73:8d:51:7d:f7:f3:
                    25:3a:20:38:77:29:b3:7e:cc:10:02:17:13:dd:3a:
                    99:6f:ad:1d:6f:c4:b9:e0:83:17:5a:44:ea:66:f6:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:1A:A0:09:57:72:58:F3:77:11:FC:D6:17:90:47:00:C5:C5:3C
            X509v3 Authority Key Identifier:
                keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:54:a7:16:8f:62:74:a3:f4:e8:4b:ee:90:d7:31:4d:34:
         90:62:24:ff:e1:8d:cc:6d:4c:fc:55:b9:3b:33:74:f2:d2:ef:
         d8:9e:d0:b8:8a:b6:ea:5c:44:59:47:09:48:79:21:2a:ff:49:
         c3:e2:c0:c9:13:b3:b5:a0:9d:a5:1c:0f:a8:5d:e9:b8:5d:fa:
         7b:2d:59:3b:42:6c:3d:2b:8f:ed:46:63:9b:a7:b8:c7:35:3b:
         8a:f0:5a:36:ee:34:60:66:e9:0d:fc:4d:da:85:35:94:52:4a:
         aa:d3:85:c8:dc:6f:36:3d:e6:3e:d7:7d:db:96:6d:d9:c9:2f:
         a4:5f:2f:69:fc:0a:35:3a:b7:0c:6d:d3:b0:e0:69:25:a1:19:
         e8:d6:7b:dd:ff:f3:8c:c8:af:8a:10:a1:ca:06:87:98:0a:ad:
         4f:38:84:92:dc:cc:84:1c:d9:3e:bb:56:92:0b:dd:69:77:7b:
         42:71:e5:d4:a3:6d:34:16:8b:54:bd:5f:55:77:38:7e:c9:4f:
         31:b1:b8:41:75:97:ee:76:dc:77:8d:18:a0:e6:7e:06:da:d1:
         06:81:71:ad:29:30:66:c2:9b:0e:f8:96:17:1e:4d:d5:a1:7a:
         5a:2d:46:93:15:78:42:95:ae:8b:c1:8f:db:ce:4d:2d:0b:fe:
         c0:e6:b4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:51:57 2025 by rpki-client