Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File:                     TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier:          LhbmRf5kyP0Yy4GBYEmSbuHoV5lbYnxhl/ZODpdJesQ=
Subject key identifier:   16:73:30:4B:82:5D:87:8C:4C:67:AC:3A:94:77:EF:47:C0:5C:18:BB
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer:       /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial:       0197B6A19F99ED7C75FE4DE175BD9539869B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 13:02:14 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:14 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:14 +0000
Files and hashes:         1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: HDTQl8X1AGEguAIXLy50o6F44v20n0HW89EUArYvcw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:9f:99:ed:7c:75:fe:4d:e1:75:bd:95:39:86:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
        Validity
            Not Before: Jun 28 13:02:14 2025 GMT
            Not After : Jun 29 13:02:14 2025 GMT
        Subject: CN=1673304b825d878c4c67ac3a9477ef47c05c18bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:48:2a:5a:36:ea:00:e8:0a:57:9b:cb:b5:
                    46:62:e4:fd:2e:1f:3d:41:4e:e2:5d:ee:e3:dd:a6:
                    6c:51:9f:87:89:80:d4:e9:a4:31:66:f8:3f:e3:ec:
                    f3:6a:85:ab:a5:fe:88:46:b4:31:c8:00:a6:a1:98:
                    b5:37:8e:05:fd:07:11:c3:fc:5f:c2:a1:6a:1f:44:
                    3c:44:64:12:31:57:af:af:ed:b5:fd:70:0c:e9:dd:
                    28:04:f5:ef:c8:e4:b5:34:c3:64:bb:02:7a:44:0a:
                    8c:32:c8:e6:8a:09:77:b6:07:65:a6:e6:3c:50:df:
                    bd:1e:7a:10:12:80:1b:72:1d:92:b6:81:0c:e6:f1:
                    e7:70:d2:42:d1:93:8b:30:6c:73:b8:69:21:8b:9f:
                    fb:15:30:f6:e2:e4:e2:65:50:85:f9:48:d2:8e:30:
                    9b:f2:1d:b6:01:b4:10:dc:03:c0:e7:ed:e6:5c:6e:
                    7e:5f:fd:9c:e9:19:2f:c1:2b:63:e1:d6:4d:b2:f4:
                    8c:13:65:6f:de:26:cb:85:10:48:7e:b6:15:a3:c9:
                    03:28:6a:95:5e:0d:c4:15:dd:6e:1c:7d:52:e1:7f:
                    02:2b:a2:6f:61:1a:e9:0e:fa:25:5e:5c:61:2b:80:
                    b1:2d:ad:fe:d6:d4:ac:a0:ce:3f:b5:d5:15:95:23:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:73:30:4B:82:5D:87:8C:4C:67:AC:3A:94:77:EF:47:C0:5C:18:BB
            X509v3 Authority Key Identifier:
                keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:2d:16:3a:50:15:5b:1f:59:6d:c4:dd:ba:64:46:67:2b:
         f3:75:73:22:d7:3a:6c:06:3d:f2:88:bf:c4:2b:72:5d:6d:76:
         d2:78:c3:a2:dd:61:a6:8d:37:01:1f:25:6a:63:fe:56:33:1f:
         07:06:29:a6:6a:8f:ba:a5:c8:c9:5d:93:77:cc:57:28:be:64:
         6f:5f:92:a1:44:23:e0:91:23:54:bb:6f:0d:4f:73:dd:42:7e:
         60:85:a5:a9:7f:5b:7d:f8:1f:d9:c1:6e:dc:cd:20:19:51:2c:
         f8:1c:4a:30:a6:fb:fd:d8:e4:46:60:37:ea:8c:0a:1e:cd:a8:
         69:58:04:c1:6f:4b:0c:c6:4d:5c:08:f4:5d:ae:3e:9c:ff:18:
         0c:53:ed:f5:20:59:84:58:0f:3e:28:1f:bc:90:de:cc:88:1e:
         d6:00:7e:06:6e:c8:23:f1:b0:cd:c2:88:aa:03:f7:80:d4:04:
         8f:23:d3:6d:88:d6:d9:39:cf:4c:90:e6:4f:3f:70:a4:52:79:
         50:3e:81:29:bc:7c:26:33:eb:bb:b0:7e:d4:33:12:dc:6f:13:
         0c:ff:58:88:25:c7:fb:3b:89:0f:c5:07:9d:57:ea:11:c9:3a:
         94:a5:8b:e8:6d:e7:2f:04:ed:40:d4:f1:45:8f:a4:16:80:84:
         90:91:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:00 2025 by rpki-client