Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          I1jFmyNGZiutxPf2lYKHF1C0PLMrCq/yRjDTBRWYCvo=
Subject key identifier:   95:29:58:0E:A3:F4:AA:DE:B6:F8:F3:B5:C4:FD:1C:96:2D:22:F9:B4
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       0197B70EE24223EDFAADB46DB64853E79783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 15:01:35 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:35 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:35 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: cAI5ay2F/B0+zEdXFErKBjfnoKpB5mvvJpzF+xAbo3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:e2:42:23:ed:fa:ad:b4:6d:b6:48:53:e7:97:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: Jun 28 15:01:35 2025 GMT
            Not After : Jun 29 15:01:35 2025 GMT
        Subject: CN=9529580ea3f4aadeb6f8f3b5c4fd1c962d22f9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:07:29:c6:8a:31:25:8f:63:7b:16:12:30:
                    12:ba:9b:08:96:8c:c6:d7:11:9e:78:d5:43:ee:a0:
                    2f:a1:3e:28:62:db:e3:81:a2:12:3c:2a:17:56:b0:
                    65:a6:64:44:98:3c:9d:67:92:7f:48:8b:61:54:72:
                    25:08:53:97:b4:22:a0:59:99:55:3f:ba:11:4e:7d:
                    06:02:98:9c:3c:b7:eb:bd:36:33:44:4f:85:fe:69:
                    63:fa:ee:16:3e:d6:82:f8:9a:aa:8e:df:cc:09:21:
                    82:e3:1a:d9:e6:ba:33:f5:36:ed:61:06:99:c8:53:
                    13:db:e0:f4:84:a9:d8:ab:a9:07:47:dc:b1:82:9f:
                    eb:68:e5:cd:b7:2e:78:39:57:34:d9:01:d1:f3:e0:
                    76:a6:84:1a:be:8d:80:42:5f:05:60:bb:f4:77:79:
                    e2:b8:07:7e:df:de:69:c8:d7:52:2f:3b:59:bd:61:
                    47:23:6c:5a:68:20:47:1f:80:cf:a7:63:7b:0f:2e:
                    d7:3d:2e:58:c9:20:46:bf:f7:46:f6:52:41:d3:59:
                    56:cf:2c:09:0a:76:63:5d:4c:03:32:1a:80:a4:cf:
                    ab:a5:80:07:61:fb:5d:a6:41:96:67:8a:16:b6:ef:
                    82:65:2f:69:6f:3f:7f:59:da:40:59:a7:c5:6d:58:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:29:58:0E:A3:F4:AA:DE:B6:F8:F3:B5:C4:FD:1C:96:2D:22:F9:B4
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fe:be:89:48:c5:76:0f:3a:83:a2:2a:b4:67:8b:63:8c:b0:
         c6:12:d3:15:b9:8b:0a:7a:95:a9:ad:f2:fd:a9:ed:6b:3c:26:
         0b:34:5b:a0:fc:5b:86:10:11:84:24:e3:c6:43:dc:cc:f7:77:
         90:1e:30:45:57:f0:75:4b:3d:dd:11:2f:c3:40:8a:ea:a3:3f:
         93:75:1e:8f:e4:c6:f1:c1:26:1a:8c:a9:99:82:f1:7f:00:de:
         f6:78:48:77:7b:3c:6d:e4:90:8d:af:da:17:04:56:79:83:a7:
         70:06:75:44:18:7c:81:55:3d:38:81:fa:c4:f0:86:47:f3:38:
         7d:c6:af:41:d2:85:ce:21:0a:08:60:e6:35:27:64:33:b2:e4:
         da:98:b3:33:dc:0a:98:67:08:91:d1:99:af:cc:95:28:9f:a4:
         e3:88:1d:9b:d7:71:6e:f6:b4:e3:2e:da:7b:aa:59:8b:70:24:
         a7:fe:a2:fb:a3:9c:f0:10:bc:1f:48:f1:d4:14:22:60:08:cd:
         4c:62:c8:a4:d7:64:32:48:cb:f1:6a:2a:9a:63:47:85:25:ee:
         6e:c0:a3:ae:b0:a7:d7:d3:07:65:21:92:e4:dd:5b:6c:64:d3:
         52:49:5e:28:49:e2:9f:a5:03:eb:c4:92:ef:b3:57:c6:8d:10:
         9b:4a:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:02:59 2025 by rpki-client