Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          5mu1v9vSvjEi11cu51oc1GbNUBvXJmH4aLooFdQvqXI=
Subject key identifier:   EA:EE:C7:4B:4E:6A:94:39:13:78:E3:5B:5B:EE:7F:81:07:55:B2:08
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       0197C6152015A6593435C28A10E3A65F21F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          0E9F
Signing time:             Tue 01 Jul 2025 13:02:42 +0000
Manifest this update:     Tue 01 Jul 2025 13:02:42 +0000
Manifest next update:     Wed 02 Jul 2025 13:02:42 +0000
Files and hashes:         1: 0YppZtvRSXBHB8NFrLn_rzdM4Wg.roa (hash: AIX2Owt5viXo6Wp2eQTWR2x2rHaX/2g8xn17pbf1zi4=)
                          2: EKnIHBjVrQVGKttI-rFo2gf2VFc.roa (hash: J3kh1NFjTixOap26aJDcz17JVV8gbZy6u7PZjGr/JnE=)
                          3: H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa (hash: L4ck5kUvwk5NkXR5fk3e/8692feGx3cZZTXMDkDHo6o=)
                          4: LaP9yZWFLbz-vA6yy7WQjmvmnXk.roa (hash: dSsBDcLcDlWyNXwHKuTffodeoLPC9SNQ0Byy4wB2Z1w=)
                          5: j0eQCpRbkkshg2cOl2P0JLeBDDw.roa (hash: sMtFOxKW/3UNJ7k3m/3q4HKIZXU/80JJ7tR1eHGV0HE=)
                          6: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: Sr5Di2u+FwtUOeT2G/2EWyMgyWFdNA0/vTVNmey7q8g=)
                          7: rJVC54KMnjCB_OVNXkR7wbY_pqY.roa (hash: XBqW9LJVjSv4j8aKjrCl3Ou7nqLb3Clpr0sfUy3Uq/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:15:20:15:a6:59:34:35:c2:8a:10:e3:a6:5f:21:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Jul  1 13:02:42 2025 GMT
            Not After : Jul  2 13:02:42 2025 GMT
        Subject: CN=eaeec74b4e6a94391378e35b5bee7f810755b208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:23:36:fd:ad:9e:f3:8b:48:b6:4d:31:7f:
                    5d:5d:0f:a8:71:01:4e:51:9f:d5:41:ba:32:ac:52:
                    3a:33:5f:02:e2:64:d9:e9:80:f0:1b:0a:12:a2:44:
                    3d:72:5d:1d:53:0e:95:a6:84:be:fd:7f:cf:aa:63:
                    29:a6:bf:71:b3:10:06:60:46:b4:99:68:f2:56:74:
                    16:97:f9:1f:0c:78:47:3e:0c:62:3a:5f:f7:a3:54:
                    bc:cc:47:c0:2c:bb:8d:a2:3e:fc:b2:3c:88:51:b3:
                    fb:9c:fd:dd:12:8c:af:80:6c:80:8e:ae:36:53:c8:
                    44:28:5a:28:55:0e:10:14:54:45:f2:21:83:5b:3b:
                    f1:6e:97:c1:57:0f:7e:9f:b9:a2:97:de:68:58:8b:
                    c5:63:3f:c3:07:8f:09:0c:d8:1f:a1:9a:a7:73:bf:
                    c5:d7:53:6b:58:57:ef:f8:80:18:9a:2b:77:3f:07:
                    64:0c:13:19:25:f3:b4:eb:6f:80:45:ce:9b:09:50:
                    cb:e3:78:82:bd:6c:b2:e3:7e:a9:33:52:bb:79:9e:
                    cf:32:78:dc:f9:74:2a:39:ee:b3:6e:6e:d5:ae:40:
                    f3:6e:fe:a0:66:32:7b:94:42:41:33:74:02:c3:8d:
                    38:17:e9:67:95:0b:bb:73:18:10:5f:73:29:32:36:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EE:C7:4B:4E:6A:94:39:13:78:E3:5B:5B:EE:7F:81:07:55:B2:08
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:a4:8a:cd:50:2f:6f:2e:87:65:d9:50:12:36:1c:47:7a:
         09:a1:7a:4a:a1:e7:7e:bd:a9:96:8d:d3:32:ff:0d:39:44:de:
         14:0b:3a:51:57:3a:78:67:f5:5c:3b:3b:0e:80:ee:a3:da:7a:
         e8:ac:6c:9f:ba:e8:ff:3c:2c:36:2d:b6:1e:da:16:0a:fc:b6:
         e0:f6:c4:fb:28:f5:18:2b:d8:87:69:df:b0:70:58:3c:22:ff:
         cb:87:6f:d2:3b:b2:69:9e:ea:a1:d6:e9:b1:98:3e:ca:54:1e:
         5c:3f:9e:9e:be:1e:5b:4b:90:f5:cd:83:46:0f:9e:5d:90:ee:
         91:f0:57:a5:66:52:3c:1b:15:ad:96:63:ad:42:c7:3f:76:11:
         70:d9:f1:3b:a0:35:36:ce:fa:19:29:7a:42:9b:71:9c:36:0e:
         45:21:25:00:ad:bc:4d:e9:ca:44:a4:77:76:66:0b:e8:9e:85:
         33:d8:bd:ca:2a:b2:4c:8e:8e:2e:f8:be:20:c4:bd:95:09:9e:
         18:0e:0f:9f:7e:32:50:f2:f2:66:c6:54:6c:6b:20:05:c7:0a:
         42:29:b1:8a:58:85:79:28:3f:2c:29:7c:b6:3b:4f:01:f0:7f:
         91:58:60:03:fe:d6:25:95:5c:b5:ea:84:df:3f:31:e2:9d:c5:
         e7:eb:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:01:14 2025 by rpki-client