Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
File:                     ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json)
Hash identifier:          DXIvRj8AWn+Lepf4gN0LMPEmULiokfqgk3bsvutqtGc=
Subject key identifier:   72:78:19:35:96:CE:01:8D:43:E6:7C:B3:39:C5:A6:2A:1D:02:0E:5E
Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
Certificate issuer:       /CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Certificate serial:       0197B77C1413153F5787671DEEB63A3BA5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 17:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:51 +0000
Files and hashes:         1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: 9nWuLU1OlY/MpZeDYphz99O6TOGFkWM7ow5CeHlKTO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:14:13:15:3f:57:87:67:1d:ee:b6:3a:3b:a5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f
        Validity
            Not Before: Jun 28 17:00:51 2025 GMT
            Not After : Jun 29 17:00:51 2025 GMT
        Subject: CN=7278193596ce018d43e67cb339c5a62a1d020e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:4a:25:02:23:b3:16:bf:9c:d1:41:1b:83:
                    e7:0b:d6:0b:38:da:d2:dd:c7:63:63:ba:4f:df:24:
                    b8:87:0b:e5:6b:1b:d6:96:94:9e:0c:e6:ce:cf:54:
                    3f:2f:56:0d:13:4b:b8:1d:43:e1:48:99:d9:db:c6:
                    da:bf:93:54:73:c6:fc:e5:4a:9e:67:32:d7:3d:ea:
                    b0:4a:0b:02:23:00:2b:2f:3d:d1:a0:97:91:d5:ed:
                    2c:8f:df:7f:6c:af:e3:53:b5:7b:b2:2b:37:24:d9:
                    4a:f6:c9:aa:ec:5c:45:a7:85:ae:8d:6e:3b:67:ac:
                    9b:bb:05:d7:48:ce:35:45:3c:52:81:35:7b:84:55:
                    aa:14:dd:57:8e:d5:65:a1:ce:b6:1d:77:f1:bc:4d:
                    84:1f:cd:15:72:55:c1:76:86:a7:8e:87:6c:98:6f:
                    1e:ae:df:87:74:29:a5:9c:5d:53:b1:09:24:ed:58:
                    f9:9a:b3:63:31:04:3e:5a:6f:89:9a:53:9c:df:6a:
                    e6:95:57:8a:c1:92:08:25:66:f8:ea:ba:45:23:f9:
                    6d:09:0f:41:b5:85:41:34:56:bc:e2:03:f8:bb:ba:
                    ca:d4:66:db:ba:a7:f2:c3:71:16:ca:a5:01:4a:b4:
                    c7:32:f5:c4:f9:8e:ed:d2:c5:65:dd:9f:56:c0:f0:
                    92:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:78:19:35:96:CE:01:8D:43:E6:7C:B3:39:C5:A6:2A:1D:02:0E:5E
            X509v3 Authority Key Identifier:
                keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:d8:f7:ab:6b:70:63:92:6d:03:91:ac:59:ba:2f:c1:b2:
         ff:e1:80:8d:3d:6a:93:cc:ab:58:c2:7d:b1:c2:21:0a:01:0b:
         4a:8a:a6:26:3a:69:87:14:a5:5e:d1:d1:a1:90:9e:c1:76:b5:
         df:30:dc:e7:35:6e:ce:b7:a7:71:9c:50:6c:c0:c7:bf:e1:bf:
         bc:76:6d:71:f5:d2:12:e2:43:dd:18:50:46:f5:54:ea:c6:8b:
         71:3c:88:c5:ce:10:62:96:57:c4:82:a6:ec:a6:5c:4a:50:eb:
         17:2f:3b:53:89:d2:d5:5d:c0:d6:09:92:49:e3:53:cc:07:76:
         8e:92:41:2d:23:de:4b:db:73:4d:cd:b2:91:7b:5e:fc:c3:4c:
         31:b1:d3:c5:e4:79:92:42:78:ff:97:e8:fd:fa:ea:a0:25:1c:
         a4:75:66:61:45:18:55:83:58:fd:4a:01:7d:b5:e9:89:b2:e2:
         ca:25:74:f4:3f:0d:db:c6:e0:60:2c:f2:98:0a:8e:a2:1f:fe:
         a5:48:a8:9f:65:b7:7d:2c:5a:e1:66:b8:f4:64:42:00:05:ab:
         97:33:a2:08:42:3f:19:b6:3f:a8:18:af:31:8f:3c:63:62:d8:
         27:65:60:33:f5:1f:37:37:c1:7f:7a:ec:f0:86:76:53:7e:8d:
         d7:9c:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:38 2025 by rpki-client