Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File:                     0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier:          NkBti0dKgT2+ybc+exFp3Ihds27enULWQwAgckZQueI=
Subject key identifier:   BE:63:DE:10:BF:05:D6:CD:7D:41:B2:57:D8:99:23:F8:32:97:30:95
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer:       /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial:       0197B8907217FAC735C7AE29152F3AD744E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 22:02:43 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:43 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:43 +0000
Files and hashes:         1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: U9/ps6hCW6dUoYwepUSVSTH052BcGrO5yXuqHC8c0Io=)
                          2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:72:17:fa:c7:35:c7:ae:29:15:2f:3a:d7:44:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
        Validity
            Not Before: Jun 28 22:02:43 2025 GMT
            Not After : Jun 29 22:02:43 2025 GMT
        Subject: CN=be63de10bf05d6cd7d41b257d89923f832973095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:3c:bf:40:0c:27:d1:bf:cf:3f:5c:d0:34:
                    7a:7c:69:82:29:f5:e8:f3:49:4c:79:12:40:4a:7d:
                    ed:17:a4:ea:49:eb:63:57:15:57:f7:7d:e8:46:a0:
                    c1:40:28:90:eb:44:b0:6f:1b:22:c0:43:3b:c0:ee:
                    26:fd:f3:eb:35:33:23:e1:92:85:4c:0c:b8:a3:52:
                    ef:c1:e6:1b:38:de:ef:7f:45:a9:7c:bb:22:42:0c:
                    22:e8:16:9f:9b:3e:a2:4b:d0:d2:e2:55:e3:8c:c5:
                    a1:09:ca:0e:c1:41:1c:c1:b5:9a:cb:51:43:05:37:
                    a9:53:34:a9:6b:75:ff:92:27:35:fd:2d:32:fc:9f:
                    85:5e:16:9c:f4:03:86:7e:e1:57:b1:0c:ee:a8:00:
                    2b:f7:27:92:0f:21:44:aa:78:90:13:b2:ec:7f:0a:
                    75:9d:d4:4d:98:87:8e:d4:39:e1:7d:67:9b:33:fa:
                    9c:15:77:e6:1e:f8:d6:42:39:ef:65:e4:04:0c:17:
                    e2:fb:5d:d7:a7:f3:b4:fa:90:c0:21:8b:81:14:13:
                    b0:95:de:1b:33:0a:02:a3:ce:d3:ee:c1:fd:cf:71:
                    54:24:98:fc:f5:d0:6d:63:a4:c9:a1:22:bc:cb:75:
                    98:24:7f:c3:22:3f:c7:7b:7a:d4:20:c7:35:f2:e9:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:63:DE:10:BF:05:D6:CD:7D:41:B2:57:D8:99:23:F8:32:97:30:95
            X509v3 Authority Key Identifier:
                keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:13:ad:28:b6:22:d4:45:05:df:69:06:b9:72:c0:6b:18:59:
         7f:32:c0:92:88:9a:34:c0:d8:2d:aa:76:3a:67:0f:4f:ac:8f:
         a0:36:05:2c:7e:ab:66:00:f8:f3:73:9d:d7:18:b3:bd:49:c8:
         22:c2:68:99:32:ad:19:4a:5c:40:c8:5b:1f:e5:6e:25:78:5e:
         55:20:74:43:7f:7c:23:81:03:bf:b7:19:23:a8:ba:ff:0c:e0:
         2a:bf:92:ec:4b:60:f5:43:8a:6c:b0:53:04:a4:12:c5:a2:48:
         0b:ac:fd:44:42:ed:92:19:ac:4e:c7:d3:24:52:fe:54:32:5f:
         6d:9c:92:01:e7:49:08:92:0f:94:31:72:6a:c4:33:99:1a:a1:
         fd:e4:2f:6a:f5:d5:fa:f0:26:55:c7:8d:5e:7d:11:5b:73:45:
         0e:16:4e:64:3c:02:50:43:63:5c:3d:d9:86:2b:10:1f:6c:68:
         7e:c5:b5:0f:9a:d0:f5:f7:80:94:51:d0:a0:38:92:d4:6c:42:
         70:b6:a6:bd:18:26:b5:6b:01:c1:c3:93:4a:4d:3b:30:89:97:
         f1:21:cc:3e:33:03:e2:0b:e4:88:83:aa:fe:e5:5d:a7:9e:0b:
         68:18:45:41:ec:ff:06:46:34:1c:d2:f4:26:14:d4:6b:6d:75:
         b2:7b:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:36 2025 by rpki-client