Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
File:                     RBMe6Tam-kL_OvCmrobCxmU91XM.mft (raw, json)
Hash identifier:          K0gpSXWjTG3NG9hldX1T6QIpbYO1nm0hRTjDuz+RkIE=
Subject key identifier:   68:BE:08:90:65:13:0B:EB:3B:3E:4E:E5:6C:FA:05:E8:9D:9C:55:87
Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Certificate issuer:       /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Certificate serial:       0197B7454707ED9E14928AA8DA9A19692B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 16:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:00 +0000
Files and hashes:         1: RBMe6Tam-kL_OvCmrobCxmU91XM.crl (hash: R3NY4tP7bFIwORYD+Vj1+Do5vzi5gU6XQ24PYKNGb/w=)
                          2: xHkJHzTD8_YsVJb1E014CGyqfNk.roa (hash: vU0FBIoesehMBLGSsYMRz2M7MHLMPr/AmIolqA/4dRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:47:07:ed:9e:14:92:8a:a8:da:9a:19:69:2b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
        Validity
            Not Before: Jun 28 16:01:00 2025 GMT
            Not After : Jun 29 16:01:00 2025 GMT
        Subject: CN=68be089065130beb3b3e4ee56cfa05e89d9c5587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:97:a9:cb:f1:03:65:d3:63:58:2c:2b:3a:
                    78:aa:a0:0a:22:9a:9b:46:25:74:aa:fb:ae:5e:7d:
                    bf:d4:03:23:d6:31:98:1d:b9:5b:52:51:92:b2:0b:
                    8e:5d:bf:f6:43:39:8c:a3:7d:d0:2d:df:17:d0:c6:
                    25:be:73:d1:96:a9:d0:a8:59:d8:37:28:ca:e0:93:
                    2e:63:cf:79:8c:b2:90:cb:ce:40:35:46:97:6a:c0:
                    f0:33:8c:cb:fc:f7:b1:93:50:e1:14:67:79:db:86:
                    eb:d6:85:8f:27:f2:09:15:8d:8c:7c:cb:c1:4e:39:
                    ae:78:49:a6:03:14:6d:2e:69:58:04:ea:62:e5:7f:
                    68:25:e8:7b:6b:3b:0b:25:8e:62:1d:2f:95:59:02:
                    fe:ca:cd:a8:86:a4:7c:5f:18:af:ac:13:9c:43:39:
                    6a:07:47:73:df:2a:28:e4:13:d1:9e:b9:45:5c:90:
                    a5:97:d7:47:38:b0:81:6b:6c:1c:92:96:42:67:36:
                    1e:df:e1:e1:fd:a8:86:5c:fd:3d:88:7e:c3:56:2b:
                    b4:c7:36:60:49:78:91:6a:3c:3d:2a:61:b9:d7:82:
                    a3:79:5c:d1:5f:ba:16:7a:43:dd:4f:42:83:c7:a9:
                    c2:cb:d1:e2:29:7d:92:a7:75:46:df:70:97:92:d4:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BE:08:90:65:13:0B:EB:3B:3E:4E:E5:6C:FA:05:E8:9D:9C:55:87
            X509v3 Authority Key Identifier:
                keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:85:8c:00:04:8b:eb:bf:2d:87:2f:0d:87:35:a6:1a:7a:e6:
         8e:13:22:48:03:51:4c:84:27:28:81:40:71:72:fc:c4:07:dd:
         ee:73:04:e6:ce:2e:27:e3:61:51:09:0e:23:a6:33:c1:8a:1c:
         9d:57:e6:24:6f:c8:b1:81:de:10:28:d5:8a:df:f8:ed:86:ff:
         14:fe:e4:b1:8f:0c:e9:35:81:be:5f:f0:2d:63:19:f1:71:56:
         cc:a2:f5:db:31:30:74:da:91:f6:78:f9:66:6a:4a:ca:f3:39:
         c7:49:9d:24:42:61:0b:cd:65:da:d7:07:08:dd:ee:7c:e3:2d:
         40:ba:17:d7:c8:13:fa:33:67:a0:a3:69:b2:2a:08:26:e7:c0:
         03:53:2e:a1:90:70:db:28:b2:d1:8f:03:bb:6c:45:dd:7d:42:
         1e:4d:c6:3d:75:89:32:34:4b:4e:8d:38:7a:fc:64:55:04:17:
         7e:06:f6:91:c8:ca:26:11:ea:ec:16:42:7a:08:56:d0:90:d7:
         a7:2b:31:22:cb:f7:8b:8d:59:07:51:25:04:6c:2a:37:19:4d:
         51:2c:e8:e1:9f:33:96:f6:5e:a8:30:5b:a1:ab:b5:be:f9:c3:
         89:a2:96:c2:3d:4b:82:50:b4:ae:da:47:cb:6a:74:f5:d6:98:
         c0:09:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:09 2025 by rpki-client