Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
File:                     1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft (raw, json)
Hash identifier:          ltmNW1/kTP7f7gK5XEUWF6BwQS6KDTljXIIYggvxQIc=
Subject key identifier:   71:E5:F6:20:F8:99:9B:42:01:AD:38:5D:57:5A:2E:5B:AD:86:01:BE
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Certificate issuer:       /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial:       0197B6A1F04E9395878508AAD589F17199AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:02:35 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:35 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:35 +0000
Files and hashes:         1: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl (hash: xrom8V+/jspJXeS1g+MBg44+xpeiQT5C9OrTijztS50=)
                          2: HpYep1gyuglubkg27rH0_NPEYfk.roa (hash: eknsEEDWFIUmysvI1SqfOomMLn1u1uKJE0YncED6Hxo=)
                          3: P8E9Ou4g1WbTKObdDwcArgBdv5g.roa (hash: jEoo4eK/vJf03qD8uvHcjuGFNdhu1O0hJ9v27A3yEo0=)
                          4: pM8rrfbLw8gBuT9MppMBPtFFKlM.roa (hash: ioCVW6t7ze0VBB3sFaN026IrAp6OLLgUf56gkcAIXz0=)
                          5: qkEX-Kg40A3qQ2kkYyX2gfh1PGs.roa (hash: og5sz8ZyyZWxCY26JVGs9nTzuHebJDo/OXt0OqQcO4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:f0:4e:93:95:87:85:08:aa:d5:89:f1:71:99:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
        Validity
            Not Before: Jun 28 13:02:35 2025 GMT
            Not After : Jun 29 13:02:35 2025 GMT
        Subject: CN=71e5f620f8999b4201ad385d575a2e5bad8601be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:79:3e:7c:31:83:4b:5b:97:0e:9d:07:10:
                    0e:84:e6:15:91:78:23:b8:53:0b:6a:c6:4e:8a:09:
                    37:bf:95:e6:7f:06:df:43:96:3c:48:82:e5:f3:3c:
                    a4:ce:b3:73:f0:9c:b9:13:45:ea:60:4a:23:3b:a5:
                    9c:05:bc:52:69:59:f0:9f:88:d8:48:9d:2d:56:51:
                    f2:ee:fe:a5:ea:01:62:ee:e9:db:96:f2:a9:41:73:
                    37:59:9d:78:dc:f3:3a:56:be:54:08:2a:2d:69:96:
                    d7:0e:14:23:f4:c5:8e:0d:f5:06:15:e6:4a:00:7a:
                    c6:c6:66:0c:25:a5:58:95:a7:e5:f1:25:62:af:c1:
                    f2:49:8b:73:ea:86:01:2f:0a:b1:d8:2b:9e:5d:85:
                    94:93:2d:e4:fa:42:50:a7:be:11:14:02:47:29:f4:
                    f2:bc:05:9a:e3:0b:4f:ac:7e:7f:db:2f:0b:ea:f1:
                    93:16:8d:53:5d:9c:2e:22:fd:97:ba:d6:b5:a6:97:
                    42:b3:bb:fb:a3:0f:0f:dc:bc:bc:89:79:4c:c4:63:
                    dd:e4:69:d2:de:99:2a:50:cf:8c:cb:b4:55:26:a7:
                    f5:1d:57:78:07:2a:41:25:33:60:d5:1d:8d:e3:e9:
                    3b:7c:b1:6a:66:0e:88:a8:c6:40:35:54:22:85:d2:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:F6:20:F8:99:9B:42:01:AD:38:5D:57:5A:2E:5B:AD:86:01:BE
            X509v3 Authority Key Identifier:
                keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b4:42:74:a1:36:b1:87:28:c0:3d:f5:90:77:af:ef:70:b2:
         f6:3b:34:c9:d7:6d:6c:30:a3:77:38:b9:1e:1d:ca:9c:4b:ca:
         f1:82:c0:ab:71:58:b8:67:71:23:63:41:3f:23:4e:b5:ac:37:
         0a:ea:62:10:51:59:e0:a6:2c:8f:de:16:92:ea:fe:87:11:6f:
         29:54:2e:f4:4e:40:15:50:39:57:d0:bb:b4:c2:b4:2c:d2:29:
         b1:a6:b7:65:a8:cd:e8:48:b2:f0:c8:ed:54:8f:c8:53:09:dc:
         b8:78:ab:73:42:f7:3d:9f:72:c8:78:41:3a:14:27:c8:44:f9:
         ae:6f:3a:c2:f6:d4:bf:cb:1b:16:12:dc:99:dc:42:38:57:d1:
         96:f5:45:ac:fe:6f:4a:2f:5d:91:39:bf:ee:0d:b7:fd:9d:80:
         4b:1d:c4:1e:87:d3:a3:9b:47:d6:e1:b8:4f:cf:8d:c1:b1:9a:
         54:ee:24:a7:e7:cc:1e:5e:1e:bc:e2:94:e8:91:fc:89:88:43:
         cb:ff:ab:b7:74:ae:1a:fb:ff:7e:22:2a:4e:8e:27:f2:56:77:
         be:d9:ec:ff:45:7a:f2:a7:a3:b2:18:09:18:46:84:aa:84:a3:
         75:4a:fe:cc:be:da:9b:16:e9:e2:07:4b:35:1f:65:f5:1b:9a:
         19:bb:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:45 2025 by rpki-client