Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File:                     Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier:          RxhrM/rBsuEEicP60RIx/FY4bLPmxEszlbpbjtK+UlY=
Subject key identifier:   1A:33:2E:39:CE:BD:6C:77:7C:92:C0:12:8F:90:15:FB:C2:AB:0D:0F
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer:       /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial:       0197BA7D7CDB3003B10943F0482A78FFAA06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number:          15B4
Signing time:             Sun 29 Jun 2025 07:01:15 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:15 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:15 +0000
Files and hashes:         1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: izVuIKjcawPKo4oLQLhrAqbJu2FmCaEfACKmn295zmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:7c:db:30:03:b1:09:43:f0:48:2a:78:ff:aa:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
        Validity
            Not Before: Jun 29 07:01:15 2025 GMT
            Not After : Jun 30 07:01:15 2025 GMT
        Subject: CN=1a332e39cebd6c777c92c0128f9015fbc2ab0d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:95:38:ce:62:73:b4:0e:e3:2a:43:1d:d8:
                    04:d7:57:e9:1c:97:93:c7:06:01:96:7a:1d:74:ce:
                    2c:fe:f0:f8:d8:ed:8c:45:7e:70:aa:3f:7e:62:95:
                    96:8a:3c:14:04:94:78:cb:91:b2:0e:5c:58:c6:bc:
                    8d:6c:13:06:39:a7:19:50:6b:22:fa:d4:9f:56:c9:
                    43:5a:22:ca:e5:5f:12:15:f9:d5:b9:39:5e:7e:32:
                    fc:a6:26:58:52:f9:55:d3:27:7e:ea:cc:ac:a4:7c:
                    30:05:21:9e:c0:eb:b0:67:03:32:33:f4:64:8a:93:
                    ea:e6:4d:b9:55:94:8d:f1:1f:e5:8a:4d:4a:47:4f:
                    a7:14:54:af:57:97:f7:11:eb:c0:99:5a:5f:02:d9:
                    94:4d:1b:3a:82:ef:5e:52:3d:c2:83:69:ec:10:eb:
                    73:a6:58:09:88:56:12:54:9c:e8:e5:bc:f6:25:a7:
                    68:0d:2c:4d:d1:a1:48:14:ff:5f:1d:dd:c2:f7:a2:
                    8c:0b:db:75:66:c7:09:6e:cc:a4:e7:e3:e9:11:2b:
                    e0:85:94:bd:9f:93:f2:63:39:57:6b:1f:0d:c4:48:
                    a0:62:1b:ee:f9:de:1e:9a:d0:e9:c1:17:cb:fc:69:
                    e6:d3:11:1a:71:95:33:d9:83:22:8a:37:ca:b4:24:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:33:2E:39:CE:BD:6C:77:7C:92:C0:12:8F:90:15:FB:C2:AB:0D:0F
            X509v3 Authority Key Identifier:
                keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7f:da:72:aa:70:7d:0f:e8:0a:79:8d:62:c9:1a:84:0f:76:
         46:2b:72:71:67:d1:b5:b4:35:17:c6:8d:75:d9:31:2d:8a:ec:
         eb:45:7f:cf:f9:b9:6d:bd:18:43:ff:8c:32:40:bd:02:10:ce:
         44:66:80:da:62:10:fb:aa:7a:45:05:0e:8a:3f:df:06:4f:8f:
         69:31:6c:e9:50:92:6c:6a:d2:ad:ce:87:48:bf:82:75:c5:be:
         b2:60:9e:a0:63:05:c5:c1:20:f0:0e:ba:d5:a0:49:ac:fb:08:
         b8:a0:3a:e5:33:c8:a7:2e:c7:95:c6:f3:05:c7:8a:eb:1c:7e:
         32:eb:da:6e:5f:a5:e7:ce:1f:9f:82:19:5c:da:e8:cf:7a:bf:
         fa:46:76:44:0b:d3:10:bb:29:21:4c:bc:85:ad:73:50:8e:63:
         ed:9a:44:44:c9:85:f7:38:28:c8:04:6e:8a:4b:cd:f0:f9:c1:
         11:55:dd:a1:db:d7:14:19:52:64:88:38:2b:13:34:da:d1:d6:
         ce:fe:4f:1f:6f:4d:c9:18:dd:4f:1f:d0:34:09:ad:90:9e:e6:
         97:73:1d:df:e9:8a:c8:3b:ef:76:46:fa:fe:d0:87:3e:85:80:
         94:da:cf:ad:65:8b:4f:23:cf:83:11:51:11:24:3a:f0:53:ab:
         9b:78:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:41 2025 by rpki-client