Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File:                     4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier:          uLjzhOQ+7VeQkf0zxJ2B4o0mshOKOOLdsurp3Z45moo=
Subject key identifier:   99:6A:0D:26:2D:45:C8:8A:C0:D5:0A:C8:E0:73:47:96:9F:1C:EF:E3
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer:       /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial:       0197B8FD263EEDAC5662A88AFF8C308F8D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number:          15B2
Signing time:             Sun 29 Jun 2025 00:01:27 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:27 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:27 +0000
Files and hashes:         1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: rl0X+Bs4OiImg6oREZz29YLn6kRejUkhwnG7UBWqrqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:26:3e:ed:ac:56:62:a8:8a:ff:8c:30:8f:8d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
        Validity
            Not Before: Jun 29 00:01:27 2025 GMT
            Not After : Jun 30 00:01:27 2025 GMT
        Subject: CN=996a0d262d45c88ac0d50ac8e07347969f1cefe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:7c:aa:a6:6c:c4:00:b4:30:94:c4:50:ae:
                    e4:15:d1:75:79:81:55:02:a6:b4:a1:c0:2d:fb:3c:
                    ce:dc:67:1e:5e:51:a1:1d:8c:21:bb:73:ba:c1:49:
                    14:65:76:9c:ad:e4:18:3f:5e:ec:6d:f4:13:b1:64:
                    7c:bc:0d:ce:bf:c4:e6:f6:e0:8d:26:f5:ac:d6:75:
                    b4:c8:1d:0d:db:fe:02:c2:2e:19:a1:da:6f:d3:c0:
                    eb:6b:67:ff:df:5e:12:25:2a:e8:77:ea:51:8d:a8:
                    52:c9:d4:ec:b6:35:fa:92:c7:3f:d1:91:a5:02:45:
                    02:91:37:b3:9f:bd:98:22:68:da:7c:67:03:eb:f5:
                    25:d2:5f:08:9d:fc:9c:77:dd:35:81:e0:0e:46:c1:
                    10:d1:09:9b:f8:32:e2:54:22:51:4d:9e:76:df:d1:
                    64:ab:34:8c:c7:42:b7:75:35:b1:1e:fc:52:2f:5a:
                    91:7f:cb:5c:ac:06:1a:d3:99:d2:e5:59:8d:dc:03:
                    dd:23:cd:2b:fa:5c:43:cd:98:be:f9:89:98:dc:f1:
                    fb:74:12:48:92:32:80:1b:8e:65:a8:4e:3f:62:93:
                    03:04:08:fd:33:b6:2b:09:8e:c3:c3:14:0f:5a:04:
                    9d:43:71:50:9c:81:51:be:0c:c1:7c:56:cc:01:f3:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6A:0D:26:2D:45:C8:8A:C0:D5:0A:C8:E0:73:47:96:9F:1C:EF:E3
            X509v3 Authority Key Identifier:
                keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:43:b6:7b:9c:79:a1:09:90:96:a7:dd:ec:03:9c:2b:40:
         c8:bc:65:ab:69:1f:8c:63:ef:d0:a4:9c:71:73:58:6e:19:82:
         9c:c8:49:f0:54:5c:32:a3:00:ac:b7:68:70:da:10:fd:4e:b7:
         8b:dc:9e:dd:2b:fb:1a:46:85:5a:fd:4d:71:f9:5b:bf:7c:52:
         1d:cd:d8:aa:33:8b:88:8a:73:08:ec:5a:be:9f:94:bb:1a:ca:
         04:50:14:e6:58:d0:06:27:0c:2e:80:63:94:84:ca:68:26:23:
         ab:d7:79:a5:64:d6:20:0c:d3:ad:c9:4c:83:cc:45:1d:94:ae:
         e3:4b:24:dd:60:f1:27:f6:12:27:50:9b:29:f2:ac:52:23:5c:
         48:95:f1:38:d0:77:29:43:29:71:8d:2c:6b:d0:39:bd:96:4e:
         73:8e:1c:ae:66:6c:eb:32:31:27:9b:75:9c:42:8e:d4:70:35:
         6b:13:f1:eb:0b:39:ec:08:32:f4:60:74:df:44:b3:25:32:ae:
         b5:96:15:54:73:82:9c:73:ff:14:9f:40:b1:1c:3a:e8:94:04:
         2d:1a:43:cd:33:29:73:ba:e7:c6:5b:2a:7a:fb:ea:76:ef:f9:
         cf:aa:08:fd:cc:c8:93:60:71:54:4e:e7:49:0a:d2:1a:18:84:
         72:1b:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:15 2025 by rpki-client