Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File:                     lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier:          h4TQQ/2MmhsvUEiH8fAxkDT2NGpoziT1xkggJ3oZZvU=
Subject key identifier:   A2:44:D8:D5:CF:9E:8B:F8:19:2E:10:0F:69:B2:B6:3D:10:48:D0:9F
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer:       /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial:       0197CBE00BCA7050F9F7F43DABE5D8DD9134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number:          15BF
Signing time:             Wed 02 Jul 2025 16:02:27 +0000
Manifest this update:     Wed 02 Jul 2025 16:02:27 +0000
Manifest next update:     Thu 03 Jul 2025 16:02:27 +0000
Files and hashes:         1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: 16gWivoT3GFTyDpUWsIWvWQpeLhIVCudUGyfk5hY65U=)
                          2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:e0:0b:ca:70:50:f9:f7:f4:3d:ab:e5:d8:dd:91:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
        Validity
            Not Before: Jul  2 16:02:27 2025 GMT
            Not After : Jul  3 16:02:27 2025 GMT
        Subject: CN=a244d8d5cf9e8bf8192e100f69b2b63d1048d09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:4a:d0:48:f7:8d:dc:aa:7b:e6:28:9c:00:
                    7c:2b:11:c8:d7:60:f0:97:c7:cd:59:11:b8:5e:f6:
                    ac:04:64:1f:e9:f0:fc:fc:2c:b0:ba:1a:00:bf:d9:
                    e7:ca:3a:bd:82:ce:5d:b6:98:1c:80:18:b9:a7:94:
                    0e:4f:29:bb:0d:41:93:00:32:a9:93:5c:d7:e5:96:
                    85:e5:f6:b1:2b:55:f4:6f:57:6b:b9:6c:37:a8:c1:
                    f6:9a:27:15:dc:cc:4d:0a:86:e7:1d:12:ef:dc:d7:
                    bc:97:1d:24:83:ec:1c:51:ff:dc:ee:e1:6d:1a:d8:
                    76:64:b8:20:1f:04:a2:c9:9d:0a:19:73:0b:21:89:
                    93:42:cf:ea:6c:9f:ce:f5:da:81:6f:ff:21:b0:be:
                    e7:c4:11:86:cd:dd:1b:6f:6f:6c:1a:94:0d:37:95:
                    3b:fc:7d:3a:78:8b:f8:72:ac:ac:70:fa:98:d6:8f:
                    08:41:50:11:f9:c0:e4:45:13:5d:13:9f:11:61:7d:
                    e1:65:ca:39:99:a2:70:f3:8c:7b:4b:c7:15:87:47:
                    64:3c:e3:9b:c7:a3:d8:0b:22:f8:b9:f7:c5:5b:08:
                    ed:8a:23:27:1f:89:8c:79:dd:b8:79:c8:e5:5c:46:
                    0f:8e:6b:38:18:0d:9d:e3:9f:50:f8:21:fd:4a:3a:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:44:D8:D5:CF:9E:8B:F8:19:2E:10:0F:69:B2:B6:3D:10:48:D0:9F
            X509v3 Authority Key Identifier:
                keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:c1:8e:f0:19:ec:00:6a:85:aa:89:80:50:de:53:6e:6d:17:
         08:1e:4e:0d:63:17:da:56:92:f2:6b:28:dd:b1:1d:eb:bf:84:
         6a:e6:37:a5:d9:34:1c:b2:ab:ff:b0:4c:37:b5:0f:02:b9:57:
         e5:e3:67:cd:be:9f:96:6d:0d:ef:fe:21:0d:81:44:f8:cc:fb:
         db:c0:5b:ce:b5:2d:bc:76:a7:2c:0a:91:66:32:4c:81:1e:1a:
         62:ed:f8:1e:ca:4e:58:86:f9:fa:26:92:47:47:1b:6c:70:71:
         c6:65:f3:9a:71:c2:c7:1a:af:31:1e:08:19:1d:f0:c0:46:fa:
         48:d8:30:95:92:fe:6d:70:0c:4b:3c:96:89:0f:ba:1a:00:ff:
         5c:cd:36:80:83:cd:52:5d:75:55:0c:e4:da:7b:68:f9:06:05:
         00:4a:e6:a2:7d:c9:6f:a0:f7:b6:32:82:a9:d9:82:e9:1f:d7:
         7c:00:b0:01:9a:84:75:db:a7:38:ff:48:d0:b7:4a:ec:26:8f:
         66:06:67:c2:d2:f5:ea:4c:13:02:4f:f6:85:94:91:1c:88:c4:
         f3:7e:60:4e:97:4b:fc:2a:29:57:59:a0:40:2a:77:a4:dd:27:
         34:e2:05:e8:d8:67:71:17:2b:7f:84:72:3b:14:4b:f3:79:80:
         b7:c6:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:04:58 2025 by rpki-client