Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
File:                     FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json)
Hash identifier:          vJRhZ8nOWU4HzM2tjQfwAM+bjYwXhxmrd3B5OXC0OBY=
Subject key identifier:   EB:B0:43:AD:F9:79:2D:6A:4C:1D:71:3C:83:26:D7:0A:0D:8E:54:D2
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Certificate issuer:       /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial:       0197B7B35E8B7984A16729DA8D13EE1EB97B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
Manifest number:          135F
Signing time:             Sat 28 Jun 2025 18:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:15 +0000
Files and hashes:         1: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: 5Jtq85bk8eiLNHOGmTIaNzk3bM72EFAHI5fAPGxmyhI=)
                          2: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (hash: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:5e:8b:79:84:a1:67:29:da:8d:13:ee:1e:b9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
        Validity
            Not Before: Jun 28 18:01:15 2025 GMT
            Not After : Jun 29 18:01:15 2025 GMT
        Subject: CN=ebb043adf9792d6a4c1d713c8326d70a0d8e54d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:45:ca:c9:8f:b8:a3:81:da:53:fa:35:de:
                    2b:e2:0a:9c:5a:18:b1:19:31:6f:07:5d:0e:70:5d:
                    b3:44:0f:5a:be:00:4b:97:5c:8c:e0:7f:1d:4e:2d:
                    80:03:8f:ed:14:90:53:16:a1:c9:b4:27:fc:61:c8:
                    f0:82:2e:a5:63:45:cc:fc:bc:8c:b6:1b:06:c1:43:
                    87:91:1f:7a:cd:8f:24:41:4c:6f:ad:f3:5d:73:5f:
                    ba:5a:a1:1e:f3:03:8f:96:89:73:84:b5:9c:ce:9b:
                    8a:c6:ff:0d:4a:1e:76:61:a9:05:c0:bb:28:8b:4f:
                    da:e4:7e:6a:53:1c:0c:ae:fc:23:5b:d7:dd:af:cb:
                    c3:16:3e:56:9f:40:5c:2f:33:29:9b:06:93:b4:cf:
                    8a:fa:fb:80:8c:8e:da:d4:57:12:c8:1d:c7:2f:16:
                    04:ff:7b:8e:1a:85:45:b8:e0:c8:28:1b:54:30:81:
                    08:08:e4:b0:c6:13:90:4a:ba:03:ba:db:56:8f:0b:
                    75:92:9d:6b:80:91:ad:ac:5b:fa:5f:dc:0c:f2:9c:
                    80:5e:e1:90:2a:7c:84:14:58:d8:3d:c7:e1:1e:4c:
                    06:6a:28:88:0a:8f:08:47:7d:1c:58:a6:49:a7:eb:
                    6e:fe:a2:5b:94:c4:37:cc:8b:10:82:3b:bc:41:f1:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B0:43:AD:F9:79:2D:6A:4C:1D:71:3C:83:26:D7:0A:0D:8E:54:D2
            X509v3 Authority Key Identifier:
                keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:86:c8:66:f4:0d:e1:8b:36:c3:cc:6e:fa:94:58:d6:37:af:
         26:3b:95:61:e5:33:ea:70:29:f2:91:1b:5a:63:c4:34:c2:e9:
         03:0b:18:f9:8e:09:56:04:e8:96:f5:32:49:50:d9:69:f2:86:
         5f:3d:ef:56:ef:13:fe:4d:1e:83:65:39:34:b2:c6:10:b8:85:
         05:1e:c5:dc:25:69:98:8a:30:4f:3b:0c:57:c6:1a:2c:ac:76:
         19:f1:91:61:bd:a8:43:21:7a:fa:61:c0:41:44:46:a0:38:37:
         1a:59:b4:84:02:dd:bb:c5:ce:37:18:0c:de:97:e4:d0:1e:2b:
         5e:b9:b8:a3:85:75:f7:b4:5c:1e:98:da:cd:85:43:aa:47:82:
         17:70:f6:16:04:dc:7b:4d:01:75:db:dc:d1:b3:bb:44:0d:65:
         94:73:1e:6e:e9:c6:8d:8c:a0:15:75:a7:08:6c:82:57:44:43:
         6b:59:3a:ab:da:df:71:58:c7:73:2d:f7:e8:4e:7c:e2:46:2c:
         3f:be:ee:d5:df:4c:e0:3b:27:f5:80:ff:49:e7:d8:77:16:cd:
         b3:55:d1:9e:0a:c4:2c:a9:bf:d8:4b:f7:96:3d:32:22:a5:8e:
         89:76:0d:34:d2:9b:4c:61:c7:7d:5b:2e:1e:e2:bb:32:8e:2e:
         60:56:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:16 2025 by rpki-client