Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File:                     EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier:          uWDbyxEb8a19msAEaBfAMb6vOW8tqevGeVteNPRTKNs=
Subject key identifier:   24:FE:D6:64:3B:E7:01:88:D9:8B:51:8F:BD:52:74:FD:99:40:F1:73
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer:       /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial:       0197B6D78CC3C2DE790206299003D6D25E8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 14:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:08 +0000
Files and hashes:         1: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: h6doXtDfPVPUFtJJ2H8rXHkUmKcPgm3p4XQ+tOhF/ao=)
                          2: MROw4gFzcWIJiW-57fk1zpXQhBk.roa (hash: hWAGq+JyynXafr3/kTLPO6K2XTKtATKTBF5Bwv0mE6A=)
                          3: ePDnHbOXTUlVTt6WhrgofDAybdQ.roa (hash: dBzcW1+wZxIMYW+MPmPSO2MTLadbHEVw8y5qmE2KY9E=)
                          4: s1uawTeOUkgDW6mBKyzm3NI6hxc.roa (hash: lpqkVOyU/cokka/2U3UZmXPkRI7YfeF62rGfPTiCmjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:8c:c3:c2:de:79:02:06:29:90:03:d6:d2:5e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
        Validity
            Not Before: Jun 28 14:01:08 2025 GMT
            Not After : Jun 29 14:01:08 2025 GMT
        Subject: CN=24fed6643be70188d98b518fbd5274fd9940f173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:22:3c:d7:0e:82:31:8a:5a:62:15:bf:18:
                    a8:82:2e:60:89:00:8a:82:b1:4d:25:9e:94:f1:71:
                    7e:8e:e1:e3:9a:38:d3:5c:12:36:49:08:e0:5e:f3:
                    93:03:36:b3:5c:34:ce:96:c7:aa:54:42:ca:7d:72:
                    1a:04:55:bb:db:bd:b7:98:1e:9c:e4:55:c4:ac:3a:
                    92:ce:c4:16:56:30:e9:c5:85:e6:8c:58:46:fb:68:
                    b3:bf:5d:69:9c:f6:d8:80:ac:c4:5e:b8:6f:00:ca:
                    fb:f4:1c:93:2a:b1:86:11:0c:c7:e2:ea:8b:4c:27:
                    be:ce:47:a7:08:2e:97:a4:14:4e:6b:60:d0:e4:52:
                    6d:82:4a:d3:37:9a:b5:1c:d3:75:31:1b:7f:e9:fe:
                    f5:c3:5c:9d:06:df:b0:7a:f0:65:50:92:98:d7:4e:
                    be:0d:31:3d:32:87:ae:1f:4f:d7:86:ec:f0:30:e6:
                    5b:d3:80:82:da:8a:9f:7f:35:3e:bc:ca:c2:e2:0f:
                    21:7a:57:45:9d:52:f4:32:90:87:d1:14:30:17:c7:
                    3e:b2:fb:98:e7:34:99:31:6a:fd:e8:70:dc:53:29:
                    75:4a:15:20:9a:50:4d:83:c2:a9:3a:38:98:40:d0:
                    54:54:44:e8:39:54:83:97:4a:69:c5:80:82:cf:bb:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FE:D6:64:3B:E7:01:88:D9:8B:51:8F:BD:52:74:FD:99:40:F1:73
            X509v3 Authority Key Identifier:
                keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7a:f6:d1:96:6b:5d:2a:d0:43:11:38:7d:6e:25:c7:6f:3f:
         69:8d:7d:84:4c:26:f4:d8:d0:47:aa:15:ff:f5:ca:7f:9d:60:
         32:b0:c3:be:bc:79:18:64:58:d8:b6:a8:d9:3a:14:f7:c1:e0:
         2a:b2:17:54:91:09:8b:b9:7e:86:7d:2f:56:d6:b4:12:01:bf:
         e0:15:e3:e5:ae:80:41:f7:84:82:9e:3c:46:6b:ab:f2:92:9a:
         72:f0:0d:1d:a0:85:13:a3:77:26:e1:49:0f:36:1f:5a:ea:19:
         df:85:68:ed:a7:31:16:2f:97:6f:1a:16:74:5d:d3:0e:c9:7c:
         0b:78:5a:96:2e:1f:2a:27:cc:0b:c7:fb:aa:81:53:9b:a9:bd:
         38:8f:ec:9b:cb:5e:d1:64:a6:7c:e0:46:38:36:e6:6a:84:64:
         b2:4d:bd:c3:de:71:c5:7d:09:83:3d:38:85:9d:b8:12:0e:c3:
         0e:b6:21:37:f4:25:79:f4:36:23:a0:80:25:c1:08:b0:f7:0c:
         9c:17:af:84:2a:a0:74:7c:d8:76:c0:fc:5f:c0:ba:ab:cc:8c:
         05:fc:48:c0:da:d8:54:a3:3d:b7:07:1c:e1:20:b3:06:57:5b:
         86:10:93:97:29:67:f1:50:2b:0c:df:a1:d4:ef:b4:90:98:49:
         d2:cb:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:48 2025 by rpki-client