Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File:                     Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier:          hSSpUzHlY77QxYaEoNAQpTGN8k/Z/s0IHlPmNvDb7nM=
Subject key identifier:   33:48:5F:42:07:3C:C6:E9:59:42:93:90:2F:0B:F9:CD:6A:83:45:0F
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer:       /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial:       0197B632A72E9956DF66765F517F23222B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 11:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:02 +0000
Files and hashes:         1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: eeSRixmvDZH4zTjd3O2HBUQMx6qm9MvKJuBTUUzdY1E=)
                          2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:a7:2e:99:56:df:66:76:5f:51:7f:23:22:2b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
        Validity
            Not Before: Jun 28 11:01:02 2025 GMT
            Not After : Jun 29 11:01:02 2025 GMT
        Subject: CN=33485f42073cc6e9594293902f0bf9cd6a83450f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:77:a6:28:83:76:97:1f:f6:15:db:94:6d:
                    a5:65:de:07:76:3f:b2:4d:c9:9e:26:54:30:4a:9c:
                    bc:c6:c1:96:58:53:4f:24:80:32:05:46:84:8f:70:
                    97:21:ab:a6:a7:25:a1:42:72:00:95:b4:3f:1e:d5:
                    7d:21:2c:f2:ae:83:8c:d5:99:e9:92:ed:40:30:01:
                    2b:b3:7b:e1:dd:77:55:f5:53:1b:4d:bb:80:f7:b6:
                    57:fc:20:66:9d:0c:fa:8c:ca:01:58:59:68:6d:e0:
                    be:87:51:59:14:60:f5:75:a2:86:8d:c0:41:c1:92:
                    bd:08:50:85:c8:48:2f:c5:9c:b7:c5:8f:c7:fe:80:
                    c5:27:19:07:ef:28:97:1c:e3:e2:aa:cd:ae:02:1e:
                    a2:82:1c:d5:5b:b6:df:67:a6:d8:5f:02:53:30:80:
                    b0:67:1d:2f:a7:09:4b:82:c5:08:9b:9d:c1:55:a1:
                    17:34:86:75:43:1d:f8:ec:ba:40:1a:ce:1b:c4:35:
                    bf:65:68:b4:e2:be:30:b0:2d:f6:21:1f:e6:9f:56:
                    1c:bb:ca:dc:42:5d:6b:2f:db:8f:10:6d:04:ea:0b:
                    bc:90:a6:e3:0d:98:2c:12:68:4a:07:4e:42:cb:f4:
                    5b:a8:1c:e5:b2:94:f9:b0:36:42:59:73:63:3c:50:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:5F:42:07:3C:C6:E9:59:42:93:90:2F:0B:F9:CD:6A:83:45:0F
            X509v3 Authority Key Identifier:
                keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d2:65:e1:a1:36:42:63:0c:30:8b:a7:23:1e:93:1e:4f:d0:
         92:e4:90:03:20:42:bf:02:3c:8d:7e:61:98:aa:18:a3:5d:10:
         13:46:17:55:19:b5:5d:14:c9:ed:8b:d5:d6:fb:f7:23:ba:00:
         1a:42:ff:d3:11:80:65:81:e0:ce:8e:36:c6:17:ad:cb:0d:ab:
         34:ab:6a:b7:27:ab:a7:5f:bf:b6:b4:4f:b4:d2:64:8a:e0:7b:
         bc:98:63:b5:2b:e4:f2:9d:d2:e8:a9:02:e8:2f:86:81:81:a4:
         91:bc:74:52:d2:49:64:db:32:3d:96:25:a5:73:c9:b7:70:8d:
         aa:50:da:de:6f:69:bd:b0:45:84:db:27:dd:17:a2:25:93:08:
         d7:ff:23:cf:9b:6d:25:1f:28:b9:5e:6d:14:6f:54:a9:cc:21:
         ae:cd:4a:b2:67:ff:07:65:56:aa:42:7e:7e:c8:1c:3b:66:34:
         f1:5a:fd:a1:28:c5:a8:7c:06:cf:c4:1f:04:a3:bf:33:d7:9c:
         21:3e:33:8e:31:8b:df:24:a3:d9:73:72:33:6c:2d:bc:06:66:
         42:7d:2d:d1:6c:36:05:70:1c:22:ee:c0:d1:41:d6:d0:02:16:
         88:36:4c:f9:fe:69:3e:bc:18:06:9a:d2:37:e5:e0:33:a2:24:
         2c:22:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:47 2025 by rpki-client