Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File:                     1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier:          A0c9JDY7iABEwI10VZgGYEcrzL7ror8Dcj7ozSEhClQ=
Subject key identifier:   E3:2F:57:44:3F:AA:49:45:95:48:82:93:92:FD:72:D2:B1:EE:06:04
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer:       /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial:       0197B7B351AD2F189764B6AB69702CAE2AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number:          15DE
Signing time:             Sat 28 Jun 2025 18:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:11 +0000
Files and hashes:         1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: PKhpvVhtK/Df/pqJiWuvfObmasJvTfJrQIVc1U+q/kQ=)
                          2: 2Ksn55yLgCkUTD5aLOt0Y8z_PQA.roa (hash: YGbzAqhxgCQickL+xdM1b5h2KIGE4igLXR/EObDj07M=)
                          3: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=)
                          4: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=)
                          5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=)
                          6: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:51:ad:2f:18:97:64:b6:ab:69:70:2c:ae:2a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
        Validity
            Not Before: Jun 28 18:01:11 2025 GMT
            Not After : Jun 29 18:01:11 2025 GMT
        Subject: CN=e32f57443faa49459548829392fd72d2b1ee0604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:be:3a:0d:9d:7a:e0:70:57:23:7d:c2:ac:
                    7b:f7:9c:c4:c0:c4:84:02:24:61:91:91:65:26:f4:
                    14:9d:5c:6c:77:0c:e4:14:dc:08:b5:4f:fd:b1:fb:
                    9d:83:40:55:d0:09:01:ed:87:90:ec:7c:40:83:75:
                    ec:44:f7:fe:cd:fb:d2:8e:f3:4b:ae:ab:ed:c1:e5:
                    9a:50:1c:9f:f9:97:14:96:c7:00:01:bb:7c:cd:e2:
                    f1:ba:15:3d:45:c0:44:6a:e4:b8:4f:96:f6:ce:28:
                    e6:57:c6:f8:14:85:30:33:a7:8e:8e:33:25:36:f4:
                    7c:57:f8:3d:32:e1:bd:14:2c:b1:cf:0b:94:ed:08:
                    c3:4a:be:60:1a:d6:5a:c5:6b:99:a7:07:fd:55:1e:
                    9f:7d:75:d8:3b:b0:71:13:25:02:4e:6f:4c:18:c1:
                    c6:6b:b0:99:d5:c7:9c:41:fd:18:de:73:00:fa:6a:
                    cb:a8:5a:a2:de:2e:95:c6:dd:a8:fb:be:d9:ac:51:
                    cf:7c:02:97:32:51:5a:7b:c4:80:49:a2:49:e7:eb:
                    18:b5:9c:61:86:f4:a2:84:3a:52:8c:72:7f:7f:8d:
                    a6:50:fa:cb:a0:da:5a:4d:97:56:40:b1:cc:24:02:
                    e9:60:0e:b7:6b:eb:0e:ae:f4:1b:95:b8:3f:2a:19:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2F:57:44:3F:AA:49:45:95:48:82:93:92:FD:72:D2:B1:EE:06:04
            X509v3 Authority Key Identifier:
                keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:bf:4c:9d:0e:f6:36:b6:93:05:7f:67:72:d1:1d:1e:3d:
         08:aa:c8:64:98:f0:30:49:93:e1:ba:6b:a5:c0:f5:83:0d:59:
         cc:88:a1:e5:4c:d5:56:31:48:84:8c:c1:38:e4:92:51:1f:74:
         8b:1a:c5:48:10:bf:93:b9:aa:c2:e6:29:2d:54:f0:44:cf:52:
         5f:0d:9a:d0:39:2a:c2:5b:9a:4e:73:62:74:4a:79:ff:df:c0:
         c0:07:8a:9d:6e:5e:c7:66:e4:6d:c8:dd:ab:aa:23:a5:02:8f:
         df:68:ff:1a:f7:3e:95:57:65:f2:8c:dd:20:af:ab:13:0b:8d:
         a1:95:a6:74:68:e1:b3:65:01:be:67:01:92:c1:82:4c:94:d0:
         87:06:cb:38:bc:bf:10:cf:3a:7d:a2:6e:82:ab:45:19:47:05:
         f8:8a:6c:13:3f:5c:10:1a:84:f4:22:83:4c:53:59:de:90:6b:
         12:55:63:06:64:74:fd:f1:86:49:6a:46:5b:31:97:9b:5b:79:
         4e:6a:d4:fc:87:a9:16:5d:17:57:8b:5a:1b:4a:f0:09:9f:a2:
         d6:3a:08:85:f5:05:16:88:2c:f4:a0:14:b4:a2:d3:c4:cf:31:
         7a:c2:bf:16:91:7a:79:fc:72:3b:3d:4c:fb:15:da:35:c8:7b:
         92:b5:b7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:02 2025 by rpki-client