Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File:                     Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier:          SblVr9rkaQqPkidYzlESgQ+sKzc97TWcUMzOMGbbuiM=
Subject key identifier:   C4:5F:69:B6:73:12:6E:B2:6B:F6:EE:58:BD:72:2D:97:F0:71:3C:65
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer:       /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial:       0197B820FA473B768E410FD3315ED34BC5D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 20:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:58 +0000
Files and hashes:         1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: xQEu0JIVbwHWVh8Co2vQPZo7pwxPpo72A/7a+MfRnzk=)
                          2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:fa:47:3b:76:8e:41:0f:d3:31:5e:d3:4b:c5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
        Validity
            Not Before: Jun 28 20:00:58 2025 GMT
            Not After : Jun 29 20:00:58 2025 GMT
        Subject: CN=c45f69b673126eb26bf6ee58bd722d97f0713c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:d3:b7:21:e5:68:16:89:46:78:47:bf:1a:
                    a2:be:91:e8:0b:e5:a2:62:7f:16:1a:6d:87:d0:4d:
                    61:f2:61:d0:a3:c3:9c:cf:cf:ab:14:21:ff:91:48:
                    a4:81:a8:ac:c5:a6:bd:8c:81:1d:c2:69:56:c0:4f:
                    48:02:31:52:a2:9c:80:ca:81:fd:1e:59:57:b9:8c:
                    ce:75:05:2e:a4:fb:8c:99:87:fa:a9:4a:74:fc:c6:
                    94:ca:d9:2d:38:25:47:8a:46:5c:65:06:a2:3f:65:
                    42:c4:30:7d:12:d1:a4:b2:3d:ee:12:45:c7:7b:3b:
                    8d:c1:75:b2:86:a1:8a:67:f4:4b:57:31:02:4b:ea:
                    1c:bb:67:13:cc:9c:de:68:92:7f:d1:cb:dd:8d:8e:
                    0f:0c:e9:b7:1f:26:0b:f2:ae:0c:af:7f:fa:85:b4:
                    80:2e:7a:a2:34:5b:b3:38:93:00:39:7b:e4:06:00:
                    6d:8a:cb:3e:8d:5e:12:2e:07:f9:8e:d5:cc:d7:42:
                    15:01:fb:c5:94:97:8b:8d:40:bd:71:82:83:c3:ea:
                    ce:e2:73:79:28:c5:f4:7e:ab:df:7d:25:9e:cb:cd:
                    22:98:37:21:a4:ef:d0:13:ef:11:bd:9d:95:a2:27:
                    b8:68:65:95:bc:fd:50:84:76:96:33:ca:6c:a0:e9:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5F:69:B6:73:12:6E:B2:6B:F6:EE:58:BD:72:2D:97:F0:71:3C:65
            X509v3 Authority Key Identifier:
                keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:73:27:55:b1:2b:2c:12:61:52:88:67:b1:f1:e4:5d:09:
         b6:e8:10:79:f9:00:fd:f0:d5:b9:76:13:0c:7c:7c:05:a8:c5:
         41:33:a1:43:e9:1b:71:fb:1c:a4:0a:8d:7a:c6:56:f7:2f:87:
         51:f0:60:72:06:54:f5:4f:cf:9d:c4:b5:23:02:76:98:d0:3d:
         ed:2e:72:29:88:c7:2a:ea:d1:b9:79:7d:e9:6a:69:fe:0e:16:
         57:64:da:b4:00:5b:8e:3a:b7:9f:96:60:ef:20:a8:17:4e:19:
         cb:59:bc:03:4f:d2:b3:a6:13:ea:9e:ca:97:3d:62:5d:7c:4a:
         01:18:2a:20:47:18:64:b8:1c:e6:d2:40:2f:4b:f7:d9:7e:e0:
         dc:f9:e4:58:dc:1a:ad:47:e2:7b:70:d3:d1:2e:7f:43:6e:8b:
         02:b6:f8:cb:f1:b4:53:d2:e4:7c:be:98:72:b5:f7:d3:21:cf:
         1d:4d:28:48:ea:0f:8b:c6:42:30:a9:fd:1f:b4:48:55:8b:c7:
         76:b7:0c:e3:9a:c1:0a:f2:d1:83:0a:af:b1:7a:2b:ff:dd:3f:
         f3:95:50:e7:55:70:1d:86:d0:8b:5c:1e:34:9f:94:8d:76:71:
         3c:d0:b8:d3:e3:4c:c0:9a:a8:e5:8c:29:55:3e:6d:f3:60:39:
         46:0e:73:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IPpHO3aOQQ/TMV7TS8XUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkY2RhNWQwNjBiYTkzNjZiYjQzMjU4MjhiNTcwMzNiZWYx
OGUzYzAwHhcNMjUwNjI4MjAwMDU4WhcNMjUwNjI5MjAwMDU4WjAzMTEwLwYDVQQD
EyhjNDVmNjliNjczMTI2ZWIyNmJmNmVlNThiZDcyMmQ5N2YwNzEzYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ebTtyHlaBaJRnhHvxqivpHoC+Wi
Yn8WGm2H0E1h8mHQo8Ocz8+rFCH/kUikgaisxaa9jIEdwmlWwE9IAjFSopyAyoH9
HllXuYzOdQUupPuMmYf6qUp0/MaUytktOCVHikZcZQaiP2VCxDB9EtGksj3uEkXH
ezuNwXWyhqGKZ/RLVzECS+ocu2cTzJzeaJJ/0cvdjY4PDOm3HyYL8q4Mr3/6hbSA
LnqiNFuzOJMAOXvkBgBtiss+jV4SLgf5jtXM10IVAfvFlJeLjUC9cYKDw+rO4nN5
KMX0fqvffSWey80imDchpO/QE+8RvZ2Voie4aGWVvP1QhHaWM8psoOm4uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRfabZzEm6ya/buWL1yLZfwcTxlMB8GA1UdIwQY
MBaAFA3NpdBgupNmu0MlgotXAzvvGOPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDkt
YTU3YjFiMzkyMjA1LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDktYTU3YjFiMzkyMjA1
LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU91zJ1Wx
KywSYVKIZ7Hx5F0JtugQefkA/fDVuXYTDHx8BajFQTOhQ+kbcfscpAqNesZW9y+H
UfBgcgZU9U/PncS1IwJ2mNA97S5yKYjHKurRuXl96Wpp/g4WV2TatABbjjq3n5Zg
7yCoF04Zy1m8A0/Ss6YT6p7Klz1iXXxKARgqIEcYZLgc5tJAL0v32X7g3PnkWNwa
rUfie3DT0S5/Q26LArb4y/G0U9LkfL6YcrX30yHPHU0oSOoPi8ZCMKn9H7RIVYvH
drcM45rBCvLRgwqvsXor/90/85VQ51VwHYbQi1weNJ+UjXZxPNC40+NMwJqo5Ywp
VT5t82A5Rg5zUg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:03 2025 by rpki-client