Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          9Va/DwZT+YQ75US5hTRJvhKNUKBXI88pZp0aPyphOSk=
Subject key identifier:   B6:68:83:11:F9:6B:78:96:9A:E6:6F:B0:64:E6:0C:79:C5:E2:12:20
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       0197B5C4F34AA2A07064FB4AFCAE03958BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 09:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:12 +0000
Files and hashes:         1: AUcUK79-20dcWVzVbs60qA_79k0.roa (hash: FTerUGKVvthiTr4P9HvWIOzRwtpT4BbcBUUyIajjaKI=)
                          2: NLujiyLDNINg7_ALKuGpNWHf90o.roa (hash: S6u8CLwoGP6KKvaV/764lqLnv660M41bJlIaV+CiIbg=)
                          3: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: FqscGvwTKlOMo2lq48Jm7BVWFCai/xyTh3HJX9Q8ClI=)
                          4: nQ49DO6jLERCGih3b5vaO6Deyv4.roa (hash: ckCboVu+SkUbYcpUmTQnzPt52sUcRNCO41XKBdBSHpY=)
                          5: xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa (hash: craC+wIX6RgDFVXZJLTuVHpltgHDojNuxm0azD0e50I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:f3:4a:a2:a0:70:64:fb:4a:fc:ae:03:95:8b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Jun 28 09:01:12 2025 GMT
            Not After : Jun 29 09:01:12 2025 GMT
        Subject: CN=b6688311f96b78969ae66fb064e60c79c5e21220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:b0:df:f7:57:d6:7a:8a:03:2c:cf:4e:5a:
                    f7:a9:86:7e:18:47:52:f0:c0:44:c4:3e:fb:cc:60:
                    4e:f5:d3:98:5e:9c:88:e0:eb:e2:00:37:a1:aa:d2:
                    5d:49:95:47:fd:8e:69:f3:d8:61:af:ef:e8:e3:a4:
                    94:be:9e:c5:a8:26:dc:6a:d2:5a:bf:89:bf:ef:81:
                    21:b8:97:05:80:1d:3b:7e:94:6e:c8:e1:e7:5b:e1:
                    ac:db:ba:49:b3:9c:90:d6:42:e5:13:d9:3a:f6:e3:
                    e7:c1:47:5e:1d:da:88:2e:73:f8:70:d0:5a:4d:c9:
                    f4:78:39:0f:42:16:6d:66:90:c9:9f:94:be:bc:13:
                    81:33:06:94:6b:1f:b5:9d:05:b7:5a:bc:ec:cf:00:
                    b8:e4:18:7e:ac:2f:fa:cf:d8:5d:e0:84:dc:9e:11:
                    a2:71:8f:67:a8:39:c3:29:54:c6:71:e9:9d:cf:c1:
                    d8:a4:83:51:01:21:60:18:99:71:7f:44:0f:70:eb:
                    e0:ff:d1:d9:89:ce:14:76:13:94:1b:0f:02:57:79:
                    f8:c8:c1:ac:dc:01:ff:0c:83:d7:94:1e:cf:68:22:
                    ee:82:98:85:cb:a4:29:23:8e:95:d1:bd:51:e4:ec:
                    a2:d8:d9:5a:d3:f7:5d:d6:c2:4a:cc:ac:bc:63:77:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:68:83:11:F9:6B:78:96:9A:E6:6F:B0:64:E6:0C:79:C5:E2:12:20
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:5b:50:b7:8c:81:e7:4b:b1:62:09:15:af:dc:cc:a2:16:
         32:12:9d:ac:fe:64:a5:7a:26:cc:b8:64:d0:f6:58:e1:21:d4:
         ea:99:cd:45:1e:e1:03:1e:cf:b5:8d:60:7c:b8:14:5b:61:4c:
         a0:1c:a6:24:6d:00:68:a7:11:6b:0f:6e:b9:b6:cf:df:b4:b0:
         04:fa:22:f8:50:c3:a1:c5:a4:63:05:ec:4d:d2:f6:2e:17:5c:
         26:bf:b3:25:49:35:95:db:7f:22:25:18:14:a6:f1:c1:34:66:
         39:60:bb:8a:f2:24:44:86:a4:26:47:71:b7:76:24:c3:7e:c3:
         3b:b6:04:1c:38:cf:48:42:72:f1:b7:c1:fe:ff:6e:d4:e1:d8:
         7b:b3:7e:3c:6e:71:58:c7:5c:11:1e:e1:ef:12:cb:db:d4:0f:
         af:4d:6f:e8:3b:fd:c0:b5:a7:08:00:57:d3:a6:55:91:bb:5b:
         5c:f3:e2:66:ad:e6:6d:ab:b7:89:6a:dc:71:63:91:23:f2:85:
         4f:9c:68:4d:34:6b:1d:7c:aa:0c:1d:6e:bb:a0:4f:2f:54:95:
         3c:83:70:f1:0b:1e:95:52:d5:4a:d9:d8:44:1b:ba:ac:3a:62:
         b8:48:bf:ab:a5:c3:4a:db:9f:86:07:18:ae:2d:06:12:72:f7:
         cc:35:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:29 2025 by rpki-client