Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          jjZHLj3cOZEiZaax+uTV9u7Fohfon7/QFBykoyBeUnY=
Subject key identifier:   D0:BA:1F:36:E2:D7:64:78:10:D5:87:9E:DC:54:A5:F1:9A:05:E7:84
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       0197B8211C3B9EF6F7C458A325FD66F43909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 20:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:07 +0000
Files and hashes:         1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: +HdkeBExFxCOhFQjvqEWeO3y3lgMyi75L53xsz8dL10=)
                          2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
                          3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
                          4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:1c:3b:9e:f6:f7:c4:58:a3:25:fd:66:f4:39:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Jun 28 20:01:07 2025 GMT
            Not After : Jun 29 20:01:07 2025 GMT
        Subject: CN=d0ba1f36e2d7647810d5879edc54a5f19a05e784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:f2:e9:be:13:1c:8b:0d:b5:83:c6:51:37:
                    dd:36:f3:31:ec:87:c1:8e:3c:1c:7f:54:91:5b:10:
                    44:41:55:39:0e:bc:ce:63:27:93:30:e8:7b:84:2b:
                    23:0c:37:98:b1:04:5b:dc:e8:23:5c:5c:b2:87:1e:
                    3e:fe:a6:84:8b:b5:89:51:3a:d5:6d:6e:ab:18:c3:
                    ce:6f:11:1a:65:c5:45:ff:71:9a:96:99:92:c9:2d:
                    0d:ac:8f:2e:45:93:f8:f0:f8:9e:87:43:1e:75:ad:
                    8e:15:45:b6:6f:fb:40:2d:9c:fb:49:d9:55:24:85:
                    ab:d3:d8:ea:d6:d0:0f:95:38:d3:6c:7d:85:ec:9f:
                    a4:bb:a6:4e:fc:45:6c:25:c6:ab:b1:9e:ca:c0:73:
                    f6:3a:21:b5:06:e8:3b:8e:2d:0c:e9:45:9c:84:76:
                    5b:74:b3:ba:b7:18:5f:f3:62:9a:f0:b8:c8:ae:e6:
                    e5:22:b1:6e:7a:ea:39:71:3f:76:19:7d:40:68:4c:
                    23:ad:ed:f2:a9:27:8e:42:f0:27:9d:13:cd:7b:a5:
                    d0:e0:e2:97:3c:3b:46:b0:49:9d:5b:1d:6d:95:b9:
                    26:c9:f6:a9:54:e7:8a:e5:76:0a:2c:f1:5b:f2:55:
                    21:9a:de:98:3e:d0:79:32:d1:1e:38:e8:dc:63:6c:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BA:1F:36:E2:D7:64:78:10:D5:87:9E:DC:54:A5:F1:9A:05:E7:84
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b2:81:e6:0e:d8:ef:58:4e:cb:25:1b:41:17:9a:97:fc:ec:
         55:11:ba:96:66:b3:c4:c9:d8:ad:64:83:11:92:b4:84:b9:fe:
         3b:0f:ec:cb:14:7c:df:f2:56:d4:f2:f7:d5:38:2c:6b:d1:07:
         e6:06:02:5e:f4:48:2e:f6:1d:26:6b:e2:0c:c6:4d:4a:2a:b7:
         e6:b2:90:2d:cc:3a:78:cc:1b:0d:b3:9a:e5:29:36:de:c1:52:
         fa:dd:ba:87:55:c4:23:85:6d:cd:90:c8:c5:ee:63:e0:3b:a9:
         ac:1c:77:c7:c6:9b:34:fe:ea:57:5b:e1:1e:2e:34:9a:69:5d:
         6a:95:9a:a4:f2:4b:eb:56:72:e5:c1:55:e3:66:60:7e:6d:5d:
         17:81:6a:1a:c9:ed:30:96:13:42:20:9b:82:eb:91:da:81:dd:
         a7:f9:24:11:8d:43:66:3c:8b:4b:db:46:b4:fe:ae:ca:01:08:
         34:fc:3e:60:a5:f9:03:b0:14:c2:95:2e:f3:fa:03:f6:71:40:
         26:34:57:cc:a3:e5:e1:e6:53:05:19:94:7b:50:26:2c:26:19:
         ce:9a:14:33:71:c8:40:55:f3:e2:9f:5f:16:d3:6e:0c:e8:55:
         c6:31:f5:c4:40:8a:18:ef:a9:7e:1f:87:3d:58:c3:fc:cc:d2:
         42:56:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:50 2025 by rpki-client