Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File:                     No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier:          QJoBUsf+w5fG/oGYdry8mXYgO7Wzq9x97P+v7CleKIQ=
Subject key identifier:   39:EF:0A:D1:C4:D3:E1:7D:4F:52:4C:13:17:D5:38:88:F0:5A:F0:93
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer:       /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial:       0197B6A0A4D9F2089CA2C8219DFD2A803EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 13:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:10 +0000
Files and hashes:         1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
                          2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: qILVq8Yoly53NquZmRWvRI6IfKXAu1r84RCy0XJL/Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:a4:d9:f2:08:9c:a2:c8:21:9d:fd:2a:80:3e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
        Validity
            Not Before: Jun 28 13:01:10 2025 GMT
            Not After : Jun 29 13:01:10 2025 GMT
        Subject: CN=39ef0ad1c4d3e17d4f524c1317d53888f05af093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:42:4d:a9:99:2c:a7:53:c4:1f:81:9d:27:
                    b6:6f:ee:70:f7:01:f4:12:ee:10:47:01:fb:c7:f1:
                    c0:a2:92:a0:35:6d:12:4a:04:1c:28:c9:6f:b9:76:
                    4b:71:b3:73:4b:b6:d9:6d:f0:86:ba:8c:6d:89:9f:
                    6e:1f:29:79:af:4a:e0:24:36:59:3f:1b:33:dd:9a:
                    d2:b7:77:72:bd:e9:9e:1e:56:1b:7a:0f:97:39:f8:
                    b9:61:ea:0c:ae:8d:7b:3f:fd:b2:c6:51:bb:48:c5:
                    b3:7b:00:3b:64:64:ff:82:31:2b:6c:ab:1e:2e:2f:
                    7a:09:34:03:92:06:90:96:d1:72:b5:eb:81:f5:cc:
                    e4:c6:d2:88:96:d0:c0:9c:8a:d5:fc:a7:e9:46:7b:
                    12:44:2b:d4:9e:87:47:6d:29:22:11:e7:9d:91:de:
                    50:da:ef:5f:7b:67:f8:e1:41:8f:f0:74:e9:c5:15:
                    8f:5b:70:41:cb:bb:06:3d:1e:4b:d3:ba:c7:2d:d1:
                    55:2c:0a:6d:50:65:d4:58:eb:3e:06:a0:96:a0:79:
                    b0:be:94:fb:af:26:fa:88:40:3b:ab:45:02:0d:de:
                    b4:fa:f7:3d:fe:96:ef:81:2f:87:df:a4:ce:67:66:
                    12:ba:49:ec:07:b4:69:6a:ea:7e:d2:24:2c:d7:d6:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EF:0A:D1:C4:D3:E1:7D:4F:52:4C:13:17:D5:38:88:F0:5A:F0:93
            X509v3 Authority Key Identifier:
                keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:e5:50:45:40:2c:ac:a5:48:41:76:8f:ef:d4:da:96:2c:
         cf:2b:c6:c7:95:6b:27:db:51:40:f1:e0:6a:89:49:df:19:fa:
         cd:75:61:7e:42:b7:b6:b4:71:ba:b0:d5:2b:80:da:bb:7a:23:
         16:b9:4d:75:48:90:4b:28:18:19:f4:5d:38:0f:28:36:53:b7:
         83:84:62:ce:52:5e:58:94:75:2b:7d:08:b2:d9:ed:e0:52:28:
         6e:18:d9:fa:9b:2f:df:03:c4:a8:9f:51:39:62:d7:53:33:30:
         38:c5:c3:ad:b7:14:66:3d:85:0d:5a:4f:de:f6:fc:8d:05:cf:
         89:97:12:3f:e6:ba:01:46:d6:a3:3b:6b:51:e4:86:a6:59:4d:
         75:f9:0a:16:cc:f4:b5:b9:39:5e:ea:b4:75:9b:b4:be:87:48:
         a7:91:a3:db:d8:5a:67:4a:61:d5:af:fc:0a:e9:84:1d:e4:a4:
         22:c2:4e:bc:e7:0b:ec:a7:ca:43:7a:75:25:fb:49:9d:ec:e2:
         e5:c6:ed:bc:09:2c:70:3b:97:ea:b2:7d:87:64:a1:d5:ef:6f:
         a9:fe:44:e1:6a:fc:ce:08:2a:13:d8:46:c1:16:07:7d:7c:7b:
         62:5d:e5:d5:f0:6a:65:b7:9c:0b:dc:c8:69:03:b4:e9:7e:69:
         b3:db:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:41 2025 by rpki-client