Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File:                     xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier:          onfq1vzfpd/OcwRmcGJYqIOfPFJzvmPpJdfM7b/V7fk=
Subject key identifier:   A1:6A:75:C6:34:F2:E0:A9:E6:BE:27:75:32:4A:65:A0:7D:95:C1:65
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       0197C0B69FEA29D862696C76A8987BD70410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number:          15BF
Signing time:             Mon 30 Jun 2025 12:01:23 +0000
Manifest this update:     Mon 30 Jun 2025 12:01:23 +0000
Manifest next update:     Tue 01 Jul 2025 12:01:23 +0000
Files and hashes:         1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
                          2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=)
                          3: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=)
                          4: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
                          5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: 1Zz4wvt32BHGc16kbyDKFke7/etkhLZWWOgemWrxDb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c0:b6:9f:ea:29:d8:62:69:6c:76:a8:98:7b:d7:04:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Jun 30 12:01:23 2025 GMT
            Not After : Jul  1 12:01:23 2025 GMT
        Subject: CN=a16a75c634f2e0a9e6be2775324a65a07d95c165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:c1:c3:95:7a:61:28:98:72:6d:02:1e:25:
                    73:c1:e6:c6:5f:e2:82:32:35:20:f7:50:f1:9e:1b:
                    42:f9:06:fc:cf:6c:f1:f2:b1:d5:c8:97:e2:06:15:
                    b6:f5:96:fd:76:94:fd:86:ad:0c:83:73:e3:2d:61:
                    a5:aa:2a:e9:33:5e:95:a8:7b:70:be:f6:a3:34:c7:
                    79:87:53:52:d5:7f:65:cf:4b:4c:c6:1e:79:c5:a2:
                    80:32:ba:8f:4f:1a:b0:a8:b2:f3:39:1f:d5:ce:61:
                    72:e8:15:a9:1f:f8:3c:11:32:fc:a4:3e:77:a6:bf:
                    f3:96:58:03:9b:d3:0d:31:4a:d8:11:2d:b4:14:d7:
                    2a:bd:65:c1:81:a8:58:75:ab:ec:fa:09:21:57:dd:
                    09:af:d8:db:9e:19:7b:73:75:a7:81:82:19:f7:39:
                    9c:0f:d1:cd:af:f3:5e:a6:8d:e2:22:e5:51:21:25:
                    53:57:5c:4b:41:e2:4a:1c:f2:78:7c:7e:3f:1c:66:
                    77:a5:2c:e4:0a:7a:ee:63:5f:f9:15:d4:36:f7:24:
                    fa:cb:57:3f:8d:7e:82:b3:1c:45:6c:05:87:72:4f:
                    ae:db:39:32:70:53:9f:ad:2f:8a:fc:76:dc:76:2d:
                    7c:9c:9a:d5:9d:ad:b4:b5:63:6f:8b:ec:f5:96:2b:
                    7f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6A:75:C6:34:F2:E0:A9:E6:BE:27:75:32:4A:65:A0:7D:95:C1:65
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:9d:b8:6f:85:b5:7f:71:5c:dd:9d:bd:a1:3b:c5:f4:b6:
         ef:db:11:48:7d:eb:4b:3d:e1:9b:95:c6:a9:c2:d2:c1:26:71:
         e0:3d:ac:9f:71:b9:d6:0b:3e:7d:41:9f:db:57:06:ef:b4:b0:
         b6:57:b4:be:43:c7:56:e7:c0:72:2b:52:89:73:69:b8:3a:16:
         9d:15:1d:eb:ba:a3:41:33:8f:ad:5d:bd:94:0f:83:22:58:a2:
         da:1d:c3:0a:af:91:1f:a6:49:d4:17:76:34:a8:ed:d4:ec:8d:
         fd:cb:c0:bf:6f:a3:78:03:91:b8:79:c1:56:de:a6:7b:03:62:
         08:b7:24:e3:4f:08:98:7a:63:01:b1:4c:3c:b2:7f:58:67:00:
         85:8e:8e:59:6a:e8:aa:2c:f5:73:1e:d8:98:03:44:07:fc:99:
         95:dc:54:aa:bf:a5:47:c4:97:20:e1:26:fd:23:a8:59:5f:16:
         5e:ec:86:5f:13:f0:8b:0c:ca:80:68:15:89:9b:e1:ea:ff:9f:
         ac:fb:22:fb:76:98:c1:62:74:71:c2:38:bf:26:a7:a9:d5:d2:
         95:28:8a:97:74:1b:51:d2:c0:86:80:85:ed:97:84:6c:4a:51:
         56:18:56:f6:d2:06:59:cd:be:0c:00:03:e4:42:d1:59:94:31:
         68:97:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:56:27 2025 by rpki-client