Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File:                     mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier:          2p0swOEZQJUdX4Qeb3Bu04mv5MPGlTRf/EqbZ6SCZVE=
Subject key identifier:   8A:C2:AA:DF:98:F1:3F:C3:2F:A5:FA:19:B4:A0:26:47:F7:5D:05:34
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer:       /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial:       0197B70E9C0D496FD3ECD7AB9EC2FE90E8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 15:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:17 +0000
Files and hashes:         1: 6VEj8hFX83dP4cTfcpFmDeB3WK4.roa (hash: 9iNEtr8XsCFGn75dg2M+2IpdUdlrA9H+OLDn6Iw/O78=)
                          2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: xy85cp9FxHyO3VQ72Zq+s69+LFTehVlgQE9DwBMyHdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:9c:0d:49:6f:d3:ec:d7:ab:9e:c2:fe:90:e8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
        Validity
            Not Before: Jun 28 15:01:17 2025 GMT
            Not After : Jun 29 15:01:17 2025 GMT
        Subject: CN=8ac2aadf98f13fc32fa5fa19b4a02647f75d0534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:87:01:77:f6:c6:89:92:15:8b:06:54:03:
                    00:53:6c:bf:bc:c0:07:82:2a:b7:72:f6:6c:98:99:
                    da:6d:7f:dc:c0:45:e0:5c:bb:8c:99:42:df:23:98:
                    51:6d:44:25:38:69:f0:03:43:34:07:19:a5:79:28:
                    6b:4a:64:f3:82:32:93:ea:aa:43:41:f3:0e:ec:a8:
                    1d:64:0b:f1:b7:5d:3c:56:a2:3f:ab:5e:e1:ac:60:
                    c8:f5:f1:24:22:00:16:1d:a7:98:d3:bb:6a:27:4d:
                    f7:26:71:9f:08:3b:da:b5:57:5f:64:55:fd:be:58:
                    ab:f8:32:df:bd:af:96:6d:fd:e6:18:96:bc:0f:a3:
                    62:3e:02:99:1f:b9:34:b1:64:0f:2a:53:73:57:30:
                    0d:97:23:d0:4e:fb:86:b9:87:4a:58:b8:79:d1:e9:
                    29:5d:c5:71:17:7b:13:51:a6:35:5c:aa:f1:05:0a:
                    cb:b3:cf:7e:a3:ba:84:a0:f5:94:46:be:31:e8:9f:
                    8b:e8:dd:5f:01:05:77:03:fa:df:b3:f1:b6:aa:a4:
                    6f:6b:da:a9:10:37:3c:5e:1a:09:59:89:7e:df:36:
                    f0:8e:41:79:96:95:20:cf:d2:dd:5d:c3:01:f4:38:
                    52:95:aa:9a:56:b2:99:c9:40:bf:f6:f0:55:4c:e7:
                    d1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C2:AA:DF:98:F1:3F:C3:2F:A5:FA:19:B4:A0:26:47:F7:5D:05:34
            X509v3 Authority Key Identifier:
                keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:99:82:51:d8:85:72:c3:83:08:45:18:70:86:c2:a7:ae:
         d6:77:9e:5b:67:23:84:a0:4f:61:37:77:14:cf:43:50:a1:8d:
         ac:e9:cd:0a:34:9f:0e:35:22:c9:9c:1c:18:56:30:16:d8:96:
         ae:33:30:c2:66:60:65:2a:46:47:26:ff:89:9a:dd:87:be:60:
         d4:4c:59:a7:a8:7d:f9:4c:5f:70:e7:49:e1:06:dc:b9:b6:d9:
         13:06:9d:bc:48:2f:74:9f:93:8c:77:99:a5:60:51:1b:4c:4d:
         8d:d2:41:ae:7e:86:6a:f9:18:2f:dd:da:3f:de:0b:2e:38:f2:
         c8:f1:df:52:eb:1d:0c:db:bf:43:e2:b3:46:a8:03:fb:cd:3a:
         92:93:a8:ea:4f:88:67:1b:24:32:84:bb:b5:32:38:23:b4:27:
         9d:58:c2:d1:f4:ad:cb:e3:19:8a:08:80:a5:0f:90:1a:74:2c:
         20:9a:93:ee:21:82:41:65:20:03:19:02:5f:40:4a:f9:07:3f:
         1d:cf:1a:96:80:d3:b0:9d:02:68:8f:62:52:df:6f:fd:51:a4:
         71:fb:50:34:5b:db:48:de:38:ff:06:71:7f:08:71:a2:a6:59:
         8a:50:8e:7a:ca:66:0f:88:93:79:93:e0:36:13:a0:8b:77:6c:
         af:cd:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:54 2025 by rpki-client