Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          dcg0UZcOGunWQa3lW3ktPFFHO4SzPIjx+7LYzJvAFQ0=
Subject key identifier:   FB:D3:CE:8D:10:BA:39:3B:94:D5:F6:4D:D9:5E:50:E4:4B:4B:C2:74
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       0197BA7DC1636E98EC121CF07A8A26F09DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 07:01:33 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:33 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:33 +0000
Files and hashes:         1: 4oft3Loz6Mj-iGBZld8Zml9nZKk.roa (hash: wH8MDJNmWcLwEAp7rv/L6Y94FGx4klTMMdgO3DL2B5U=)
                          2: 7Rx3mayEBwk8ldskeFY-2K2rZ-s.roa (hash: wklqA5tkn0CZJbDeoo6PYXZybB1iV079BOW7c/8yfmg=)
                          3: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: CgM1wxnrrGcZrR7le6AvVEHTMWwqxXnEMyX4mh5yHFA=)
                          4: ufDo1kTLEOZD1_qKQ7HiFNKPunM.roa (hash: ez87p1Up7V/1mOstPVoSc34fcjVVGs1wyCiou6O9r2k=)
                          5: x0sLhzFdsabJsjGmaTnhB2s9wws.roa (hash: ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:c1:63:6e:98:ec:12:1c:f0:7a:8a:26:f0:9d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Jun 29 07:01:33 2025 GMT
            Not After : Jun 30 07:01:33 2025 GMT
        Subject: CN=fbd3ce8d10ba393b94d5f64dd95e50e44b4bc274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:da:2a:06:99:b0:e0:30:7a:38:cb:bd:8f:
                    00:98:db:43:7c:f7:59:14:17:4f:65:2f:b3:4c:6f:
                    7f:ad:3a:68:e6:34:42:82:3f:8a:00:a9:83:fa:54:
                    60:06:58:65:3f:73:0c:d7:6e:a4:a6:ae:8d:14:f3:
                    0f:73:4d:44:3a:4c:e8:53:43:9c:b8:0c:1e:49:47:
                    fc:b1:eb:f4:91:f1:55:bd:23:04:24:8e:1a:c3:83:
                    50:5a:be:09:57:6d:ca:72:9f:2f:3c:a2:10:80:de:
                    d5:db:03:e0:c5:29:98:be:b1:5a:ac:94:83:58:fa:
                    7a:e2:cb:37:b3:6a:ea:02:d7:0a:f9:49:2e:64:fb:
                    a1:25:5c:12:27:b9:b7:d8:49:af:4e:43:0f:48:f3:
                    61:d8:d7:d4:98:c7:85:52:01:2f:68:70:8c:b6:71:
                    8a:46:ce:40:f0:6d:b6:02:f2:11:31:e3:a0:32:5d:
                    b9:f8:8e:31:bd:5e:7f:52:7e:19:a1:c5:0c:e7:0e:
                    3c:18:36:df:a4:59:17:8b:08:23:34:b5:ef:c6:f0:
                    50:17:e9:c6:99:43:f4:78:7b:a4:ea:25:2f:37:f5:
                    16:30:73:72:94:89:31:74:e6:93:cf:9f:d9:1d:55:
                    76:88:7b:41:db:84:60:ef:7c:4e:aa:a1:b2:d3:91:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D3:CE:8D:10:BA:39:3B:94:D5:F6:4D:D9:5E:50:E4:4B:4B:C2:74
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bd:a8:28:17:79:fb:f3:1f:d1:27:3e:40:50:1c:47:41:51:
         0a:4a:a0:2f:29:1b:58:eb:19:fc:f0:3e:af:2e:ab:f1:81:8f:
         66:6e:7b:5a:ca:73:de:74:94:13:63:86:e6:01:24:5c:15:02:
         b6:e4:b0:a3:f7:f5:14:f7:dd:7f:1c:07:9f:d4:b6:92:eb:f7:
         6b:17:ef:a7:87:a2:4f:0f:d5:95:24:43:b7:c5:6f:aa:37:60:
         5a:af:ff:1b:fc:a1:5f:b1:e1:bb:91:35:59:ae:ab:15:13:b0:
         31:59:3b:b3:ee:43:7f:cf:1a:38:b7:e5:67:d9:1c:7a:4c:ee:
         6d:fe:84:b6:9a:4d:59:fe:ac:a0:c9:b7:3e:a8:aa:86:b9:d0:
         ef:42:83:56:10:39:24:2c:a0:4a:ef:23:64:a6:33:90:6a:81:
         72:ae:b5:dc:88:bf:86:1a:43:91:50:84:da:b7:cd:a5:b6:c3:
         79:6f:ed:ca:99:28:36:8f:f1:8d:69:93:a9:5d:01:7b:d5:4e:
         10:c4:42:a2:55:8c:18:45:d6:f8:d1:05:73:00:e0:21:31:27:
         1f:90:52:81:3b:82:48:29:90:b8:b0:c9:bc:34:b6:ea:4c:40:
         03:e5:3f:07:eb:6f:f2:93:50:02:e6:1b:f7:f8:71:02:02:1a:
         8e:d0:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:56:23 2025 by rpki-client