Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File:                     dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier:          xIC90Gv9VpfQwvvvgNd9CFsw5+TFkrlDuaGusVkmNyI=
Subject key identifier:   11:15:5E:25:8A:42:B7:09:38:74:88:DF:57:B7:56:CD:BA:A7:48:50
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer:       /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial:       0197C15ADC03347CBF94E703D4739B4E5583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number:          0AD7
Signing time:             Mon 30 Jun 2025 15:00:46 +0000
Manifest this update:     Mon 30 Jun 2025 15:00:46 +0000
Manifest next update:     Tue 01 Jul 2025 15:00:46 +0000
Files and hashes:         1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=)
                          2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: x+MagDnbuooouRQ+qahpp3FhX2xm+N+I8FBLmom1Rl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:5a:dc:03:34:7c:bf:94:e7:03:d4:73:9b:4e:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
        Validity
            Not Before: Jun 30 15:00:46 2025 GMT
            Not After : Jul  1 15:00:46 2025 GMT
        Subject: CN=11155e258a42b709387488df57b756cdbaa74850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:0b:e4:76:03:1f:f9:90:96:1a:5a:d9:70:
                    a3:d6:de:20:4d:2e:68:3b:f8:b0:6b:07:6a:63:49:
                    db:b2:38:7f:e1:b1:df:28:2f:5a:cb:59:b6:e2:25:
                    65:c9:cf:2a:58:98:31:45:5e:81:6e:21:e7:a9:b0:
                    60:b1:c3:96:7b:a1:a6:1c:62:a3:2b:1b:af:1a:9b:
                    45:67:96:10:d3:f4:d9:e4:45:f3:5a:fa:6d:c2:e2:
                    e3:bd:cc:0c:8d:43:a2:1f:35:e0:22:6d:1a:d4:b0:
                    fe:98:4c:43:11:28:df:00:be:1f:7f:32:c4:05:41:
                    42:9f:c8:61:aa:5f:ba:11:cd:a8:bc:b4:bd:b1:6a:
                    82:d0:90:f8:af:b9:04:b1:60:20:25:bf:cb:7c:e4:
                    52:86:ef:d4:8f:08:20:e4:07:e1:44:c0:40:2a:c1:
                    49:2a:f9:fc:22:ed:a4:68:e5:2e:c9:d6:05:a6:d1:
                    52:28:19:57:5a:4d:c0:ef:3e:96:f8:56:60:aa:c9:
                    a3:c3:d4:00:cd:24:37:40:d7:4d:3a:39:66:a7:4f:
                    aa:67:a3:11:95:03:b5:bf:db:63:a0:fd:88:29:c5:
                    22:bc:b4:98:1b:6c:c6:aa:7c:f9:0a:d5:4b:69:ab:
                    df:b0:06:6b:cb:d8:0b:5a:98:5a:df:28:4a:e2:3d:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:15:5E:25:8A:42:B7:09:38:74:88:DF:57:B7:56:CD:BA:A7:48:50
            X509v3 Authority Key Identifier:
                keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:66:3c:6c:29:f0:ea:a7:aa:74:8b:be:69:70:08:f5:70:8b:
         43:70:06:78:b1:64:65:08:9e:45:9a:f4:a9:22:87:53:e3:98:
         03:af:99:9b:97:7f:47:31:5c:e9:77:f4:37:ed:c1:cd:10:7c:
         4f:a0:8a:92:f6:8f:10:30:48:8f:b4:5d:b9:e1:77:6e:21:6f:
         d2:a1:48:f5:97:89:b1:d2:10:3e:80:bb:57:95:02:51:2d:4b:
         ef:ea:c2:37:c9:20:df:9e:86:9c:72:ea:b2:e8:35:f1:b6:af:
         9a:52:44:3a:4e:d5:ac:7e:f6:96:38:11:38:da:64:4c:76:dd:
         a9:23:d1:bd:0b:d1:b5:e0:e8:11:81:2d:98:70:43:3e:c5:cd:
         38:4a:78:7e:6f:24:90:63:06:e9:a1:37:dc:b9:43:62:63:4b:
         e7:47:f3:b3:0e:d8:cf:11:da:b3:80:ec:f9:8e:a4:3e:13:53:
         a5:88:0c:91:44:89:eb:74:65:e5:05:7b:42:2a:56:70:7f:0a:
         ed:fa:03:ab:8b:5a:70:d2:eb:91:e3:05:8e:cf:de:b2:9a:e6:
         cc:50:ac:2f:7e:7f:a2:0e:f0:4a:6c:03:3b:b1:9d:df:77:1e:
         7c:8f:ea:45:9e:6c:20:11:83:f2:e2:36:f8:72:77:10:87:a7:
         46:ff:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:54:36 2025 by rpki-client