Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          m1sERvC2fRJp0waEVUSJj2mN1EE0r/zOv49QU2l+P9Y=
Subject key identifier:   4B:0F:41:0C:4B:6C:78:54:AF:68:75:89:02:B3:EB:C1:7F:6B:B1:71
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       0197B7B376F5E119CC8AE2F18C110695D92E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 18:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:21 +0000
Files and hashes:         1: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=)
                          2: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: mC7gihgmY2ODFRxw5RUyAqM9HGgN0UEfP91uo/aIZ1s=)
                          3: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=)
                          4: ywM-ydmbzESoETxNsRnDQ6bbYxg.roa (hash: GmNC6UbYgSd9tbGR+GgvLCmczbY/RBGea7VtxVomphs=)
                          5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:76:f5:e1:19:cc:8a:e2:f1:8c:11:06:95:d9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Jun 28 18:01:21 2025 GMT
            Not After : Jun 29 18:01:21 2025 GMT
        Subject: CN=4b0f410c4b6c7854af68758902b3ebc17f6bb171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:43:8f:b4:5f:49:e6:00:13:87:c6:f3:9f:
                    0d:e1:6c:f6:5b:aa:e6:2a:72:4a:55:50:41:56:55:
                    a1:a4:79:d8:3e:0e:2e:6a:79:72:57:40:d4:7c:97:
                    f3:a9:c8:d8:d6:61:98:59:cd:69:9c:97:2b:05:66:
                    33:00:ea:5f:de:d3:08:e5:32:80:de:52:39:d9:32:
                    e1:e3:77:5a:90:fb:34:4d:61:75:c2:bf:d2:8b:9d:
                    52:de:6e:87:98:f9:8b:ea:00:07:f7:8d:5e:92:19:
                    54:99:31:32:8a:46:8a:6d:db:63:96:c3:07:62:89:
                    b0:37:a2:57:87:63:d4:18:ef:ed:51:35:01:64:6e:
                    c9:aa:82:79:19:3c:53:d9:30:4d:0e:30:1f:09:66:
                    e1:87:1a:6d:77:23:11:c5:58:ff:e4:cc:78:35:ae:
                    13:13:aa:f9:5f:ab:af:69:12:59:d1:19:c2:09:ab:
                    27:78:d3:3a:7b:30:7f:4c:0b:2b:0d:9c:39:b0:2c:
                    ec:ff:fc:7e:bc:06:3a:8a:0b:3e:c6:3a:ee:26:fa:
                    c9:dc:8b:c3:c5:c9:13:4c:1a:f3:74:33:9d:74:45:
                    f1:18:46:80:1e:5f:0f:7d:3c:af:57:47:d9:87:55:
                    fc:50:45:1c:5a:ce:22:fa:15:a8:76:e4:ab:46:ad:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0F:41:0C:4B:6C:78:54:AF:68:75:89:02:B3:EB:C1:7F:6B:B1:71
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a8:e5:8f:49:e9:b6:90:c4:ab:09:d5:ee:4a:76:64:a2:27:
         c1:57:cd:cd:00:46:4b:f3:49:52:9b:f2:84:5a:f9:43:bf:dc:
         7d:eb:78:a1:c8:e9:e0:02:4e:f3:5f:b9:73:9b:fd:3d:39:56:
         b6:5b:6a:3a:07:79:b7:53:87:8c:f1:33:0d:df:11:dd:0a:19:
         97:42:99:fe:f4:42:26:e9:d7:11:27:35:19:de:67:5d:7b:db:
         ab:22:a7:b0:36:5f:3e:e2:57:f9:9a:4a:eb:d9:80:ca:34:49:
         0a:a4:a8:bb:dd:a4:7e:fb:57:e8:68:fc:5d:6f:38:60:43:df:
         f3:c7:4c:13:6f:9f:f7:67:ac:57:eb:5c:37:e3:99:14:c5:0c:
         a0:0c:21:ed:db:ad:5f:45:12:1e:90:0a:50:e5:6f:d0:fb:ea:
         b6:a6:e6:42:6f:e9:4f:9e:97:0f:e0:b2:19:89:a5:a9:0a:45:
         03:ec:81:76:10:42:47:b8:8b:79:88:07:a9:d7:ee:a7:cd:a1:
         fc:3e:7d:6f:e1:f3:b3:1f:4e:11:61:d8:26:a8:57:e1:19:8b:
         11:2f:7a:e5:08:03:80:e2:92:61:f6:e4:ac:3d:e0:4a:0a:34:
         37:e1:58:a2:5b:95:70:d4:15:26:95:ad:a1:8b:fa:b3:65:bc:
         c1:15:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:22:02 2025 by rpki-client