Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File:                     sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier:          MuEO8RbDsaLdARXodU62lELzoHdApd08p5PX/Q1lqQs=
Subject key identifier:   75:A8:2B:C3:77:03:A2:0A:17:30:EE:AC:A0:8D:76:48:6F:95:48:8F
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer:       /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial:       0197B7B3291811E3470F075584BC50156828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number:          0565
Signing time:             Sat 28 Jun 2025 18:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:01 +0000
Files and hashes:         1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=)
                          2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: PT7yD7oJgd49b9/f+ZHO547hxtQvA6yhtvWlAcv7Kuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:29:18:11:e3:47:0f:07:55:84:bc:50:15:68:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
        Validity
            Not Before: Jun 28 18:01:01 2025 GMT
            Not After : Jun 29 18:01:01 2025 GMT
        Subject: CN=75a82bc37703a20a1730eeaca08d76486f95488f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:fe:eb:40:c8:cd:4c:66:fb:2f:01:9f:86:
                    ba:21:62:2b:5b:66:50:a6:76:c0:3a:69:6f:1b:9a:
                    53:ef:29:a1:fc:c2:73:4a:5e:c0:96:1f:16:3c:4e:
                    4b:38:9e:36:8e:c3:6a:a3:81:64:c4:18:82:50:4a:
                    34:3e:09:70:85:6e:aa:08:43:7e:73:0e:5b:1f:43:
                    a1:83:1c:72:8d:49:bb:39:6f:6b:96:a8:63:4e:f0:
                    ec:fa:c7:b7:9f:bd:87:cc:cb:46:38:a8:68:c3:8c:
                    99:be:10:2c:bc:7c:45:f2:c5:28:f0:34:c9:60:37:
                    f0:b8:6c:2b:3d:e8:59:e0:06:35:a6:2e:a3:00:c6:
                    cd:1a:3c:46:23:b0:60:8c:d1:81:dd:fa:66:1b:f1:
                    07:36:b8:5a:fd:3b:ab:29:d0:66:a3:a5:a4:03:c4:
                    dd:f1:a9:03:ae:f8:34:97:6d:ba:3d:1a:37:c9:e5:
                    35:f4:18:4c:6e:e3:bc:b1:3e:2c:1f:91:c7:68:72:
                    7b:c0:58:61:d1:e4:55:4f:f6:7b:ff:e7:12:75:55:
                    45:e7:91:7b:71:37:da:95:32:16:4c:06:4c:7d:ae:
                    14:b2:ba:a5:98:34:3d:7d:8f:6c:f1:ea:42:1a:19:
                    6f:a1:64:71:06:29:71:72:d1:62:91:28:66:ec:26:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A8:2B:C3:77:03:A2:0A:17:30:EE:AC:A0:8D:76:48:6F:95:48:8F
            X509v3 Authority Key Identifier:
                keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:23:30:37:c0:a3:a9:68:02:73:13:28:82:6b:3d:7e:c7:
         9e:b8:ef:9a:75:fc:36:40:2d:c1:71:6b:2e:0a:d2:a5:09:72:
         0e:60:79:7a:4e:ec:92:0e:84:8b:ae:01:93:94:a9:23:dd:5c:
         46:50:5e:31:6b:1f:81:b8:7d:74:54:cb:f0:dd:e3:6a:3f:35:
         59:9a:9f:45:9e:7f:8b:cb:fe:0c:20:52:4f:ff:ce:ea:cd:30:
         c3:6d:9a:16:f4:ef:95:55:ba:84:c1:d0:86:3c:35:f2:f1:dd:
         d1:fc:2c:ab:56:67:3d:18:ff:ff:f7:0e:c1:a8:d9:52:1a:60:
         ee:ea:97:95:b3:21:d9:75:b3:0c:04:c6:36:ed:54:1a:ca:71:
         67:36:c5:d1:e0:6f:06:e8:ae:40:b0:d7:68:52:2e:51:6d:f6:
         11:82:56:81:7b:db:72:13:15:b6:89:8e:74:74:60:22:0e:1a:
         d1:03:55:2c:9c:17:45:a7:20:73:92:d2:c1:3d:c3:84:dd:63:
         09:cb:d5:78:1a:1d:e6:73:e4:24:27:2a:a9:1c:38:8a:e6:5c:
         31:3e:91:c6:2f:39:5d:13:e0:6a:ca:c1:2c:00:d9:e3:97:09:
         2d:65:11:29:33:7e:7f:b9:c7:57:58:d6:59:93:00:33:49:37:
         0c:84:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:28 2025 by rpki-client