Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File:                     d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier:          K3E6tkJyDwawJgrWUE5IrgurfVHo7vI6clIIb+aWWco=
Subject key identifier:   AF:51:9F:EA:5B:BE:12:98:F2:A9:F3:4E:09:69:EB:91:18:8D:52:96
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer:       /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial:       0197B6A1B4FA2E107AA12F29CD458E831184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:02:20 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:20 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:20 +0000
Files and hashes:         1: KfVGrrJYfyAf1ioL1wUbST77ZGc.roa (hash: 6wDGYAdbjHeb0jIyTRUSvJfvhrmfOqr3R3ir+lFRzkY=)
                          2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: 8pgSfA3HMDsffj+nelijqltXR/UZxETvTVfJlff5YIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:b4:fa:2e:10:7a:a1:2f:29:cd:45:8e:83:11:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
        Validity
            Not Before: Jun 28 13:02:20 2025 GMT
            Not After : Jun 29 13:02:20 2025 GMT
        Subject: CN=af519fea5bbe1298f2a9f34e0969eb91188d5296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:06:67:ec:50:24:93:58:e2:9a:49:c9:9f:
                    75:e1:78:63:5a:46:dc:45:f4:51:02:c2:ba:41:b1:
                    4b:6d:39:22:53:1a:85:ea:f7:08:12:fb:9a:a2:f8:
                    2d:d7:f1:53:de:2d:07:16:31:51:40:2e:2a:11:15:
                    a4:74:8f:20:b9:a7:80:6e:5e:13:db:b5:46:53:a8:
                    63:69:0e:5a:40:dd:6b:f7:be:ea:64:4f:65:87:f4:
                    2a:15:b1:9c:c4:19:9c:07:73:3e:7b:7d:ba:34:07:
                    14:96:c6:40:24:b0:aa:8d:a4:d4:9a:db:98:41:1a:
                    c5:7c:ad:ce:e3:35:04:dd:e0:50:2c:a6:1f:1e:15:
                    e9:e1:6c:eb:3d:21:5c:7d:7b:64:e4:a2:90:0a:94:
                    4a:5c:cf:c3:3d:1e:c6:53:fc:97:c0:1c:82:88:22:
                    23:3c:4e:a9:c7:1d:29:46:8a:36:92:52:31:a3:69:
                    50:f3:c5:65:ee:bd:ea:c6:72:b9:77:ed:0b:b4:41:
                    0a:62:63:49:d6:74:74:9f:89:99:98:09:7a:f0:e0:
                    a9:81:57:91:2b:30:fe:f8:0e:ee:dd:27:c6:5e:7b:
                    46:b8:9d:69:ee:df:e3:41:6b:6d:db:ed:31:00:6f:
                    8e:c3:04:38:04:ca:a6:8c:2d:69:41:20:3f:a8:cf:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:51:9F:EA:5B:BE:12:98:F2:A9:F3:4E:09:69:EB:91:18:8D:52:96
            X509v3 Authority Key Identifier:
                keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:3f:60:f2:97:84:a7:7c:9f:ca:6d:69:14:c8:56:eb:7f:
         3c:52:83:31:ed:23:02:9a:00:b3:0f:9f:3d:ea:9d:4b:ab:34:
         06:da:f6:3c:1e:bd:01:3e:9b:8c:14:78:cc:7d:56:25:f3:3f:
         b2:aa:45:ef:73:a8:39:61:4e:f4:e4:fe:67:e2:a0:cf:5e:30:
         c0:b4:6c:d6:ab:0a:cb:0b:89:1b:de:e2:00:b3:28:18:28:18:
         fc:b0:71:11:13:fd:2a:a0:48:85:87:3d:9d:02:47:4c:25:71:
         69:08:67:56:6e:57:85:86:24:97:1d:b5:99:ad:d0:08:6e:17:
         2a:eb:69:b2:3b:73:b2:85:51:40:92:c4:5c:f3:99:45:56:4f:
         72:0e:b9:30:af:ed:6c:ed:07:77:cd:38:11:14:22:94:03:25:
         b2:28:96:0a:d2:28:46:60:ae:a5:6c:81:45:fd:2f:17:76:c7:
         0b:62:88:28:02:ad:f5:b9:9c:22:64:2c:14:ca:16:2b:5a:5f:
         9e:7d:96:2f:24:60:4b:70:e2:77:62:d8:9e:9f:3d:79:0e:3f:
         3c:cf:75:1d:b2:f0:50:2b:af:b1:dd:03:a9:81:fa:4f:22:fd:
         9c:6d:4c:f6:42:9c:30:d6:d8:14:b5:a7:b1:d9:a7:92:ea:01:
         3c:2c:e7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:01 2025 by rpki-client