Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File:                     Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier:          hORX5tRB8J0TrfRW13lVTvwkTNMfsKdVUzvrwUbVf0E=
Subject key identifier:   73:E7:93:C7:A1:3D:11:EC:8E:7E:EE:44:F7:95:D8:D9:60:05:BB:3A
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer:       /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial:       0197B7B37F4FC4B52324620F2F2E8F10EA99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 18:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:23 +0000
Files and hashes:         1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: JwPrag3MfVV7aBR/PeiMyrrD6Dxeuo0Jiq8/FK+Zq+o=)
                          2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:7f:4f:c4:b5:23:24:62:0f:2f:2e:8f:10:ea:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
        Validity
            Not Before: Jun 28 18:01:23 2025 GMT
            Not After : Jun 29 18:01:23 2025 GMT
        Subject: CN=73e793c7a13d11ec8e7eee44f795d8d96005bb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:4e:1e:b3:41:55:02:96:bd:49:88:c5:de:
                    4e:48:cc:18:69:96:81:90:79:6c:26:db:0e:2b:eb:
                    11:14:5f:cc:2b:e6:19:51:56:fc:a4:62:76:7e:22:
                    8e:36:5e:63:42:bd:c9:61:47:2a:b3:a1:ae:42:58:
                    21:cd:22:f0:20:f8:41:b8:e6:e8:4f:46:0b:fd:f1:
                    e3:0e:fb:30:c4:f2:0c:17:c4:9f:14:98:3a:24:09:
                    a1:fb:e8:bd:fa:ae:03:7f:d6:ef:4c:22:e1:a8:2b:
                    52:d2:48:2e:fe:81:88:95:c4:f2:47:4a:ed:d3:76:
                    9f:41:b9:08:b9:94:4e:de:64:44:f5:9d:9d:0d:a1:
                    bb:c0:db:9f:a5:a4:13:c6:7b:4b:75:5b:53:0e:64:
                    0d:ad:09:50:00:79:d3:bd:47:d9:50:eb:68:20:d6:
                    3d:cf:ac:50:67:3a:a7:51:d6:78:a6:39:c2:da:41:
                    9a:e5:c6:b9:e0:8f:2a:8a:7b:34:35:53:57:75:6b:
                    31:de:8f:b0:3f:1c:33:62:8a:79:e2:76:ee:2f:63:
                    19:57:89:2c:6f:50:de:f0:cf:0a:ff:37:ed:9b:32:
                    ad:f5:1c:40:ac:56:b6:f4:82:5b:88:d6:c0:87:33:
                    3d:f6:8c:18:ea:8c:c2:e4:48:18:1f:5f:80:69:4d:
                    58:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E7:93:C7:A1:3D:11:EC:8E:7E:EE:44:F7:95:D8:D9:60:05:BB:3A
            X509v3 Authority Key Identifier:
                keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:37:e2:1d:f1:f7:dc:84:72:03:d3:2f:7c:9b:70:20:ac:
         10:17:58:45:99:9a:a0:2b:8d:54:f5:53:f1:f0:92:9f:d4:64:
         67:c1:5f:39:10:59:e4:ab:69:50:90:7f:33:8a:11:5b:82:4e:
         76:48:33:20:a5:72:b2:86:b2:5b:38:d2:d7:d5:aa:ab:16:d2:
         f5:75:ee:bb:9a:b7:24:40:e2:89:90:e8:60:a6:c7:8d:04:c2:
         db:fb:d5:80:cf:6f:87:59:0f:13:ed:43:f3:dc:8d:13:22:f9:
         4a:30:65:05:45:56:c8:31:42:f6:89:96:c3:05:13:13:20:70:
         8d:af:ef:c3:d7:b6:3a:9d:fa:53:a6:e1:d2:47:9c:33:db:a2:
         85:d2:a7:b4:ff:cf:39:da:f3:5c:d1:66:9f:c4:85:d6:62:e8:
         0f:2b:d2:af:a6:9a:da:7c:8d:cf:39:c5:6c:dc:22:5d:e6:b4:
         1c:30:89:2e:80:c6:25:0d:8d:68:95:5c:a0:2b:30:61:8d:b8:
         2d:3b:2f:f7:1b:9f:9d:c1:a8:40:86:f0:33:1d:3c:35:17:42:
         1f:8b:96:79:a9:d1:99:b2:f8:9b:09:74:32:b1:54:90:a8:0b:
         5b:73:1b:e2:f8:e8:31:ad:8d:e4:b6:15:c6:d7:9e:11:7d:50:
         bf:46:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:50 2025 by rpki-client