Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          Tyqy+oysVMLAi0SP63nUlmY+osgSBC77RNvLutr7PPA=
Subject key identifier:   EB:80:BA:3F:E9:E5:33:73:F3:C0:7E:F4:FC:BE:29:7C:68:60:C3:E7
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       0197C537977F2EB25BD5C99D40ED6708ABFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          15C2
Signing time:             Tue 01 Jul 2025 09:00:44 +0000
Manifest this update:     Tue 01 Jul 2025 09:00:44 +0000
Manifest next update:     Wed 02 Jul 2025 09:00:44 +0000
Files and hashes:         1: 1-ZTXd6PmTmIMEMe100W5NGDRj3c.roa (hash: NHkVAtdEjUnA2SCcMg/CpdPj8emXX0V3c3ArPmZsQPo=)
                          2: cKTFKLuoQdiYE7_u9RuNKWw7fco.roa (hash: KXSC0hf1ayPyYoQDrw1CY1aRR6JyJ+UZkoTbKkWxBMQ=)
                          3: d5p44SeL41Vv8U9LRNaQSIJeXfY.roa (hash: tK/nEBw1HGQWPtkPKGf1rTHF1XrAXssUZrXXRf8dXMs=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: ndqSCiajh9y0wTO0alQefk5KST6h4Yuj6CDMvzVveXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:37:97:7f:2e:b2:5b:d5:c9:9d:40:ed:67:08:ab:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Jul  1 09:00:44 2025 GMT
            Not After : Jul  2 09:00:44 2025 GMT
        Subject: CN=eb80ba3fe9e53373f3c07ef4fcbe297c6860c3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:d4:da:9e:83:c6:45:e3:83:84:3c:36:f2:
                    b6:13:14:38:bb:6f:75:87:62:ac:08:0b:17:66:94:
                    0b:6f:48:49:15:92:90:e8:5e:63:a1:e1:0c:52:57:
                    d4:96:44:e7:00:2e:3e:63:52:ab:a3:11:80:a9:ce:
                    bd:e0:26:aa:ea:28:d2:f7:c6:52:ff:81:f6:6b:a3:
                    70:47:15:bf:96:55:f7:be:ad:a5:70:32:a4:a6:d2:
                    48:e0:7e:87:75:8f:e8:a4:a7:3d:9f:f7:c8:45:a7:
                    fe:4e:46:40:2d:19:4d:33:45:ff:f3:65:32:06:5a:
                    88:e6:dc:4b:84:07:0c:e7:da:40:ed:e3:0c:15:e7:
                    b9:7d:0d:bc:8a:1f:f9:3e:41:ca:0a:a0:68:e2:eb:
                    bb:a0:93:ae:48:93:32:25:79:5c:dc:9c:75:f2:85:
                    4e:ff:6b:ec:f5:76:78:65:f5:1e:9e:94:08:48:2b:
                    76:7c:aa:84:2d:4c:13:77:de:e7:57:ae:a4:89:c4:
                    62:88:31:ec:52:30:e3:12:35:1a:b4:c4:72:c7:28:
                    7d:56:d3:9d:ac:a0:b3:73:60:fc:ef:94:08:f4:5f:
                    6a:78:77:30:9b:de:69:6d:7e:85:34:12:9e:71:4f:
                    94:37:61:d5:1e:bb:2c:be:32:77:ae:68:c8:23:82:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:80:BA:3F:E9:E5:33:73:F3:C0:7E:F4:FC:BE:29:7C:68:60:C3:E7
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:53:70:df:e4:11:23:73:69:e7:6d:15:e8:b0:d8:c2:7d:8e:
         be:84:0a:a1:59:be:34:01:92:db:d9:3a:c0:4c:94:9d:67:3c:
         d0:9d:21:1a:16:30:cf:bb:a7:bd:a0:52:57:66:18:d4:dc:23:
         c5:a0:c3:76:99:82:96:f0:72:dc:ad:c6:ac:94:ea:ae:a1:ba:
         fd:57:68:99:53:ae:5f:d5:0a:72:04:fe:e4:cc:1e:aa:d7:4f:
         4d:e1:ee:c2:1d:8e:73:0c:c7:bd:c6:71:e2:ce:20:70:73:d5:
         ee:0d:b3:d9:46:9b:4b:d0:56:57:c0:74:84:47:f9:ea:d3:ee:
         f5:f6:d7:82:1d:9d:62:37:d6:60:e8:c8:12:65:d3:a4:3c:34:
         fb:f3:b9:d6:33:63:23:ce:7d:c4:31:b4:fb:77:6b:36:80:e0:
         55:d7:39:3d:f9:5b:53:21:6d:3a:63:a7:96:a4:69:60:e5:66:
         07:1d:70:5a:7e:be:6a:36:6a:b7:32:46:27:73:cd:74:06:7e:
         c3:40:51:d7:8c:37:85:67:d4:7c:35:4e:71:fd:12:a3:76:3e:
         1d:7f:59:f4:9b:84:50:fd:b2:9c:34:8a:0e:8a:de:92:15:ee:
         17:8e:87:17:83:10:67:02:b5:40:ec:50:d9:94:5e:ce:e0:fd:
         7b:17:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:27:28 2025 by rpki-client