Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File:                     bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier:          1bbvZBxkM7TFRopIx0oEkq5hn1WEYy8ELPhi2udvYKM=
Subject key identifier:   3F:06:72:81:D2:5C:DB:FF:99:4E:38:CA:F8:12:E6:1F:3D:FD:8C:67
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer:       /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial:       0197B6D73D99A82843C3B91BDF272A2A29F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number:          015B
Signing time:             Sat 28 Jun 2025 14:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:48 +0000
Files and hashes:         1: 8UG5Qh7t6gkyV0rD8nZ1oL2Ckuo.roa (hash: br/1geYk5+cZ7ZJEexlmKCcjPCyNtKTSm1+1iwPC7Z0=)
                          2: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: HDF+QcoOFB0kCQJw5NDzm2pK3PZVJjhLVP72b6cII+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:3d:99:a8:28:43:c3:b9:1b:df:27:2a:2a:29:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
        Validity
            Not Before: Jun 28 14:00:48 2025 GMT
            Not After : Jun 29 14:00:48 2025 GMT
        Subject: CN=3f067281d25cdbff994e38caf812e61f3dfd8c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:71:3e:b2:28:a7:1c:f2:0c:d6:f5:28:8e:
                    c4:35:89:e2:1b:6b:2b:dc:d7:c0:50:6d:a7:2a:59:
                    aa:18:53:84:3f:78:e8:e4:dd:13:b4:e4:45:d6:28:
                    19:62:d7:89:ee:44:f9:2f:38:a9:75:0b:77:46:40:
                    fc:96:75:4a:ff:96:d2:3b:e3:fd:df:e8:ab:f6:9b:
                    d9:94:29:e5:4e:47:b3:52:24:92:4b:60:4b:bd:52:
                    0e:77:e2:48:d9:67:f1:c0:0e:d0:0f:6a:3b:eb:6f:
                    ff:af:7b:d9:38:fb:8a:cf:d2:4d:e8:99:4d:4f:08:
                    e6:6f:68:f4:f5:4e:1e:a8:14:ca:43:b7:4a:be:f8:
                    4e:30:5a:56:62:0a:74:23:f1:f6:59:93:0a:d8:13:
                    b3:1f:19:a1:8f:88:40:43:b8:e8:d3:a4:f3:fb:ee:
                    2d:54:90:4b:e0:e1:92:78:b9:f4:22:39:21:9e:f6:
                    19:dd:6c:57:13:5f:0c:8e:0d:5d:42:ab:a1:50:ea:
                    3b:04:b0:0e:3b:35:61:a5:2f:2c:b4:ba:4f:c1:93:
                    7f:6c:90:cb:72:6d:4b:ed:ad:f3:cb:3b:eb:0b:d3:
                    8a:8e:87:4d:4d:2e:dd:18:d1:6e:fb:06:8d:46:f1:
                    0e:2c:3f:f3:23:97:7e:bd:a5:69:5a:ce:45:36:d8:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:06:72:81:D2:5C:DB:FF:99:4E:38:CA:F8:12:E6:1F:3D:FD:8C:67
            X509v3 Authority Key Identifier:
                keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:50:de:67:c4:f9:b9:7c:0d:77:11:ea:0c:23:b4:85:a6:f4:
         46:66:69:43:b0:5c:f5:96:63:ef:0c:fa:82:92:79:46:96:f8:
         3d:4b:d4:c4:9f:40:e2:b9:6e:69:fb:31:dd:d6:a4:c6:8f:dc:
         b8:58:5b:68:a5:df:3b:7b:bd:92:8e:7f:58:b2:2c:84:87:a2:
         1f:78:94:be:d1:cd:f9:e1:e8:92:9d:23:8b:5b:36:e4:b5:46:
         d9:b4:9f:d8:c2:a4:ca:fc:a8:4d:31:5d:62:4e:59:a4:46:f9:
         41:c1:b0:22:c1:02:ae:8d:88:ed:e7:45:a5:7f:f4:ae:f9:86:
         12:9e:97:e2:7e:bd:2c:63:56:19:f9:ba:64:1d:84:65:66:e1:
         66:6e:fe:0a:49:35:41:f4:c4:f6:28:bd:ae:6d:c5:2b:ca:ff:
         07:e5:cc:93:b8:bc:b0:47:c9:01:9b:b2:00:db:30:22:a4:d1:
         90:d3:0b:dd:be:d3:16:9d:88:b6:be:7e:9a:70:b2:50:04:23:
         d1:91:5b:a4:4a:6f:7f:78:0e:d7:91:57:7c:3f:b3:cb:c5:28:
         11:75:8e:be:e0:41:7e:27:94:a8:a1:d3:89:08:0a:11:6a:4e:
         95:3e:b6:0b:bf:08:5f:e2:b4:71:13:95:8d:1e:55:bc:00:3d:
         46:ef:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:39 2025 by rpki-client