Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File:                     Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier:          aC/k5l8j6mD9A6PSyx7WOJEZn3yDw7x3ZjeTqv164sA=
Subject key identifier:   1D:DB:58:6A:B3:C0:92:54:5B:4D:66:25:75:8F:65:F5:8D:CF:C9:0C
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer:       /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial:       0197D662A35C854E19F0618A067B3A6C29AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number:          15C5
Signing time:             Fri 04 Jul 2025 17:01:17 +0000
Manifest this update:     Fri 04 Jul 2025 17:01:17 +0000
Manifest next update:     Sat 05 Jul 2025 17:01:17 +0000
Files and hashes:         1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
                          2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: 9fQlI8m6tThbl5VPr8XTLKYqqIBE+yF1snIuSiGRtew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d6:62:a3:5c:85:4e:19:f0:61:8a:06:7b:3a:6c:29:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
        Validity
            Not Before: Jul  4 17:01:17 2025 GMT
            Not After : Jul  5 17:01:17 2025 GMT
        Subject: CN=1ddb586ab3c092545b4d6625758f65f58dcfc90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:6b:65:6b:91:13:ea:c5:29:9e:e8:b8:ab:
                    b3:a7:16:6d:9f:8a:8e:d4:73:c4:88:78:39:7c:42:
                    a7:ad:40:13:4d:7d:30:e5:3d:ee:46:eb:f2:4c:57:
                    db:dc:92:b9:ee:d7:fc:84:20:01:3a:d0:0d:48:b4:
                    59:25:41:12:f6:4f:80:2f:07:d7:97:56:e4:ac:57:
                    c0:2f:b4:f5:76:bc:70:7a:87:d0:2e:c9:1a:79:71:
                    29:49:1d:50:cb:82:9c:bd:a8:c8:bf:ed:a4:0e:6a:
                    93:c2:e9:39:a1:47:b3:b3:dd:00:c5:e6:97:51:af:
                    b8:18:74:b0:5b:98:1d:e9:31:01:e9:73:90:dc:b0:
                    a2:94:e7:3a:f1:6d:d0:17:93:f2:fe:07:5d:07:de:
                    c3:de:75:f0:4f:de:01:8e:11:cc:93:4e:25:ff:10:
                    e8:57:34:bf:04:f0:2c:e1:a2:fd:2a:02:9f:ee:24:
                    dc:59:92:af:91:0e:5d:e8:5d:89:e6:00:7e:44:b9:
                    d6:78:6e:24:f8:85:b4:70:6e:a7:9d:b8:7f:65:66:
                    67:01:44:4e:91:f1:cd:6d:b2:39:47:41:f9:18:4e:
                    5b:0e:32:a5:ae:51:14:eb:46:ba:fa:70:34:0b:d8:
                    be:86:58:19:f8:34:63:24:26:78:9b:1f:49:2a:7e:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DB:58:6A:B3:C0:92:54:5B:4D:66:25:75:8F:65:F5:8D:CF:C9:0C
            X509v3 Authority Key Identifier:
                keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:f9:bf:1e:d4:d1:f6:bc:03:09:01:de:f0:d4:3b:95:84:
         f5:4a:4c:44:01:08:d1:91:55:7d:6b:54:74:31:a6:01:a0:2a:
         05:81:f4:a3:4c:66:9f:92:90:01:87:ee:0e:70:5e:87:0d:e9:
         fe:5c:e1:d3:b4:a1:ce:b9:5c:d4:e6:04:f1:bc:3c:b7:70:04:
         df:f9:ed:f4:22:6c:70:1c:db:b6:f2:0b:89:bd:d2:91:74:58:
         76:7d:45:e3:eb:1c:46:47:19:50:37:a0:e5:61:f6:e2:89:30:
         b9:50:c1:79:0c:76:d3:b9:38:da:52:37:ff:8a:ff:5b:16:be:
         d1:15:e5:08:a2:5c:a6:c1:95:e9:e6:d3:96:f0:ae:c9:f9:54:
         da:f1:e9:60:53:ee:3a:75:b1:1f:b8:b2:cf:3a:03:5c:fd:e7:
         4a:85:9d:14:17:7a:21:40:ad:d4:7a:80:f1:2c:7b:b0:dc:70:
         67:fe:fc:b9:5b:65:e3:17:5e:8c:a0:a9:06:56:12:d6:b2:9c:
         d7:c8:0f:5f:2d:cc:db:47:21:09:b2:b8:bb:69:67:dc:f9:ff:
         7b:c4:12:73:8d:de:f6:55:29:88:28:bd:68:3f:f2:df:94:18:
         3f:90:b3:50:82:a9:52:cc:39:97:2c:32:a5:f3:de:15:96:87:
         2a:2e:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:11:15 2025 by rpki-client