Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
File:                     su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json)
Hash identifier:          39i8vheokBhcY2kWRP25lJ5cgTwQpYNg+z01qcx34yU=
Subject key identifier:   15:E6:91:2F:A5:D2:38:4A:12:37:1D:C5:6E:40:46:EB:32:B5:18:84
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Certificate issuer:       /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial:       0197B6D759A8705A607E3F6309B4459A4EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
Manifest number:          0927
Signing time:             Sat 28 Jun 2025 14:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:55 +0000
Files and hashes:         1: HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa (hash: QHoycNdEbZMja0gAvjEgeC3E4wx2OI9vc9S4Y873m1w=)
                          2: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: Aq0OLZj0OJ5jWgJ3YWY8bsmZNDWUPFvF/W+p2y6anfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:59:a8:70:5a:60:7e:3f:63:09:b4:45:9a:4e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
        Validity
            Not Before: Jun 28 14:00:55 2025 GMT
            Not After : Jun 29 14:00:55 2025 GMT
        Subject: CN=15e6912fa5d2384a12371dc56e4046eb32b51884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:27:91:8d:76:dc:39:c1:34:bc:f0:a1:b9:
                    c7:12:03:65:54:d2:ea:cd:6e:40:fd:ca:49:58:f3:
                    b0:b8:b3:71:47:d8:7b:68:e8:c7:ce:1e:3b:d5:f4:
                    02:ff:5c:44:10:00:e5:76:c7:96:4e:14:d2:20:92:
                    a7:83:77:63:84:46:67:22:80:51:7c:43:a7:51:b5:
                    36:20:04:7a:ee:8e:ea:a1:fd:19:2e:53:58:34:50:
                    40:07:01:be:f0:11:06:de:31:2b:24:70:3e:11:1e:
                    05:4e:08:13:78:30:83:88:4c:1c:9e:f8:77:22:ad:
                    eb:90:d0:68:02:13:d2:07:4e:87:e0:5e:d6:12:07:
                    7a:ff:b3:d2:4e:17:c7:29:79:7a:43:02:b5:27:ef:
                    03:05:60:6d:fc:96:dc:b5:78:67:fc:52:48:12:37:
                    94:84:74:2a:14:af:90:5d:9c:47:4c:a3:24:c3:6f:
                    2f:86:ec:3f:f9:7d:88:ac:8e:ed:e1:02:8a:07:36:
                    81:cf:7f:43:8a:ac:a9:7a:f8:36:9f:18:ba:35:b8:
                    d4:97:76:52:77:50:3b:aa:e2:5f:ae:e3:9d:da:55:
                    15:96:1a:2f:44:7b:d6:71:8d:bf:25:d3:21:4e:33:
                    b5:b0:5a:46:ae:b8:0d:2d:15:bf:9e:89:34:81:db:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:91:2F:A5:D2:38:4A:12:37:1D:C5:6E:40:46:EB:32:B5:18:84
            X509v3 Authority Key Identifier:
                keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:04:2d:af:0f:c5:ca:7b:a2:d2:31:16:12:5a:01:7a:31:e6:
         0b:00:21:ca:e8:13:97:aa:96:cc:12:7e:8a:4b:2d:7b:3d:c5:
         19:13:55:2c:15:ed:ab:fd:70:d5:6f:f9:95:04:3d:76:50:49:
         f5:66:8e:60:56:bc:ef:5d:49:fc:44:63:92:0d:1a:c9:f9:33:
         7a:db:54:41:8c:4b:6e:44:d5:e8:d5:57:3a:d4:48:86:68:8a:
         cd:78:a8:cc:cf:3a:37:18:fd:b1:fc:95:e9:51:64:06:e1:53:
         00:67:b5:a0:ef:bc:36:e4:84:b9:3e:97:e4:6c:8c:34:71:46:
         a7:e0:9d:d3:96:50:a9:ac:65:49:b1:ac:f5:a2:89:df:7c:32:
         e2:5d:93:c7:fa:0a:0f:ea:56:74:6f:13:ae:fd:3e:d1:e8:e3:
         7c:d1:67:84:94:96:97:1f:ef:06:fa:57:40:49:d8:d1:fa:b6:
         c2:a2:b4:58:72:e4:aa:12:b7:fe:a8:7a:ec:29:4d:18:14:f9:
         b5:18:25:26:52:a5:f3:0e:7a:ee:37:83:ca:71:d8:65:7e:df:
         6d:2d:8b:83:c3:1b:67:88:3e:1b:e1:9c:b2:8b:ed:3b:59:af:
         05:76:a6:3a:92:a9:ad:16:b1:56:b8:f6:f1:4e:9f:85:f4:12:
         7b:5a:0f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:20 2025 by rpki-client