Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File:                     x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier:          h8lkAlkNNmitREpSF/U0g6hvDDZ4p+bARpX/uy0JYDQ=
Subject key identifier:   08:D3:37:6A:44:6D:BF:B5:2D:C4:F4:97:C2:D0:5F:C4:E9:67:AA:8A
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer:       /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial:       0197B6A213EC26252E199655A1F380764F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:02:44 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:44 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:44 +0000
Files and hashes:         1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=)
                          2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: a9rzY2Ucb10oM6/x+sxsByMfd5IP/xPnDULL1qyjZmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:13:ec:26:25:2e:19:96:55:a1:f3:80:76:4f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
        Validity
            Not Before: Jun 28 13:02:44 2025 GMT
            Not After : Jun 29 13:02:44 2025 GMT
        Subject: CN=08d3376a446dbfb52dc4f497c2d05fc4e967aa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:e7:57:9d:5c:a1:d9:38:8a:60:b3:a5:85:
                    0d:ec:4a:ae:f1:e6:a3:17:e9:39:4d:98:a0:d1:08:
                    b1:bd:da:65:f0:37:48:cf:97:69:90:8d:70:3e:de:
                    95:7a:34:6c:02:d6:f1:dc:e4:7e:6b:5b:48:66:c7:
                    f5:a5:af:9a:14:ad:cf:b3:34:8b:95:65:e5:fa:b0:
                    f5:88:77:ff:a5:c2:e8:e4:42:e8:36:f4:6d:84:94:
                    35:57:7b:4a:71:5b:5f:11:a5:79:95:3a:b3:30:3a:
                    ca:35:5f:85:f9:cd:17:ea:b4:68:be:0b:4b:47:87:
                    02:e5:3a:3c:6b:2d:be:aa:08:33:2f:bd:36:3d:c2:
                    98:87:f8:d3:0e:2b:9f:c1:ed:ac:97:ca:49:29:2d:
                    8a:8a:d7:6d:80:c1:fe:9b:b4:d5:de:23:77:45:fc:
                    54:14:f4:9d:d0:cb:b0:6d:5f:f5:ce:cf:96:0f:03:
                    4d:4d:f0:d6:6f:38:9e:61:a2:ce:20:48:92:ff:32:
                    ed:b7:df:74:fb:32:7b:71:ec:ec:1f:5f:8b:02:a0:
                    da:1a:69:a4:64:f6:d0:49:1a:88:c1:97:32:f8:f5:
                    02:af:c1:23:a0:b9:bf:c1:9d:4f:bd:a5:bd:86:c6:
                    54:58:c6:eb:d3:0a:83:f6:98:0d:18:62:aa:ce:00:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D3:37:6A:44:6D:BF:B5:2D:C4:F4:97:C2:D0:5F:C4:E9:67:AA:8A
            X509v3 Authority Key Identifier:
                keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:32:82:b0:aa:29:3d:1a:e5:73:ef:5d:55:01:c5:70:78:
         da:26:b4:98:b4:89:19:ea:29:2a:25:e4:45:46:9d:0b:eb:b6:
         6a:28:e4:fb:a0:ec:19:0b:43:9d:ff:20:61:2f:fd:e8:67:88:
         8d:5d:93:35:2d:cb:7a:85:ee:b1:6b:c6:7e:44:3a:36:3d:7d:
         75:9b:36:7d:c2:27:3f:18:cf:82:0e:d2:68:52:a6:36:15:78:
         e9:cc:5b:70:7a:8d:71:8f:eb:49:4c:59:7d:2c:ab:7a:0e:65:
         d8:dd:b0:18:a6:7c:61:06:b5:cf:35:92:4b:80:09:0a:42:bf:
         68:af:f3:f0:a3:62:3e:a0:19:64:fd:dd:ea:83:4c:93:d6:27:
         2a:e6:1b:eb:f5:bf:a4:4d:4c:cc:3f:a8:3f:bf:a6:dc:26:85:
         52:45:e7:5f:8e:86:c4:4a:52:f0:38:f5:d4:23:b5:2a:60:14:
         49:ab:d9:8a:ac:19:eb:f8:78:2b:97:3e:0d:14:1a:08:19:16:
         d6:19:01:bb:68:c9:75:52:4c:0d:0b:aa:f4:f7:ca:4a:d7:9b:
         f9:13:82:32:bf:20:85:e4:6a:3a:3d:75:7f:71:8e:7a:df:40:
         b9:cf:65:52:21:98:f8:d6:ff:0e:21:86:62:dd:47:d2:9a:52:
         27:ec:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:48 2025 by rpki-client