Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          CWcsrryndmgJEPMAZ7yWvU7/qt6RxH+AG8iLe4HPxFY=
Subject key identifier:   22:15:3B:4C:75:E3:90:39:B7:CE:78:5F:5D:52:31:4E:B5:05:88:A9
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       0197B890143CDED24328D7400DD5459E675B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 22:02:19 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:19 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:19 +0000
Files and hashes:         1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=)
                          2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=)
                          3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=)
                          4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: YAmzOUU1jqLGKNfruR+NFWhLNBT2F/3a0oBqE1dxXoI=)
                          5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=)
                          6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:14:3c:de:d2:43:28:d7:40:0d:d5:45:9e:67:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Jun 28 22:02:19 2025 GMT
            Not After : Jun 29 22:02:19 2025 GMT
        Subject: CN=22153b4c75e39039b7ce785f5d52314eb50588a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:f1:aa:eb:3a:94:49:17:fb:39:eb:c9:62:
                    cf:d3:49:28:cb:bb:0a:90:ee:4c:9d:36:c2:5b:01:
                    c3:3c:19:52:29:47:1f:26:d3:c7:75:3e:8a:8f:5c:
                    ba:c2:b7:59:8c:ca:af:7d:3c:df:7e:a6:89:06:c3:
                    71:99:76:b8:c8:49:47:89:9c:d8:46:15:7b:ed:b7:
                    a7:9d:64:04:58:f5:62:1a:b5:80:62:e2:cb:8d:12:
                    b8:3f:15:3f:17:3c:89:dd:66:d7:2f:61:ad:02:32:
                    17:6c:4f:01:50:8e:80:b5:1d:37:52:ce:6d:71:43:
                    00:94:15:4b:37:34:81:af:ba:0c:8f:c0:89:3f:5e:
                    0d:6a:5a:56:64:5c:69:b6:ee:fb:2d:03:9c:59:34:
                    e9:26:f9:ef:e0:b5:8b:60:c8:70:a1:9d:97:c1:46:
                    c8:35:dd:c1:72:0f:42:fe:e3:ab:03:de:03:b3:c6:
                    39:34:41:68:67:01:89:f9:1c:1f:1d:fc:04:5e:df:
                    cf:c1:f7:fd:2a:8d:e2:89:81:61:18:3c:e8:66:a0:
                    bb:c5:d4:c7:d1:fd:68:f2:80:c4:ea:59:bc:df:19:
                    bc:50:9e:89:6a:59:d8:7d:d4:1a:5f:3d:d1:b5:22:
                    d5:0e:d9:6f:60:bc:1b:18:32:b2:65:7f:0f:7c:b0:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:15:3B:4C:75:E3:90:39:B7:CE:78:5F:5D:52:31:4E:B5:05:88:A9
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9d:d2:31:ff:69:bd:5a:c0:77:09:d1:1c:7f:12:0d:54:07:
         4c:19:23:4e:47:50:16:a0:ff:59:f5:03:17:97:6d:86:de:a4:
         a2:29:82:46:2c:60:e8:be:b2:b6:81:cd:83:65:3e:58:b6:b9:
         9c:61:4a:20:e3:cb:fc:1d:cf:4c:46:e0:ef:38:e1:97:8f:e6:
         9e:f9:3e:2a:4d:95:36:25:8b:3b:61:58:75:65:5a:e1:0d:4f:
         c7:21:4d:dd:1f:75:2c:1f:e4:ce:2d:b2:90:82:4b:cc:83:c7:
         77:88:04:94:72:ee:c9:86:56:61:3b:2d:15:9b:7b:00:74:65:
         5f:3f:86:07:47:00:54:3e:f0:f0:c4:3f:9c:d7:54:58:aa:58:
         7d:26:a0:1d:df:9d:a0:d4:51:59:d1:e5:4a:29:2e:3f:51:9c:
         c3:ee:bf:f1:f4:62:95:28:b7:88:47:03:10:65:f5:43:8b:00:
         71:e5:b9:dc:62:94:79:f8:41:42:5f:64:a4:c1:9b:ef:25:88:
         22:27:af:62:db:c4:4f:72:89:02:cc:3c:6b:8e:a1:38:df:8d:
         4e:f7:25:c3:c2:19:ab:05:f7:92:cf:5c:81:e4:79:e5:c4:e8:
         6e:82:74:e0:3b:33:20:92:64:4d:5f:41:df:3b:b8:fb:ba:d4:
         76:45:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:10:25 2025 by rpki-client