Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          mdTk0O3kPR8cJXuYmCdIR0LQ0GRApWcgb1xM/7zReoc=
Subject key identifier:   CE:A5:22:8E:66:3C:5F:93:7B:D5:32:F0:27:9A:6B:51:8D:C3:59:91
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       0197B6A244E82CC54005AD8CC96DA30CE139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:02:57 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:57 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:57 +0000
Files and hashes:         1: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (hash: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=)
                          2: UH7ERX2uEAwiuiu2EIP73IUUkwI.roa (hash: 71rfZI37bB6WKWLPGXn68iFKAbS6rOx+kOHCTWBrP9Q=)
                          3: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (hash: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=)
                          4: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: M4Kc/hb+q/8MwetGp7gjph/HTYivds3JRqyV/gyeD4M=)
                          5: sShD_q4ceLwxQ66Q2G4C6NLHOns.roa (hash: BiX0Ojf2DbZMT20uSZBtFAbZP4As97iO/AHVcU+bzqI=)
                          6: tk3p5E2XBBz_gCKcQbPuR2gwU6g.roa (hash: /uRgiUmwXV30g9CXl0HkFIaUTifbBZ9DvHMj/iIVKLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:44:e8:2c:c5:40:05:ad:8c:c9:6d:a3:0c:e1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Jun 28 13:02:57 2025 GMT
            Not After : Jun 29 13:02:57 2025 GMT
        Subject: CN=cea5228e663c5f937bd532f0279a6b518dc35991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:fe:80:04:66:6b:04:9a:ea:67:f9:ae:be:
                    63:fd:a6:0d:84:a7:25:83:0b:f0:4d:b0:5b:f0:1b:
                    04:29:08:7f:c9:f2:9c:14:4b:58:5c:e8:2f:a7:1e:
                    7d:c2:16:49:25:51:eb:ea:47:55:2c:3f:80:9d:5b:
                    88:4a:32:6d:18:fc:7d:3f:f3:7e:22:88:50:ac:49:
                    a8:9f:55:e0:eb:81:fa:39:a4:5e:eb:a0:8c:79:43:
                    00:ea:ef:ab:6b:c2:71:15:29:f9:97:8a:48:ad:db:
                    5a:ad:e1:66:b7:df:3a:ff:30:22:f2:0d:08:01:6a:
                    d8:3e:05:e3:5f:e3:7a:cb:d8:e0:47:45:76:16:87:
                    0a:f7:05:fb:d2:2f:e6:52:63:33:31:a6:54:3f:e3:
                    df:1a:b8:27:9f:37:82:8b:cd:86:18:9a:b1:37:ea:
                    9b:e8:68:4e:25:f1:d5:ac:0b:0e:c0:0f:e6:58:75:
                    91:67:5d:15:77:28:29:65:24:80:16:2b:8b:00:99:
                    20:8e:4c:bf:77:d3:1f:d2:d6:e9:9c:1d:3a:56:ac:
                    21:34:de:8f:9c:35:d4:58:36:72:55:2e:6a:1c:16:
                    47:bc:10:4f:1a:0f:c0:d5:c0:10:5e:31:6a:4f:31:
                    bf:72:0f:e4:a5:ec:9b:6b:1d:2e:1b:4f:6c:96:8f:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:22:8E:66:3C:5F:93:7B:D5:32:F0:27:9A:6B:51:8D:C3:59:91
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9d:b0:20:25:0e:cd:7f:c5:c6:22:b1:5e:e5:85:5a:b8:65:
         50:02:85:ee:a7:6a:45:4e:41:c9:01:f3:42:5d:77:f9:7c:22:
         9c:c3:66:ea:e4:5c:59:10:b5:a2:b1:a6:36:a7:cb:d8:73:cc:
         d5:e5:8e:a2:66:3b:02:a1:30:54:05:a8:d9:d8:f5:38:03:b3:
         7d:02:17:04:2e:83:96:61:2f:d3:0c:e2:62:d0:5e:29:1f:5d:
         42:7e:a0:74:cb:49:bc:8b:10:88:36:8e:ec:cb:eb:4a:d6:52:
         ae:52:c0:a4:dd:85:07:cd:d5:db:d2:5d:fb:5c:c7:01:3c:e1:
         9f:5a:32:39:db:c8:bf:71:ad:dc:3d:b3:db:d2:b5:18:af:54:
         2a:63:f6:46:a5:05:1f:67:d5:d6:52:39:fb:a6:c9:97:0e:37:
         01:ec:b1:34:c8:4b:82:8b:de:44:3c:d5:bd:22:6c:83:39:d9:
         53:da:00:e6:65:c1:ee:8e:d1:85:92:a3:b9:46:29:63:90:5c:
         f3:62:63:a4:42:26:d3:b8:07:dc:9d:9b:24:a4:53:0e:4f:d9:
         8b:97:78:4f:2f:c2:75:6f:e9:1b:d0:33:97:1a:a5:db:6f:3e:
         0d:6f:43:4e:45:c5:56:18:af:9f:da:8d:9d:07:5c:f7:44:04:
         1c:b0:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:41 2025 by rpki-client