Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          ubs9Z8d3iiYNPNicPTGD7e6Jorlt5l5NGpt0JRcaEAU=
Subject key identifier:   F6:80:F9:48:AB:08:70:A2:D2:E3:A9:30:72:F3:7D:F1:77:2A:0F:54
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       0197B88EC1D55DCA579FA9DDDEE16FF78370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 22:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 22:00:52 +0000
Files and hashes:         1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: C0kQJBNkL5oEw6X/q2gudvMYwP4Zn6jKgZiuHgJlQlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:c1:d5:5d:ca:57:9f:a9:dd:de:e1:6f:f7:83:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: Jun 28 22:00:52 2025 GMT
            Not After : Jun 29 22:00:52 2025 GMT
        Subject: CN=f680f948ab0870a2d2e3a93072f37df1772a0f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:5a:37:e7:c6:2b:83:8f:3c:d4:38:01:ab:
                    55:4b:26:51:ae:4d:cd:1a:60:2a:1d:2f:5e:80:6d:
                    80:74:f2:ef:6b:6d:58:ef:e9:f9:84:d6:3c:c6:5b:
                    18:82:f2:a3:01:1f:3a:6c:1f:20:03:5b:69:2d:1a:
                    16:52:21:ec:9d:38:ba:62:b7:19:7d:06:5f:a4:28:
                    9d:97:c1:3d:96:a4:da:a4:21:9e:26:82:94:38:7b:
                    2b:bc:91:d6:d7:d3:b2:98:bb:66:4d:fe:d8:f6:b4:
                    3e:70:ac:8c:f4:b2:fc:e9:91:87:02:58:1b:dc:07:
                    7c:eb:17:51:d4:ab:ec:75:43:54:ab:85:7a:0c:a7:
                    8e:4e:46:de:30:d9:7f:e6:e5:32:b3:cc:92:04:01:
                    aa:4c:19:1e:93:38:a0:41:04:2c:69:a7:7b:ab:96:
                    a3:8d:0f:62:9c:da:a0:2e:18:07:6a:7b:7f:6c:ee:
                    b2:4e:1f:cc:87:8f:21:2f:c5:fc:73:73:93:dd:0d:
                    d9:29:cd:f3:0e:b3:2d:2c:f4:79:e1:10:84:bb:3e:
                    9d:96:f9:a3:c5:61:4e:ac:97:eb:3d:ae:38:0c:7a:
                    0a:87:0e:7d:0b:40:4f:16:d7:5a:f7:85:46:14:c1:
                    62:00:96:61:71:e0:b0:d2:43:db:86:cd:e2:1c:15:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:80:F9:48:AB:08:70:A2:D2:E3:A9:30:72:F3:7D:F1:77:2A:0F:54
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:79:db:02:91:ea:7a:97:72:22:96:fd:9a:55:f7:6f:24:
         b6:28:66:52:16:ab:14:b4:c9:ee:2b:f2:f4:09:b1:49:c4:f9:
         25:84:38:81:97:77:05:d4:49:af:ce:d2:91:7c:72:1f:f7:0f:
         df:c6:82:24:52:83:8c:fb:c7:8c:4d:e9:31:0a:ee:de:58:10:
         e8:c1:fd:1b:05:cd:5a:ff:50:59:0c:4e:68:7b:2c:c0:20:49:
         e7:d5:64:0b:b5:66:80:8a:aa:1b:61:60:6f:78:16:aa:17:62:
         22:a5:3d:d9:28:46:20:e7:7a:3e:ff:c3:fd:5f:23:0a:1e:37:
         fa:0d:aa:97:49:44:74:35:45:cc:31:63:d6:8a:e4:f6:86:b4:
         a8:56:8b:c3:8e:21:72:af:8c:d4:18:d2:70:22:34:fa:5f:ca:
         bc:64:ca:8e:1c:b5:da:28:d8:a4:3f:fe:c6:98:64:a9:60:cf:
         6d:93:07:bc:8f:88:20:ab:2f:47:2b:88:ed:ce:a3:2d:c1:86:
         09:6e:1d:94:db:7c:6d:4f:20:8e:78:9d:7b:cc:8f:9a:1a:e2:
         55:b7:6e:9c:3c:57:da:53:2c:59:31:d4:b1:c2:5e:26:6e:a2:
         a6:46:f5:8a:b9:d9:45:c8:b6:5d:ca:d4:02:65:69:f6:85:da:
         16:06:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:42 2025 by rpki-client