Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File:                     NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier:          8xxP75Zo/A2Slk70nkfHfp9pr2aVCnhpdlf9lZOf0C4=
Subject key identifier:   6C:49:73:E1:CE:00:03:E0:FA:40:A1:CD:16:39:9D:95:04:6C:AC:36
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer:       /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial:       0197B6A18EFDDAE2AF06313E609AB594F367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:02:10 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:10 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:10 +0000
Files and hashes:         1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
                          2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: c8sMrqhlDGZfOo2RjfOx4VX+45goVkfPdx1i66vYZ5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:8e:fd:da:e2:af:06:31:3e:60:9a:b5:94:f3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
        Validity
            Not Before: Jun 28 13:02:10 2025 GMT
            Not After : Jun 29 13:02:10 2025 GMT
        Subject: CN=6c4973e1ce0003e0fa40a1cd16399d95046cac36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:0a:c5:67:2c:fe:68:36:e4:c2:ed:91:73:
                    b8:d8:9c:5b:c3:d2:cc:fe:05:26:18:f8:d9:6e:3c:
                    73:d1:a5:e8:17:d4:be:59:b6:53:ca:f6:d4:33:61:
                    5a:91:47:4a:a1:ef:a8:3b:60:14:89:7a:7c:72:17:
                    28:7a:ff:76:ad:9d:df:3b:ac:fe:d1:e8:fa:29:01:
                    6b:08:ca:46:d6:d1:0a:90:3e:b6:e1:05:cf:b2:32:
                    cf:63:74:a0:4c:40:05:4b:30:31:5b:95:4a:61:9d:
                    f6:f2:2a:f2:d1:12:f2:f9:cc:bb:22:d1:00:2a:5a:
                    41:ab:a1:f9:8d:74:cd:a7:0f:78:f4:e8:1e:0e:bc:
                    1c:55:61:5c:21:49:b2:93:1a:7b:d6:df:5a:80:e6:
                    f0:97:97:e3:27:14:9e:e8:d5:f2:cc:b0:7a:49:76:
                    c5:19:52:ee:3f:fc:0d:fd:a0:dd:fd:36:65:23:7f:
                    29:6f:8f:73:43:d2:7e:91:d7:d3:04:a5:d3:65:9d:
                    4c:a0:24:d5:b7:f6:54:2c:0e:65:e4:11:94:be:b9:
                    0e:6a:5a:f5:7e:ec:d2:e6:6e:bf:8d:33:6c:77:33:
                    23:89:cc:93:c5:0d:f9:98:e0:db:f1:89:82:2c:66:
                    b4:d8:bd:ca:a6:5f:8b:99:3d:46:8e:15:64:28:7b:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:49:73:E1:CE:00:03:E0:FA:40:A1:CD:16:39:9D:95:04:6C:AC:36
            X509v3 Authority Key Identifier:
                keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3e:93:66:57:d3:f3:0c:c5:a3:3b:57:18:d3:3f:c5:ee:ee:
         0e:fb:b3:7b:5b:e6:3b:c4:91:27:7e:22:db:cd:ff:8b:40:9c:
         27:ba:2d:48:63:ae:38:f1:7f:90:88:92:1d:9e:f4:88:82:3b:
         26:1d:ab:a4:23:76:5c:1f:3e:59:95:c2:32:9f:52:25:b3:64:
         38:78:84:b1:0a:fa:75:2f:23:c7:de:fe:ac:c5:34:0b:9e:b6:
         4b:5e:19:3a:25:71:28:f6:61:d6:bc:c7:d7:7a:f4:37:7c:43:
         a8:b5:83:6b:01:c1:99:c9:5c:9e:fa:4c:ed:13:ac:b8:ff:1a:
         4c:1c:00:ec:ed:70:da:ed:be:b6:af:29:48:2c:38:42:22:13:
         4d:b9:91:29:65:86:af:a0:26:55:98:e2:32:f9:a2:77:f1:f3:
         7f:c1:32:61:e6:15:0b:21:8f:28:01:fa:fb:55:bf:8b:0c:4b:
         07:87:dc:57:c1:d7:a3:1b:79:04:b5:57:c0:04:fb:00:6c:b6:
         48:bf:65:91:9d:d0:df:43:06:bc:38:93:94:bb:30:94:85:cd:
         fe:67:35:c3:0e:1b:ea:d4:73:18:1a:f6:72:fe:f2:52:82:7e:
         ee:88:d8:c9:b9:eb:ea:c4:cc:df:8e:e4:61:f7:b1:9d:cd:d9:
         8a:1f:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:33 2025 by rpki-client