Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
File:                     FShvAiXBQdlYV_50ZGlJ513Zbyg.mft (raw, json)
Hash identifier:          foLN6zMKEvZCMv1kGpbCMRR4PKX/gtdEp/6jpAUglVI=
Subject key identifier:   8C:39:2E:C4:B5:1B:57:10:F4:F8:58:55:5F:EF:4A:42:57:67:A4:65
Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
Certificate issuer:       /CN=15286f0225c141d95857fe74646949e75dd96f28
Certificate serial:       0197B77CDEF1EB3E48223F84356B8E204CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 17:01:43 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:43 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:43 +0000
Files and hashes:         1: BmXBWLA9_6SuRnMhbs95EZUkezI.roa (hash: 1Lg3r/teD74lzp5Bd3F8aEAT8tvLCJF4h8NvTRLICRE=)
                          2: DqL2Iz-nfiZFz9O_JLFZ1u0upXo.roa (hash: IluKRrKBF5sjHfDOuWCJtjWy7NTUF/LiNuEDUpQYIec=)
                          3: FShvAiXBQdlYV_50ZGlJ513Zbyg.crl (hash: EBNVgKTIxJsWkjZhcFskZbTO62i8SrWrtBH1kjfxAIM=)
                          4: Mr0yh9Idod-bEGR9cL8Ist_Jj4A.roa (hash: 5Ujre3KMVIzM/Fx6KHgseWX+SO9fZ/nChf3q7rvn980=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:de:f1:eb:3e:48:22:3f:84:35:6b:8e:20:4c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28
        Validity
            Not Before: Jun 28 17:01:43 2025 GMT
            Not After : Jun 29 17:01:43 2025 GMT
        Subject: CN=8c392ec4b51b5710f4f858555fef4a425767a465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:02:86:0a:07:61:de:49:f9:91:6f:96:9e:
                    e3:05:94:76:fa:ea:32:db:34:58:9d:7b:1d:af:f5:
                    07:d5:53:df:50:83:ac:03:a2:10:a9:98:a1:01:e2:
                    aa:90:59:dc:9b:02:e9:18:63:26:f1:39:0c:ef:dc:
                    76:0d:78:ea:37:86:4e:18:60:7b:92:7e:c8:9d:fa:
                    e2:ed:21:19:84:03:a0:ed:2b:c7:24:cd:3f:d7:4a:
                    ff:e2:33:c9:b4:8a:34:05:91:ec:8c:5a:7e:8d:ac:
                    dc:7f:7b:50:7b:db:b3:05:4e:74:e1:75:c4:2f:e2:
                    c0:5c:bd:48:bc:a5:97:36:a6:5e:92:5b:18:f5:5c:
                    d2:07:f6:9c:0e:59:d1:41:8c:3b:41:7b:9a:b6:8f:
                    98:e6:25:34:77:4a:c0:d7:8a:3c:65:68:2f:4f:eb:
                    bb:8d:24:fd:83:b7:6c:e2:4e:47:df:b3:bd:00:2d:
                    0f:c9:c8:96:1f:1f:a8:43:3a:1e:ee:0b:d1:dd:89:
                    6e:a8:41:88:e8:9d:97:bd:ca:b6:d5:40:33:6c:5a:
                    ca:aa:1f:ba:91:d2:60:b0:bf:f7:13:12:86:42:52:
                    fc:17:02:d3:54:14:66:8b:62:a3:96:e2:ae:52:8c:
                    6d:56:23:68:38:e7:78:e2:a2:65:45:ab:64:3f:50:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:39:2E:C4:B5:1B:57:10:F4:F8:58:55:5F:EF:4A:42:57:67:A4:65
            X509v3 Authority Key Identifier:
                keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d2:42:ab:24:87:20:42:57:2e:20:de:de:56:95:09:2c:a8:
         d3:d0:15:81:d7:69:65:da:36:1c:f9:c3:1e:22:bd:9c:cb:c3:
         c9:62:1b:20:69:7d:37:62:c0:50:84:cd:8a:0d:67:32:3d:ad:
         40:00:44:f8:99:e9:2a:58:3a:d9:fd:b4:d8:30:6b:8a:8f:8e:
         fa:a0:b7:14:05:ff:a7:a2:7e:b8:ed:90:eb:ba:6f:45:78:df:
         64:76:f9:dc:29:e0:66:b7:8f:0f:7b:56:b9:1d:04:f6:fe:79:
         80:74:21:ad:8a:db:10:c6:de:98:7a:3d:ac:8a:78:33:b9:64:
         45:7b:40:ce:0f:bc:f2:1b:96:e9:84:38:c6:29:6e:10:d7:d6:
         5a:89:52:7a:3e:eb:35:8f:79:b3:15:17:44:a7:38:7f:26:cf:
         93:05:ca:2e:e1:0d:ef:a7:22:1f:fe:84:98:62:c6:a1:fe:d2:
         40:c2:58:e7:83:a2:94:b3:74:3f:ba:ac:04:f5:0b:de:f9:6f:
         e5:9c:d6:90:7c:78:ee:58:9f:82:54:1d:03:88:dd:5a:9a:84:
         76:23:fa:e5:b8:da:ed:a3:76:4d:ff:e7:da:a7:5f:3e:c0:7b:
         d5:ae:4f:ef:0a:59:5a:56:2f:c7:5c:d1:5c:f7:45:a6:3e:6a:
         a7:e2:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:51 2025 by rpki-client