Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          VcY2beoZOuZoKAhXZpzI87svKbQRyX8rkifbGCtiFEI=
Subject key identifier:   03:51:B6:64:E0:A2:C2:5D:3B:EF:74:01:57:EF:0B:98:22:05:B9:5D
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       0197B63280EE789F0D529CC05095D8A4B601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          15B9
Signing time:             Sat 28 Jun 2025 11:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:52 +0000
Files and hashes:         1: CMn2soeES3hR-sK_8HvrSujpCpQ.roa (hash: VTuRr4KfXEripqS9AelciewMmdMPiSyij0Vs8ogbZ90=)
                          2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: X2BovD7Zr1tFHzNgesg1I18up4r8tjJKsINK7pm6zdM=)
                          3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
                          4: Z_2-Zbi4vsdnVpg2d_lnWwbhvN4.roa (hash: 8GDUJ7ZhRwTXBlYLdtF6LAMc571ge2c8D8UbSUf3lg0=)
                          5: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
                          6: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:80:ee:78:9f:0d:52:9c:c0:50:95:d8:a4:b6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Jun 28 11:00:52 2025 GMT
            Not After : Jun 29 11:00:52 2025 GMT
        Subject: CN=0351b664e0a2c25d3bef740157ef0b982205b95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fb:e4:4e:26:80:b2:5c:d1:a8:dc:12:2e:10:
                    55:d2:6a:73:e8:ac:4b:37:4a:73:eb:6a:96:aa:3a:
                    45:d3:7e:44:8f:38:77:94:05:fb:47:d7:b2:8c:c2:
                    13:98:f7:ba:46:4c:7d:0d:1c:b4:a2:2d:cf:28:c5:
                    4d:b4:6d:3d:1c:75:82:6a:87:19:46:a6:1b:56:29:
                    7b:52:dd:b1:48:43:a0:ca:b3:27:bd:cf:af:0b:b7:
                    a8:1a:90:b4:24:29:61:fd:2c:c9:13:87:37:70:2e:
                    51:66:36:f5:82:3a:95:d8:3b:12:04:eb:08:6a:0e:
                    96:8f:96:c1:c5:d4:6b:83:5b:0c:3b:9f:d3:b4:77:
                    03:a4:96:0a:9a:b0:15:3f:82:a9:4f:b2:8d:f0:f4:
                    6e:d4:ce:fe:8b:8e:bf:23:66:1c:11:f1:32:93:eb:
                    39:f5:87:2e:13:ee:5d:73:34:22:af:9f:2f:07:3a:
                    17:89:2d:5c:f2:67:f4:f8:82:55:0b:94:39:8c:8d:
                    e5:bf:ce:e3:15:cd:a4:e3:c0:ff:c4:da:1b:e0:37:
                    a7:fa:e0:32:3e:70:bb:52:76:01:ec:18:4a:bc:24:
                    ed:8c:11:50:36:b4:f8:9b:68:4e:af:02:71:a9:7b:
                    88:45:e6:88:44:cb:3f:e1:21:d4:cf:b9:7e:20:b0:
                    e4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:51:B6:64:E0:A2:C2:5D:3B:EF:74:01:57:EF:0B:98:22:05:B9:5D
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:49:fb:62:71:d7:9c:c6:0f:ca:f0:74:27:50:1b:3d:42:35:
         6c:2d:7b:cd:89:f0:84:21:08:e5:82:fe:ff:4b:02:4d:72:c0:
         fb:56:3b:aa:57:5e:af:90:86:87:8d:f8:5f:65:37:e6:75:6c:
         9f:12:ef:03:bf:ae:5f:8c:e9:0c:64:8c:43:04:09:ef:da:95:
         47:5f:a7:54:3f:cb:d5:1c:d5:73:9b:c9:25:bc:f9:b0:22:bd:
         08:16:ba:a9:d3:11:f7:0d:96:8a:0e:ce:34:50:f1:fe:af:0f:
         78:16:32:ab:bb:c1:ad:2c:8a:42:75:5c:33:9d:29:b9:65:2a:
         d2:de:d5:28:9c:93:3a:ed:69:12:db:60:fe:35:03:f0:9c:7b:
         ab:94:53:a3:cd:ae:4a:e0:42:fa:12:c0:85:59:a2:fc:de:e2:
         d0:80:a2:58:e1:9f:a1:b7:6e:53:99:f4:22:18:ab:53:6e:26:
         af:18:33:56:86:00:8b:b8:ee:e5:34:d0:3b:42:5e:74:e9:68:
         9a:d4:b4:a2:ca:c7:86:bb:c5:1d:5b:af:7c:37:11:43:85:d6:
         90:41:d5:8d:50:04:22:e4:db:ff:26:02:91:8c:e0:17:f9:bf:
         8d:3c:a7:77:80:25:c4:d7:11:e2:99:fd:0d:c9:61:80:24:6d:
         47:06:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:53 2025 by rpki-client