Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File:                     6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier:          R7g4/Lspxo/JGjmTSOOkWWAJwhiMozD+s0ihjD1oj0k=
Subject key identifier:   A6:97:94:EE:3F:B7:BF:73:16:FB:63:08:26:19:43:FE:28:34:68:A3
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer:       /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial:       0197CD282401BB81E86843D21A087C79E3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number:          15C3
Signing time:             Wed 02 Jul 2025 22:00:49 +0000
Manifest this update:     Wed 02 Jul 2025 22:00:49 +0000
Manifest next update:     Thu 03 Jul 2025 22:00:49 +0000
Files and hashes:         1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: cRg+N/RelOyB/MOTeaFROk1lNZGfIRzD+CJSDxS2C/A=)
                          2: XGdgxOrZAEASnwG-E4mJgIZXt9A.roa (hash: r7+Ew2fux06ZFhsm5QtmYCoespwgwuFRQ3Ky/AsDSy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:28:24:01:bb:81:e8:68:43:d2:1a:08:7c:79:e3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
        Validity
            Not Before: Jul  2 22:00:49 2025 GMT
            Not After : Jul  3 22:00:49 2025 GMT
        Subject: CN=a69794ee3fb7bf7316fb6308261943fe283468a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:dc:8b:e6:fb:d1:58:fb:99:a3:f9:53:03:
                    0e:1e:f4:f0:fe:8a:02:d2:be:3f:be:f2:62:4e:07:
                    c4:b6:a5:52:c8:4f:4e:a6:d4:bc:15:a7:67:d9:72:
                    c5:ab:b6:95:2e:e9:44:93:3b:22:af:ec:6d:78:6c:
                    71:9d:9f:99:4c:63:aa:a9:db:04:da:dc:e8:5e:25:
                    6a:fb:06:64:66:35:3c:33:59:97:67:d5:6c:c1:9a:
                    b1:4a:40:c5:48:31:a4:31:b8:3e:29:71:f1:46:d1:
                    b5:2b:7c:6a:ca:c0:87:75:09:7f:1b:98:b8:e3:a0:
                    80:94:9d:91:2e:6e:e0:b3:c8:75:15:5f:43:10:45:
                    73:c7:44:2f:f1:69:d6:bd:ac:78:c5:e4:60:09:2e:
                    08:dd:b6:cd:f8:f0:f3:ae:2f:9b:75:93:01:48:3f:
                    36:f7:49:63:17:3b:46:87:b5:02:6b:15:2a:f9:4d:
                    4a:bf:31:dd:a0:be:87:7f:a8:ba:bb:58:4a:f6:a6:
                    c7:7e:47:ea:93:80:a2:5c:be:2a:e5:9a:6c:8f:54:
                    5b:d8:66:dc:a6:f2:57:8f:aa:38:5c:81:6f:bc:a7:
                    e4:b1:05:dc:64:01:8d:51:92:52:66:a6:5b:c0:9c:
                    f3:83:17:e7:8e:8a:7b:fa:5c:84:75:0d:5a:04:b4:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:97:94:EE:3F:B7:BF:73:16:FB:63:08:26:19:43:FE:28:34:68:A3
            X509v3 Authority Key Identifier:
                keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ea:31:89:71:95:a0:ec:d4:97:1b:08:84:e3:5e:b8:1f:20:
         4a:23:91:08:8e:c7:23:c6:22:25:56:5d:a4:4e:d2:46:40:44:
         e4:e6:b1:d3:73:50:f5:95:30:27:70:05:6e:f7:28:b0:38:ce:
         a5:d1:3a:12:4d:6c:53:1d:2b:5a:a9:5b:7e:e9:06:2f:4e:5f:
         f1:75:fa:2e:9b:f8:85:b0:ad:7c:88:c5:0f:b6:7d:1d:96:68:
         6a:3d:0b:50:41:cf:86:55:5b:0c:f6:93:42:7c:57:b9:ea:84:
         b4:da:1c:4b:18:e3:11:af:af:51:42:5a:85:aa:c8:43:2b:12:
         53:40:a1:d6:76:24:3a:50:49:8e:60:4e:a5:f7:4f:9d:3a:df:
         f2:ea:4f:a7:82:78:98:24:5b:5c:0d:ed:f0:ac:8e:8c:2c:df:
         2f:ab:01:94:3b:85:9b:ab:a4:79:ab:79:a9:bd:53:a6:86:de:
         d6:81:16:a5:d4:08:d4:af:13:95:5b:60:b1:b0:b1:84:c9:ea:
         a9:6b:b1:db:a5:17:f5:c6:b0:d4:28:00:6e:72:d9:c8:c4:c8:
         fd:15:bc:de:c2:03:b7:be:6b:1e:d6:59:b9:34:24:2e:b6:f2:
         cd:e9:05:1d:22:6a:e5:2d:f7:41:4e:67:20:18:41:b1:8d:6e:
         9d:84:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:49:03 2025 by rpki-client