Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File:                     rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier:          QfQIVaxd/h84bSzPYGMskYlMtmFFV84tifqXoHEoq+I=
Subject key identifier:   0A:6C:92:F3:17:CC:FF:6E:A9:5F:95:98:86:EA:39:A6:D4:78:3A:D1
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer:       /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial:       0197B70F40973ABF57D473AB5D71F2A3C8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 15:01:59 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:59 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:59 +0000
Files and hashes:         1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=)
                          2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: qLEoK2oSOMO8BHe5nTiT/ZHF66oY0eqpbz7azHvgOUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:40:97:3a:bf:57:d4:73:ab:5d:71:f2:a3:c8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
        Validity
            Not Before: Jun 28 15:01:59 2025 GMT
            Not After : Jun 29 15:01:59 2025 GMT
        Subject: CN=0a6c92f317ccff6ea95f959886ea39a6d4783ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:ea:70:01:8c:f8:6f:24:70:0c:c1:77:f1:
                    76:d4:c8:46:05:98:c6:e8:1d:10:bb:27:1e:f3:61:
                    8f:df:fe:7e:95:9c:ae:56:78:ce:cb:3e:df:ca:84:
                    66:24:9a:8c:bd:28:0d:f6:14:8e:77:ca:7f:ff:6f:
                    ba:03:76:00:0f:0c:ff:0e:6c:58:47:b4:4d:24:3d:
                    c4:e9:a9:9e:92:6b:e3:27:5f:cf:66:0d:d0:f7:d4:
                    7f:da:31:f2:06:8e:14:72:84:d8:40:b9:0b:ab:6d:
                    27:bd:d4:66:34:43:03:4f:fd:a7:15:68:ab:6a:2b:
                    0e:bc:b5:dd:d9:77:fa:4b:06:a5:03:25:24:ff:d4:
                    7e:e6:13:e9:66:f7:79:fb:b5:66:18:93:77:e9:5d:
                    ef:8c:65:33:9d:ad:f1:47:e3:6a:68:57:8a:6a:e4:
                    9f:0c:b9:14:2f:ea:d8:d3:4c:6a:e1:e1:c7:30:34:
                    a5:0d:e6:ca:04:df:d6:17:43:53:0a:21:4d:cc:07:
                    d2:c1:ce:e5:7d:18:1b:8a:11:d9:01:d2:5f:56:25:
                    78:88:5e:c6:9e:b4:8c:33:21:3a:95:71:3c:14:d2:
                    d2:fe:7c:63:69:c4:34:c4:bc:f8:c4:95:43:70:d5:
                    b9:35:6d:9f:b6:fe:e9:18:8c:93:5c:23:f7:d5:37:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6C:92:F3:17:CC:FF:6E:A9:5F:95:98:86:EA:39:A6:D4:78:3A:D1
            X509v3 Authority Key Identifier:
                keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fb:f8:95:b4:9b:d5:f1:07:0b:62:47:13:af:64:30:d3:37:
         ad:7d:02:fb:74:4d:59:0c:c0:35:57:93:f7:30:77:b1:a7:4a:
         1b:eb:1b:f1:c0:87:41:0d:ac:aa:db:91:12:da:27:69:7d:7b:
         e7:f3:88:24:dd:4d:e0:b8:9e:98:61:8b:9b:37:f0:64:c2:95:
         89:be:dd:da:29:83:d7:a3:f8:46:52:17:34:2b:25:61:d9:d6:
         95:59:32:8a:4f:9e:8c:a1:4a:0f:cc:ee:78:e9:3a:fa:51:af:
         15:44:30:20:88:c5:54:8c:60:90:09:fc:b1:3a:6d:3a:8f:f7:
         01:ac:ef:58:f6:57:07:2a:b7:0e:c5:43:b5:77:33:8d:d0:a5:
         a9:7f:f9:0b:03:cb:b4:93:3d:73:36:36:bd:36:70:21:38:d5:
         ab:e9:18:d4:a5:e9:b3:04:c3:dc:5d:7d:36:38:c5:f1:48:7d:
         d3:85:89:1b:f2:88:f5:ca:7e:08:d7:63:cb:ed:d8:5b:6f:b0:
         cf:98:d2:be:0d:1a:4d:24:da:7a:5e:b3:2b:c5:55:75:b4:03:
         a3:e2:14:28:58:cc:38:39:78:6c:07:d0:82:43:64:cd:6e:ee:
         06:77:54:fe:f6:c9:24:e0:82:9a:08:2a:cd:4d:01:74:c1:39:
         25:62:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:13 2025 by rpki-client