Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File:                     aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier:          81IjVc0aSrjOwUXHPbPpVtOMx/8Keypn6Tv9/YN4avQ=
Subject key identifier:   52:DB:0F:5C:F6:10:34:C0:FB:FA:D4:30:16:C0:4F:C3:33:E2:93:7C
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer:       /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial:       0197B70F4831979DB31C89666E82D6D69CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 15:02:01 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:01 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:01 +0000
Files and hashes:         1: 6c4mStZuLFdhZBFsXfkgnUT06kQ.roa (hash: 9X0qingJMgYTrqsJkiVxYQdXm9VKJ3coL7dPpBcYOeI=)
                          2: Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa (hash: Dai1lG17fGD9BnTUUlUvQILwXK5E8pX/ztfvO8UR/Sc=)
                          3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: tpQ5nNv2IDez7/UXPRR7urR4Gg+jL1X/jeY2f6dC1As=)
                          4: ygPca0O99w3Q4m6yQX8TO0Whs5s.roa (hash: qvcmTDWYJNgYWiCmf5F1FBjGQvGT5OVUplX4UvYYEFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:48:31:97:9d:b3:1c:89:66:6e:82:d6:d6:9c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
        Validity
            Not Before: Jun 28 15:02:01 2025 GMT
            Not After : Jun 29 15:02:01 2025 GMT
        Subject: CN=52db0f5cf61034c0fbfad43016c04fc333e2937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:e2:31:8e:ae:33:51:93:e1:35:fb:08:83:
                    22:33:2e:8c:e6:63:63:54:f1:3e:6d:6c:2b:9b:9c:
                    c9:19:33:ae:c9:b4:ec:29:2e:2a:81:4d:71:ba:66:
                    ff:fe:e9:e2:a1:bb:d8:3f:49:92:01:6e:40:0c:49:
                    e1:16:da:15:f2:9b:95:ad:bd:35:65:93:c7:13:ac:
                    2a:b1:2d:e4:56:48:2e:69:8a:5a:41:37:df:82:dc:
                    cc:a0:b6:00:e3:dd:38:01:b0:8a:11:c7:c5:a4:c0:
                    0e:db:cf:23:0b:cd:a5:4c:af:46:84:76:a3:42:90:
                    32:1c:fb:e9:d1:cf:07:e6:e7:c3:43:98:d0:1f:a8:
                    dc:be:b3:7a:0b:f6:9b:94:62:b2:66:e8:2e:47:b4:
                    d4:1a:65:c4:10:af:e1:cd:9c:fe:19:cc:22:06:ad:
                    05:28:20:e9:77:89:48:12:ba:96:c2:ab:0e:dd:1e:
                    4c:d6:0a:49:36:72:ea:42:49:69:71:0a:05:b4:14:
                    08:59:94:27:a7:2b:11:21:37:af:18:59:01:82:5d:
                    f1:a7:ed:36:0b:59:d7:bf:c2:dc:35:71:a3:d6:5e:
                    9f:c5:5d:86:f8:64:ed:32:b6:63:8d:e1:2a:86:37:
                    5f:b4:6c:4e:8b:9f:06:9a:d7:55:d2:38:ea:1b:ef:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DB:0F:5C:F6:10:34:C0:FB:FA:D4:30:16:C0:4F:C3:33:E2:93:7C
            X509v3 Authority Key Identifier:
                keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ee:bd:df:c8:53:52:d4:f1:43:85:8a:e6:b3:75:13:46:cd:
         58:e4:1f:27:85:ec:a9:e3:ea:d4:59:72:3b:c4:1e:de:65:2e:
         6d:9b:f9:25:ee:ef:dc:bd:a6:6d:27:78:e7:9e:87:8f:06:45:
         0f:34:9d:87:03:ca:3d:93:fb:09:65:0d:aa:72:0d:52:86:3c:
         95:1f:b1:fb:b3:38:2f:bb:f6:60:bb:f5:5a:f8:5d:21:e5:81:
         3d:e5:36:8a:ba:a8:ee:99:bc:9c:d0:70:e3:fc:94:21:b1:be:
         61:5b:6b:18:00:82:2a:33:c3:59:9e:fa:6b:95:f4:83:6b:3a:
         52:9c:65:f8:46:2f:93:8d:26:0f:d1:49:03:42:6a:12:f7:d8:
         7d:d9:f6:d8:6b:76:a6:e3:e1:ab:58:f7:c4:e6:a3:90:f3:e1:
         90:1b:58:5c:4c:8b:c3:f6:76:e5:37:d8:8a:a0:ed:e6:ef:a7:
         ea:f0:3c:4c:54:87:52:69:77:38:cc:7a:c9:2f:1e:84:3b:1b:
         aa:bd:a1:95:57:66:e4:ec:b9:be:e4:4f:fd:20:43:a5:c6:6a:
         f5:09:05:0f:b1:16:ed:bd:7f:d2:69:cd:38:a4:59:9b:9e:99:
         68:63:52:08:85:ac:22:2d:21:f3:50:66:e6:27:65:b7:93:07:
         28:4b:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:12 2025 by rpki-client