Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File:                     0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier:          hos5nq+ogQv6WnAsrbtJaYMpKNShAtXzY5a+u8LaoXI=
Subject key identifier:   6B:13:5E:D6:21:DD:99:1C:F8:3C:65:48:62:B6:91:04:D7:9E:F5:35
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       0197B88F42C74B47C0BAD9815DEC2C601195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:25 +0000
Files and hashes:         1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: RHBaa24utuo3sM/KJNPqeQz5aDiwrAaKxKaCvMo2jBA=)
                          2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:42:c7:4b:47:c0:ba:d9:81:5d:ec:2c:60:11:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: Jun 28 22:01:25 2025 GMT
            Not After : Jun 29 22:01:25 2025 GMT
        Subject: CN=6b135ed621dd991cf83c654862b69104d79ef535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:5e:55:0f:ca:6a:14:e5:59:65:87:ea:bf:
                    1e:b4:4a:c3:50:d4:8e:c3:a4:43:64:5c:fa:69:17:
                    07:61:4e:b1:3a:f0:ba:f5:d7:c1:91:d7:f8:85:c2:
                    87:29:80:58:13:26:27:94:52:b2:71:f7:0c:25:76:
                    36:89:8f:7f:81:f8:75:8a:ca:62:68:3f:23:66:87:
                    cd:97:c2:fe:d5:11:8d:be:e3:c1:8f:18:ef:a4:38:
                    e8:f0:b5:eb:3f:8b:eb:e6:58:94:cf:90:1f:20:d6:
                    c5:46:ae:e3:6d:74:f7:7a:06:2a:17:19:cc:5c:51:
                    7c:5a:ff:82:26:e5:91:39:24:b1:79:53:ed:8f:73:
                    fa:34:f6:60:fb:ca:03:46:dc:72:ea:11:ed:1e:cd:
                    34:3f:ae:7d:5e:cd:14:85:67:5e:c0:ba:65:cd:42:
                    3a:d7:5e:ad:a7:ff:d8:9d:c6:73:7d:be:69:ac:f7:
                    62:fb:03:72:51:d4:a7:85:07:ce:26:dc:c3:d8:96:
                    0a:aa:67:af:bf:73:12:0c:e4:04:be:22:3b:de:57:
                    60:83:59:bf:99:40:a9:a4:8c:0e:51:ef:c0:33:b1:
                    02:dd:2e:7d:3d:21:d8:29:11:3a:00:ec:7f:b0:51:
                    ef:14:39:56:f6:d4:b5:30:a5:ad:4c:d1:60:ef:da:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:13:5E:D6:21:DD:99:1C:F8:3C:65:48:62:B6:91:04:D7:9E:F5:35
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:e4:d9:f2:12:7b:3c:d6:42:4f:18:e2:b2:c4:08:3a:8d:
         3b:a4:a6:a0:8d:19:ee:de:bd:7e:77:36:40:38:88:e4:ac:ac:
         87:73:7b:93:1c:98:ac:f4:71:b6:b3:41:bf:5b:db:84:da:41:
         ec:15:d4:78:e1:c3:40:1e:92:7a:16:01:0c:ac:b1:d8:a3:82:
         8c:ee:19:c4:e5:1b:b6:6c:b7:16:b9:7e:e0:a5:c2:97:cd:67:
         1d:fd:26:35:0f:5b:20:80:5a:a1:b1:02:d2:e1:fd:25:5b:ee:
         ce:70:21:7c:a3:2f:f8:f1:e7:7e:b9:bd:1c:0b:d8:6a:3c:8e:
         07:d2:54:e2:cf:43:fa:e1:ba:c4:46:ee:27:09:16:8f:a8:28:
         93:98:1d:38:f6:e8:8b:68:cd:3b:0c:7c:9d:71:7e:02:d0:d8:
         f8:c6:7e:bf:70:98:2d:d8:79:a4:78:b1:9f:1b:fd:92:aa:6b:
         a1:05:d4:63:a5:37:01:1f:d7:f4:96:de:e8:7d:63:6c:5c:e0:
         18:f9:b0:1a:31:1c:5a:87:41:4a:89:4a:b4:20:8d:db:bb:98:
         6e:a4:7d:60:15:d3:63:f7:db:0f:22:2f:60:7c:4f:87:86:df:
         c6:33:c4:2e:c8:2e:5f:bf:91:32:44:e3:2f:66:30:cd:43:1c:
         f0:f7:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:32 2025 by rpki-client