Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          ZjA/no728k9IOIzcR6dp/PjldXRgZxI/2D856A8Ni8g=
Subject key identifier:   C3:5D:EB:97:58:E2:4E:C3:6D:D3:87:E4:51:91:49:BF:A4:48:88:D3
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       0197B6D7336DBC88169CE56F18C6246A40C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 14:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:46 +0000
Files and hashes:         1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
                          2: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: kKZmKskRfip9icCO7aEgqvHQEdCQ5TkXj+NOiblwr/U=)
                          3: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
                          4: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
                          5: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
                          6: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
                          7: w1Jkwc30Zm1-u5PRd54_RLWNBBE.roa (hash: b//DfWhivHZOy3olewCUbwfnWte1KqYiB/RE4sezwI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:33:6d:bc:88:16:9c:e5:6f:18:c6:24:6a:40:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Jun 28 14:00:46 2025 GMT
            Not After : Jun 29 14:00:46 2025 GMT
        Subject: CN=c35deb9758e24ec36dd387e4519149bfa44888d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:0a:c0:01:46:ea:28:44:fe:bd:cb:a1:07:
                    99:32:0b:51:57:95:f0:69:9d:11:a8:86:bc:3d:f7:
                    a4:58:98:61:26:70:c5:a9:d0:2c:5a:72:8b:df:a3:
                    23:8f:a3:33:c6:e4:da:6f:22:a4:2a:8b:00:85:56:
                    7f:1c:5d:f6:01:f7:3e:03:e7:a7:20:e5:b9:4d:97:
                    64:83:ed:2c:65:22:56:af:5e:3e:b2:66:31:1b:bf:
                    48:37:53:5f:28:15:4f:5e:af:9d:26:ab:0a:4a:74:
                    e0:76:a0:62:44:93:7f:31:e0:75:84:41:89:47:c0:
                    cd:9d:99:a1:fc:f6:49:0d:ac:22:de:fa:e0:70:cb:
                    07:83:72:92:d8:96:15:77:cb:c0:94:3f:db:2a:85:
                    a6:8d:9a:4d:bb:fd:cd:de:96:91:f5:d4:36:f3:fd:
                    6c:1e:8c:f2:f6:28:90:a1:eb:6b:7a:fe:e1:23:3d:
                    c5:7f:b3:6c:0d:62:1b:3d:67:f0:ae:b4:93:ca:ab:
                    9f:c9:41:be:c6:af:fd:c3:a0:fd:6a:aa:32:46:c2:
                    c1:d5:23:72:f0:6f:58:e4:6c:85:5e:ce:a4:59:69:
                    6b:3c:30:a7:16:47:ea:99:7f:b8:33:c5:ca:af:5a:
                    b6:67:e5:2a:5c:34:9b:75:b7:36:f7:02:23:b9:93:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5D:EB:97:58:E2:4E:C3:6D:D3:87:E4:51:91:49:BF:A4:48:88:D3
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:e5:6f:9a:40:d2:8b:d3:6c:13:bb:5e:43:67:ef:ff:a0:
         56:b9:3b:3a:4d:ab:93:c1:5b:e4:5b:6f:f9:02:ee:7b:fa:94:
         18:02:32:b5:75:c1:42:fd:bc:ac:ef:8c:0d:32:ac:a2:b8:18:
         fe:12:07:23:66:6c:46:4e:6e:c5:8c:5a:23:f5:d5:6b:2f:e8:
         b0:34:43:a4:e6:bb:6e:de:09:ef:69:7a:52:e8:df:d7:2a:34:
         6a:32:c0:18:ba:3c:c4:a2:ff:94:9b:39:95:b6:ea:97:54:af:
         0f:4f:36:42:de:43:5d:59:41:d1:8a:08:88:a5:5f:6a:47:85:
         d3:7f:41:27:2c:f7:a2:88:6c:4e:8b:48:fb:a4:6d:e2:3a:84:
         3a:0a:db:2f:01:4c:e9:67:ab:cf:48:c2:88:d5:48:70:9f:94:
         1e:92:11:8f:d3:4b:a0:9a:fd:11:36:5f:fc:11:97:51:f4:90:
         94:59:8e:bd:51:e9:e9:0c:7e:8b:9f:18:72:36:26:21:ca:bf:
         ea:91:8e:69:1e:61:68:be:8b:ea:49:9b:a9:93:84:12:09:59:
         74:50:53:2c:ae:18:f4:36:8a:9f:10:98:b4:44:d9:f2:04:6e:
         b5:d8:54:c6:46:42:6f:24:d2:86:47:ef:c3:f4:f8:0c:b7:b8:
         7c:36:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:06 2025 by rpki-client