Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File:                     1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier:          48cTxJusZHm+n/7/yWmGU5D0uhwUby7cmCORDSo5Kow=
Subject key identifier:   E2:C3:40:72:C2:40:82:27:60:AB:AC:C5:D4:C0:8D:02:E0:44:ED:B9
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       0197B6A03850AA560716C2791633A4770233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:00:42 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:42 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:42 +0000
Files and hashes:         1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: vruieJeD76RP57W90I0ZjfxaD6xa4jx+/vAEPdFURZ4=)
                          2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:38:50:aa:56:07:16:c2:79:16:33:a4:77:02:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Jun 28 13:00:42 2025 GMT
            Not After : Jun 29 13:00:42 2025 GMT
        Subject: CN=e2c34072c240822760abacc5d4c08d02e044edb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:cc:84:c8:f5:e4:7d:10:77:50:3b:fb:b5:
                    e5:0c:e6:77:8c:b0:b8:f6:99:23:2b:4b:95:b8:36:
                    68:76:fd:4d:a3:35:86:ff:60:93:46:85:c5:f7:2a:
                    2c:52:41:f6:08:4c:27:b9:78:05:5b:f5:eb:e8:19:
                    6c:23:8f:20:68:6b:68:6e:24:16:1e:7a:d5:64:8b:
                    fb:5b:f1:16:5d:28:1e:0f:62:d0:32:71:b1:87:5d:
                    fa:9c:66:c7:5f:da:c8:97:b5:97:e9:74:8a:5c:a2:
                    4a:e5:66:72:d5:f8:df:66:a3:8f:cb:66:67:8d:c7:
                    11:38:a1:bc:37:c1:a9:8a:94:a0:6e:86:c2:3b:10:
                    12:bb:aa:c6:81:44:49:e5:f9:03:c1:ab:cd:67:5f:
                    5a:6a:a6:99:9b:15:bd:f7:81:b5:43:5d:2d:45:16:
                    7b:27:4f:21:b3:e7:53:e4:06:66:12:ac:c4:d8:d1:
                    2c:a6:5f:ea:0e:01:b7:18:77:68:a6:f1:bd:c9:60:
                    89:b8:e9:de:2f:3a:df:6c:9a:f3:4d:11:87:3b:dc:
                    75:87:09:5e:e4:bd:1e:33:a2:ea:89:45:2e:b0:c0:
                    68:27:41:50:9a:f2:b4:87:17:b3:5c:9e:2e:be:dc:
                    7e:e9:d6:e2:f2:d6:72:69:f7:36:93:47:e9:ab:97:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C3:40:72:C2:40:82:27:60:AB:AC:C5:D4:C0:8D:02:E0:44:ED:B9
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:24:03:bf:5a:cd:a8:a8:5d:08:99:0a:98:48:de:c6:2d:8b:
         51:7f:21:a2:b8:1c:83:d9:e5:54:36:6f:2a:54:9b:89:07:4c:
         a7:f0:d7:66:f9:c1:bb:b9:bd:16:d3:2d:1e:87:b8:95:72:36:
         a9:45:93:c2:3f:b1:d6:1b:61:b9:7c:ff:5f:f7:09:4a:76:c4:
         3e:ca:7b:ec:ca:a5:68:7b:9f:c7:4d:1f:b7:8d:ed:08:e9:5b:
         09:8b:2d:95:2a:0a:c5:42:dc:d6:fd:ee:54:08:48:6c:6c:4e:
         11:09:c1:9b:1a:88:ac:e2:3b:19:df:e7:2e:cc:51:a7:f0:92:
         ca:e3:2f:ab:5b:e1:c3:c7:9d:20:45:96:04:ca:ed:ca:c1:33:
         29:93:ac:a7:67:08:22:41:be:0f:32:64:a7:6b:59:76:99:5d:
         a7:cd:21:11:41:19:a8:93:ff:87:e0:e8:42:8c:70:eb:fb:1d:
         71:67:3d:b7:fd:5f:08:27:0b:88:a6:74:9b:90:c1:4e:3e:52:
         07:50:22:10:59:2c:1e:e9:51:d1:cb:4e:c7:2f:1f:b4:07:0e:
         5d:44:f5:b0:14:05:5e:e7:a1:f2:8f:1e:c1:56:5d:3b:27:87:
         17:0c:83:2e:77:0a:37:9d:59:a7:05:09:70:fd:7a:1c:f3:a6:
         90:ce:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:23 2025 by rpki-client