Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File:                     x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier:          SxQ+qhsxi4v0EBkbv3f9y1Bi1VJvRtT93o+0yG7ajyk=
Subject key identifier:   9E:BB:B4:4F:3A:B0:27:00:EB:DC:45:9E:C2:02:3D:CB:AE:2F:89:60
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer:       /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial:       0197B6D76BF250A8284B42A838C6FAD46893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 14:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:00 +0000
Files and hashes:         1: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: KPmUcYBWoO6MTQi0agMQ5AlhhzkWTBXvu+3DLxHybNc=)
                          2: yrgIBtaF_Rl3-KfRiLgUYar-yd0.roa (hash: T90C90e5Of8IaOpnooa9JcWxTvLM03hzqcILUaCvjno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:6b:f2:50:a8:28:4b:42:a8:38:c6:fa:d4:68:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
        Validity
            Not Before: Jun 28 14:01:00 2025 GMT
            Not After : Jun 29 14:01:00 2025 GMT
        Subject: CN=9ebbb44f3ab02700ebdc459ec2023dcbae2f8960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:70:32:d9:38:46:a8:65:58:3c:12:5a:cd:d0:
                    f4:ea:45:2d:2c:f2:bd:df:9d:15:5f:10:3f:6e:f4:
                    a5:13:fb:84:d4:86:6c:a6:e2:14:78:64:09:60:c8:
                    d3:b4:e8:52:0f:8e:aa:a3:d7:a8:19:b7:72:c2:9d:
                    d2:29:cd:a6:6a:ad:1c:d5:be:90:a9:1f:83:94:7e:
                    cb:48:84:5a:a1:c3:74:15:1e:71:b2:b4:8a:22:ae:
                    76:6c:5b:16:63:3c:34:2c:bb:de:50:17:fe:1f:42:
                    05:d2:82:38:71:d7:62:5a:b7:d3:24:aa:c7:10:05:
                    ce:a1:d6:82:f7:9f:49:d2:59:db:c5:ca:ec:ee:d7:
                    59:b1:77:c3:b3:2a:cc:f6:c2:fc:d6:40:48:9d:e2:
                    88:74:4d:c4:0b:7e:ae:88:39:2e:f3:bc:5e:55:26:
                    21:61:60:b8:8e:b9:ad:d3:6f:9e:49:50:b4:78:89:
                    0c:84:b2:45:f8:5a:d7:cc:be:32:d0:70:74:d6:7f:
                    18:bd:b1:7e:ab:32:91:c9:43:03:ee:98:31:21:f0:
                    bc:da:c1:f0:22:48:1b:32:0a:22:fe:31:c0:17:b0:
                    3c:0d:89:a6:70:b4:a6:5e:a2:d0:65:6e:1f:eb:a6:
                    5d:91:31:bd:1d:e1:52:c3:2a:f1:29:7e:46:e1:a6:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:B4:4F:3A:B0:27:00:EB:DC:45:9E:C2:02:3D:CB:AE:2F:89:60
            X509v3 Authority Key Identifier:
                keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:26:22:3e:c2:d0:06:c7:96:27:07:bf:20:48:ec:1c:09:1c:
         b9:ff:53:df:6a:63:c4:75:fc:bc:8d:a6:fd:ce:e0:61:a8:15:
         33:54:32:ea:34:91:f9:e7:c5:f3:40:d5:96:22:ca:25:ea:22:
         30:aa:6d:d6:61:3e:9d:07:77:13:1e:d0:fc:4a:81:62:b7:b3:
         7b:78:94:01:b9:79:1f:f6:8b:0d:0f:89:f8:4a:bb:ed:26:6c:
         dc:95:8a:a8:62:57:01:b6:ef:03:24:bf:d3:66:4b:ba:bd:8a:
         c9:a1:b4:4d:ba:aa:f4:5d:da:2a:45:b9:dd:a9:56:01:18:56:
         84:b9:17:83:60:5a:4e:d6:a3:8a:26:02:77:f0:49:fe:ef:23:
         bb:64:a5:24:d4:a6:f9:44:c7:c5:62:a9:ac:7b:9e:c9:63:15:
         80:cd:05:04:a4:8f:cb:86:08:79:b4:b3:2d:64:12:41:1e:4e:
         a2:07:6c:22:8e:c7:fe:2a:fa:9a:9d:0c:25:f2:50:3b:dc:47:
         37:10:54:f0:18:1c:a9:93:04:b4:77:5c:92:61:44:80:67:a6:
         8f:5e:98:24:a9:9f:ec:28:9c:cb:5d:4d:cb:63:5c:10:ce:73:
         f3:cc:83:8b:27:54:d0:23:16:d0:e4:d4:30:1f:b8:32:75:54:
         3c:53:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:23 2025 by rpki-client