Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
File:                     plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json)
Hash identifier:          FqdZSD1BEk3jJKDsYhwGTpqwqlJQ+sLslRtw/AEwcbg=
Subject key identifier:   F7:E1:90:20:6D:A1:BB:99:F0:78:34:01:0A:41:9A:F0:BC:A9:34:98
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       0197B82158489EEE0BCBB80D071338E85BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
Manifest number:          15C1
Signing time:             Sat 28 Jun 2025 20:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:22 +0000
Files and hashes:         1: 2kqVVML4J6p32S1IZ9ese8rrNA8.roa (hash: Z5t0NXFzD5/SVB5g4VKI0FOYHuxiI1pejsxk/eO8RUY=)
                          2: 7ICukJCno7wPTI4Opav3OulQGYc.roa (hash: PA3kdCy1zhkZxeXYzpSwNS8Lc6gO1aAMaHcDwAB/zlk=)
                          3: FxcmiLw90HwD6v-zIS8fyho2YJk.roa (hash: dVrudewN+D6RoriyTNX+xlGTNvGmJTbMWvHDD/OWxyw=)
                          4: OEu5ipvpOLx1mjS_wILLKGz31L8.roa (hash: Q2sxz01wDrr3ZAHG0Y04l4+NHZqPRdGf0GS6aM12Hm0=)
                          5: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: Pmn2/k076D1/lwuhluG7EGHs3eFVmaQyEmVb+XGT3Lg=)
                          6: tRPDFQwkqeY70X00aJumJ-RrQBw.roa (hash: xE1IIp9t6Le0FK50+hsN7HGx6bGGBI6DRxHK2qYkXVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:58:48:9e:ee:0b:cb:b8:0d:07:13:38:e8:5b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Jun 28 20:01:22 2025 GMT
            Not After : Jun 29 20:01:22 2025 GMT
        Subject: CN=f7e190206da1bb99f07834010a419af0bca93498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:e5:bb:15:b7:ce:fd:e2:04:25:f9:e8:ea:
                    ae:8c:48:e0:26:23:01:0d:1e:44:e2:fb:79:cc:8c:
                    03:14:13:d0:be:ad:67:a3:d2:15:9f:c1:7d:00:b5:
                    4b:01:10:a4:85:05:67:87:eb:63:c2:5c:c1:52:7c:
                    ea:2a:be:b2:c1:f4:d7:6e:7a:1b:1a:f7:83:75:fb:
                    0e:29:7f:a8:e3:23:8f:ee:51:d9:c5:78:a2:61:bc:
                    f4:51:02:88:e5:33:c1:ac:11:ce:57:40:e9:ef:e8:
                    73:18:c2:44:6d:43:0a:54:a2:37:58:eb:4a:ab:56:
                    0f:20:3c:ab:f7:4e:e5:31:e4:8b:f5:f1:cb:61:81:
                    7c:21:ce:8a:63:56:18:d8:b1:92:1e:ef:81:3a:20:
                    98:af:cd:de:d6:a6:31:ad:59:6a:9f:23:e2:73:de:
                    fb:f2:64:19:cc:56:66:22:bb:38:d2:10:a0:77:a5:
                    63:46:16:25:d7:11:63:79:b0:80:d7:fc:5c:f4:fa:
                    07:fb:47:2d:8c:47:fb:4c:ae:48:24:57:71:e7:72:
                    59:15:dc:92:ac:0e:ce:94:ee:33:80:b2:4f:7e:94:
                    5f:31:29:bf:3d:7b:98:96:65:bf:0e:1a:23:c6:08:
                    42:92:c1:3f:5d:24:c5:bd:69:99:db:b1:a6:0e:a9:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E1:90:20:6D:A1:BB:99:F0:78:34:01:0A:41:9A:F0:BC:A9:34:98
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:4c:98:fb:9a:08:49:bd:6f:f8:eb:a1:fe:c5:8c:75:fd:
         92:28:d6:de:a9:86:65:f3:39:4a:f3:b4:ce:54:40:5f:83:2a:
         74:96:d4:ef:e5:1a:71:8c:d9:c4:ea:63:89:fa:e3:02:91:90:
         06:61:30:28:49:34:41:c9:2f:e1:c2:56:9f:3f:f7:6d:c0:a4:
         8e:48:d6:37:9a:bd:58:54:94:ee:24:81:51:03:9c:9e:6e:44:
         4d:12:56:05:5f:b8:5e:14:a7:17:d1:0a:6f:9d:8b:57:6d:4a:
         09:c0:27:59:84:3e:27:d5:20:f3:04:b2:7f:a4:48:94:be:f5:
         d6:a9:82:45:24:6e:2f:b0:4a:ef:72:26:72:3f:1e:58:4a:3b:
         29:3c:73:c5:e6:d4:06:5d:96:c6:b8:e8:9d:bf:2a:44:f3:a3:
         35:c7:5e:44:4c:93:47:cc:7d:4f:0e:6b:42:46:2b:19:3d:32:
         e1:ec:40:3c:22:85:96:46:8a:63:4a:2c:0b:b6:f6:75:b2:cc:
         35:56:43:a5:4f:fc:11:a4:27:6d:a9:ff:89:ce:30:93:d7:c6:
         00:9e:68:28:1b:49:66:7c:78:4a:92:4b:1c:8b:b2:40:17:6f:
         f7:0c:d6:4d:3f:11:bf:84:d0:a7:f0:9f:5d:dd:4e:f5:fa:e7:
         71:ff:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:18 2025 by rpki-client