Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File:                     x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier:          cEto3BcOPcRV4wxT0s37cR/XezMkB6iPRXs9wlczSBw=
Subject key identifier:   72:75:8F:DD:0D:04:62:1D:C8:31:04:18:BB:58:79:85:DC:23:BD:49
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer:       /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial:       0197B6A04092C30DE4E16663F0AC1447A0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:44 +0000
Files and hashes:         1: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (hash: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=)
                          2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: OfwaR/OTnh9AZe+9JUyRIDOFZ9dir1BbBDbuYtxAyyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:40:92:c3:0d:e4:e1:66:63:f0:ac:14:47:a0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
        Validity
            Not Before: Jun 28 13:00:44 2025 GMT
            Not After : Jun 29 13:00:44 2025 GMT
        Subject: CN=72758fdd0d04621dc8310418bb587985dc23bd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e2:bb:57:14:46:94:39:83:d0:1e:37:bf:ae:
                    15:90:24:1d:22:d2:89:b5:c6:7a:c9:49:b2:df:61:
                    64:73:df:5b:f0:4c:60:bf:07:80:a7:b9:5d:a3:c0:
                    41:6c:dd:8b:12:0f:b1:9b:ef:35:a7:6f:ca:94:31:
                    d4:bf:12:46:b8:3c:e4:64:4e:88:44:cf:2c:78:7e:
                    e9:0d:cb:e2:3b:8d:a3:ad:f3:49:b6:fc:ad:be:55:
                    8d:24:d1:f1:9c:02:35:93:66:36:f9:c3:4c:df:c6:
                    48:0e:d1:c2:64:d2:21:e3:2e:58:9d:0c:ac:d4:15:
                    ce:5d:79:6b:07:70:75:7a:83:9b:04:2b:4f:eb:b2:
                    ec:d2:5e:0e:8e:40:ff:73:61:40:6b:2b:7a:60:d6:
                    07:5d:8d:e2:86:75:fe:e7:43:c5:a3:1f:56:79:7f:
                    b5:15:e4:89:d7:8d:5e:04:18:b5:5a:9b:ec:0c:d1:
                    5c:bd:8e:0f:0d:60:6f:43:8b:13:36:92:74:ce:88:
                    87:f3:27:64:f3:f0:69:dd:f7:fa:ba:0d:0b:aa:ac:
                    1c:fd:2e:ab:10:89:3a:72:27:7f:a0:dc:af:2a:38:
                    90:64:8b:3f:b0:2b:e8:e0:20:e7:ac:68:76:eb:64:
                    91:5a:4c:fa:e5:0c:51:a0:95:c1:bb:bd:82:c2:59:
                    ea:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:8F:DD:0D:04:62:1D:C8:31:04:18:BB:58:79:85:DC:23:BD:49
            X509v3 Authority Key Identifier:
                keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:91:9b:fe:ac:a7:3b:4b:5e:33:0c:ea:b5:42:27:d7:0b:5b:
         e5:98:76:cc:56:d4:30:ab:75:f1:d2:59:3b:b1:f9:59:8a:38:
         0a:dc:8c:18:11:35:91:f3:4c:f3:07:e3:64:36:8b:1b:db:62:
         e7:13:9f:b9:b9:38:70:a0:47:05:99:95:26:9c:17:65:d3:3d:
         d3:1b:d8:7a:74:1f:1e:69:04:91:a8:81:6f:4a:f0:37:1a:a2:
         0c:95:dc:52:49:f9:f4:95:f1:fa:0b:94:41:56:24:d7:53:a0:
         08:05:09:b6:62:db:4a:d8:23:79:e9:cb:d0:69:47:85:7b:03:
         23:60:ca:01:ad:f7:bb:79:30:3a:b8:bc:bd:ab:3e:26:b3:18:
         b6:5a:32:e9:38:7f:12:9a:9c:4f:52:47:7f:2b:48:f1:ae:1a:
         07:4b:ad:52:ab:6b:84:3c:70:40:bd:cc:8f:b7:4e:0a:67:2a:
         1f:9d:cd:ab:9f:8c:6a:f6:5d:a2:a0:21:d1:aa:15:36:5d:59:
         9e:8f:43:df:b5:84:ee:f3:d6:1f:40:4d:fa:4f:cf:d5:87:71:
         0d:4b:44:94:2d:5d:8f:af:81:50:43:00:aa:9d:94:3c:13:a2:
         76:7d:45:3b:17:36:a7:dc:9e:44:f1:e0:15:c6:ba:b1:89:07:
         a7:b9:ed:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:24 2025 by rpki-client