Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          YRikrzc0HGEMpnXZEFJFK7RuB5Ihh4eKd4AxyCG0HFA=
Subject key identifier:   E4:7E:D4:4F:6B:6B:82:33:17:70:1D:26:39:64:FC:F6:C3:8E:BB:27
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       0197C03FE7675DA28418636ECD471F6C9834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          15C0
Signing time:             Mon 30 Jun 2025 09:51:42 +0000
Manifest this update:     Mon 30 Jun 2025 09:51:42 +0000
Manifest next update:     Tue 01 Jul 2025 09:51:42 +0000
Files and hashes:         1: MobINerBVuQmP-SIz5bmUV8BPPo.roa (hash: 6a2BmmDaX86zgOFsxT/j31kuD+dJU0v6H6ycoDKtjU0=)
                          2: UShqGyi6RZRV0Ph4_yVYYleIO40.roa (hash: ugrz3hjzhhiYzWWbWxwCGvT2Anh3/HoqFXI/J0yrilg=)
                          3: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
                          4: aqc9iqNZ3UEyKF66J0Kk63YWrPM.roa (hash: yKjnntu1oUMc6fhZy1ymosOL2rcqCAyyDWtOYLlOhRg=)
                          5: cY9rRxfKetl9JpAQeO01ZRGRSCA.roa (hash: FB37WdBChmPGxH4V77jlN5UscH07BPKuuXE/RDQWhYw=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 24sHSUHX5Y7z8DlyvP/Fdr6wGaRg144hnJiCDzTz+k0=)
                          7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 09:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c0:3f:e7:67:5d:a2:84:18:63:6e:cd:47:1f:6c:98:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Jun 30 09:51:42 2025 GMT
            Not After : Jul  1 09:51:42 2025 GMT
        Subject: CN=e47ed44f6b6b823317701d263964fcf6c38ebb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:21:ee:d2:67:da:d8:62:07:37:b4:a1:55:
                    68:26:5c:26:2d:0b:74:e6:b8:05:ea:ef:a0:6d:22:
                    23:aa:f2:2c:95:2d:ef:77:8a:57:de:e7:ba:a1:b6:
                    eb:86:d2:68:8f:06:85:af:05:a3:cd:3d:99:13:1d:
                    d2:4c:82:0c:51:05:e7:a7:79:d2:4c:ea:d2:a8:5d:
                    e4:ae:94:b4:c3:44:3a:2f:c7:85:97:cb:e8:6c:db:
                    4e:4f:0d:f5:cd:a7:71:35:22:78:63:24:ff:15:1e:
                    fe:2f:0b:d8:a2:ff:13:d2:98:0a:38:1b:03:55:d1:
                    88:ca:0a:fd:89:e7:b0:ff:4f:95:78:82:3e:f1:28:
                    d5:37:83:2d:5f:2e:65:57:6e:6b:c3:97:8a:e6:6f:
                    a2:0c:08:0f:2e:18:25:90:be:89:ac:0f:be:07:15:
                    3f:ef:af:43:0e:f0:10:04:d9:08:e9:80:15:a0:70:
                    ea:3f:58:2d:ba:9c:1f:e6:32:53:61:7c:e3:1b:2e:
                    93:27:f5:db:2c:9f:da:0b:ac:4c:61:03:da:78:9c:
                    d0:9a:f4:a5:21:92:ec:ed:67:76:13:51:dd:73:14:
                    be:3f:63:56:2a:c0:97:a9:a7:34:39:1a:53:85:be:
                    7f:12:4c:b3:bc:25:f0:44:df:21:73:8c:3b:61:2f:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7E:D4:4F:6B:6B:82:33:17:70:1D:26:39:64:FC:F6:C3:8E:BB:27
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:90:d5:0c:92:34:7a:2a:ca:59:d6:6c:ce:0e:d8:84:84:2c:
         9b:04:58:2d:57:d6:b4:11:4c:e8:63:97:a7:97:84:7e:80:38:
         41:0c:c7:b6:45:ff:9f:d5:4a:0c:0b:2c:f5:3e:df:4d:01:48:
         5c:1c:f9:41:7e:c6:08:f7:67:b0:f7:48:38:6b:fe:8d:e6:be:
         59:fa:a4:ca:d8:a3:56:48:69:ca:6a:d0:35:c1:2c:99:54:c1:
         a3:4d:6f:ce:49:9a:82:70:48:c3:6e:d0:a9:8b:b8:3a:3b:16:
         ae:2c:97:3a:bb:e1:4c:c6:26:4d:52:2c:38:8d:d6:ce:2c:b9:
         9b:1f:2e:b9:c6:65:1b:1b:70:ee:2d:dc:9e:36:8b:56:72:7d:
         3e:db:34:6b:8c:c5:c7:80:c4:01:01:53:6d:68:42:af:13:1a:
         16:fe:c1:fe:7a:39:bd:e4:39:e9:2d:ae:98:21:f0:03:6a:92:
         62:37:54:00:57:57:5f:54:f8:d1:cf:73:51:1b:27:cf:c7:1c:
         95:25:6e:d2:9b:37:f5:2e:c6:8b:5c:4c:4d:59:94:61:1c:12:
         51:63:bc:33:cc:16:14:77:cd:29:7a:28:36:2d:7e:2d:b3:eb:
         15:97:0c:3d:4e:9b:eb:29:a0:02:6e:7c:18:42:05:97:b6:fc:
         d9:6d:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:07:08 2025 by rpki-client