Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
File:                     btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json)
Hash identifier:          vbcnEIpJ5Sm/CoIh3i4GavzNiMA/jmDZmBSWMZ7114c=
Subject key identifier:   84:F1:54:3C:CC:57:8B:8D:9E:65:DD:CE:DF:D3:88:06:F3:16:58:EF
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Certificate issuer:       /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial:       0197B77CC653F35A9AE935595599E900EBDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 17:01:37 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:37 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:37 +0000
Files and hashes:         1: 9pVSMCdjQealzLgQcmqOThUhNyY.roa (hash: Za3wBMJoYZ7WrjJeJ4YGgLkdE+KKnUd40rRwXB4f/WU=)
                          2: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (hash: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=)
                          3: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (hash: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=)
                          4: bSRwpXF4daZ64mmbWkichNXlbKQ.roa (hash: UI3xu+IDrHLUWFrOWnEgl/cse2lLBjv83Y/Ok1oQevo=)
                          5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: YTyVWVLAz7ZbHs4pJp3D9G7bCmQJLet7Wu9HmwRWHn8=)
                          6: c7okVFaHlAlUexayvfgBOKFlFAQ.roa (hash: hGEyBzgSKXCjptMSFi5MLoApkRoSwE9UaM8SMZ+2CFo=)
                          7: nJiYZEpB1EgK05RNyHLNlPAVIA8.roa (hash: AlaLFQmqj+Z/cHGEWv8PdyAv4LrvAlOopVYBnZcKqZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:c6:53:f3:5a:9a:e9:35:59:55:99:e9:00:eb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
        Validity
            Not Before: Jun 28 17:01:37 2025 GMT
            Not After : Jun 29 17:01:37 2025 GMT
        Subject: CN=84f1543ccc578b8d9e65ddcedfd38806f31658ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:78:3b:80:c1:cc:de:f8:e9:f5:4b:9a:82:
                    5c:72:5d:27:84:9d:25:36:1a:0e:f9:7a:c2:31:a9:
                    1d:4b:26:c2:49:4f:b4:42:77:e7:72:9e:2b:a0:f7:
                    b6:f3:f7:38:cc:43:2a:68:9a:aa:33:ee:81:80:36:
                    78:67:ad:ab:0a:a4:7c:c8:46:f1:2f:8f:fd:1f:18:
                    ea:a7:ec:12:b5:8e:e1:06:73:dd:50:2b:8a:99:e4:
                    3e:06:b4:3d:ab:b6:e0:7a:2c:e1:c4:e0:0f:de:68:
                    f8:f4:cc:19:fc:d5:a3:5f:5f:6e:25:46:14:41:1a:
                    36:6d:34:08:7e:5d:5d:ff:84:2c:e2:3f:b2:1e:f2:
                    f5:34:9d:96:ec:2b:7d:9b:2e:a0:f2:b4:a2:fc:8c:
                    ca:6e:42:74:3a:f1:f0:20:3a:a5:62:16:d2:4d:e3:
                    90:e4:18:5c:e0:ac:d1:d3:1a:b5:03:9e:59:74:27:
                    32:2a:23:ef:04:4c:97:07:5a:f9:91:d3:d7:89:0a:
                    d5:a6:78:3a:0d:fa:44:aa:1c:d7:8a:f4:6b:bf:a5:
                    3a:97:1d:44:fb:6f:25:ad:07:16:4e:7e:d9:ee:8c:
                    70:a9:31:5e:e9:9e:a9:a5:7c:3c:e9:b9:ad:25:ea:
                    d0:86:bc:ef:84:2a:8f:a4:05:33:21:a2:e7:77:db:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F1:54:3C:CC:57:8B:8D:9E:65:DD:CE:DF:D3:88:06:F3:16:58:EF
            X509v3 Authority Key Identifier:
                keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f7:6c:8c:1d:a9:e6:4d:d6:25:09:f4:5e:58:86:bd:6a:07:
         80:95:81:bf:16:15:76:db:21:d2:88:01:f1:a0:8f:51:8c:e9:
         d4:41:90:b7:b2:f1:64:e6:3b:c1:bc:e4:34:33:68:47:6d:21:
         21:27:43:0c:41:04:c8:46:00:2a:a8:2d:4c:2a:2c:1a:d4:fc:
         29:15:99:83:35:1a:f4:59:7e:b7:87:b1:28:af:49:d8:30:49:
         1e:a8:aa:f8:bb:d5:a4:2a:e1:94:f2:9e:53:64:1c:0c:55:70:
         f6:e7:ba:c1:8a:9f:71:c2:9b:fe:ca:ca:af:c7:16:fa:c2:15:
         9d:79:6d:ac:83:03:d5:a7:aa:b6:a9:7a:7d:c1:fb:ab:50:85:
         3e:64:89:28:dd:21:9e:70:7f:b7:df:89:7c:7f:00:a6:c5:cf:
         b2:01:95:77:c6:03:7a:71:0d:68:e3:5d:b5:30:87:3d:5b:93:
         d6:97:fe:9c:7f:c8:e6:82:e1:06:1c:7d:e0:97:47:15:8d:cd:
         0d:f8:56:78:6e:55:ab:15:b1:76:51:2d:a7:37:a3:46:7d:eb:
         5f:f4:01:1a:ba:92:4a:0b:08:f9:96:cd:d8:8d:e3:1e:30:89:
         f2:04:50:83:f3:14:c0:08:15:3f:5e:5b:bc:18:6c:d4:23:9a:
         85:55:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:17:26 2025 by rpki-client