Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File:                     Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier:          2N0yCjYMq8zZ8PN2LjLt41xDn7Gb0xNPKF2OgUN4TVM=
Subject key identifier:   68:42:86:DD:DC:54:3B:C5:B1:C2:E8:83:D9:1F:90:02:05:2C:D6:76
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer:       /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial:       0197B5C4AA4EC59A0FABB6CF2991EB7DC58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 09:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:54 +0000
Files and hashes:         1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
                          2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: 6uDdi0LGoVtph8DBta+QuP77JjssmQDCYGew4NC3gew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:aa:4e:c5:9a:0f:ab:b6:cf:29:91:eb:7d:c5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
        Validity
            Not Before: Jun 28 09:00:54 2025 GMT
            Not After : Jun 29 09:00:54 2025 GMT
        Subject: CN=684286dddc543bc5b1c2e883d91f9002052cd676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:3a:44:fc:e4:53:f8:4f:4d:7c:85:5e:48:
                    ef:cd:fe:03:11:82:04:ff:41:4f:66:2c:02:f5:d8:
                    45:a9:2b:6c:b6:12:58:8d:34:c0:73:ea:fd:a2:65:
                    d7:08:ab:c6:b8:bf:74:3b:6a:6f:4b:02:95:29:50:
                    1f:e1:4a:2f:a6:e3:95:44:13:d6:1a:cc:f7:1a:b8:
                    cf:86:fa:f3:b0:88:3a:1d:6e:63:8c:77:96:1a:7b:
                    34:af:41:9c:31:97:85:d1:c3:b8:b1:90:88:b4:bb:
                    4e:f7:69:e5:79:d8:f9:a7:81:ab:ce:b4:5f:65:3f:
                    bf:2f:2c:7e:b9:05:3d:ed:68:9e:96:be:78:62:be:
                    91:6a:cd:4b:48:3e:c3:c8:5b:ef:ae:de:67:eb:1d:
                    73:70:5e:34:aa:77:c8:04:cb:31:3e:e7:9b:5f:73:
                    08:6b:de:e6:2b:1d:55:9c:f3:93:cd:9c:2b:ab:c1:
                    31:a3:5f:42:6a:99:bc:93:da:9b:8c:8e:26:42:d1:
                    7d:73:16:7d:de:d3:c0:49:a4:96:64:56:7c:15:ed:
                    aa:50:92:2c:24:fa:65:5d:4f:14:68:41:5b:7d:8c:
                    8b:39:08:9d:31:c9:8c:30:63:8e:b7:b5:18:29:88:
                    fc:0e:fd:69:36:8b:0f:ba:51:9e:d0:32:7e:51:47:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:42:86:DD:DC:54:3B:C5:B1:C2:E8:83:D9:1F:90:02:05:2C:D6:76
            X509v3 Authority Key Identifier:
                keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:60:f8:af:cc:2b:3e:dd:21:11:73:42:79:7d:a0:81:db:90:
         8c:a5:ab:de:0d:2d:4d:fe:28:5f:69:e9:dc:b5:19:c0:b0:6a:
         71:01:30:28:0a:0c:0f:8b:d8:30:be:06:a1:a8:b8:ef:f3:25:
         bf:14:7f:5e:a9:78:19:86:e1:09:c2:53:50:f1:ca:07:4c:f4:
         ff:82:62:25:e5:cb:eb:1b:37:e4:ad:aa:cd:de:e8:42:6d:3f:
         cd:3b:48:bb:28:61:99:f9:9e:8d:c6:3c:fe:64:7e:f0:f2:9c:
         0f:e3:60:eb:57:2f:23:87:64:ce:f8:31:34:66:1e:be:2b:c0:
         12:ad:4a:14:62:8a:51:66:0b:8b:d4:6d:8a:85:01:de:6c:0a:
         39:60:77:98:55:aa:dc:14:6f:91:d1:15:72:4c:ee:b2:20:29:
         ec:94:7d:50:bf:18:bd:a9:66:1e:19:c0:38:ea:83:02:67:e9:
         db:b4:76:1c:fa:43:8a:99:30:1c:65:10:93:4f:c4:43:2a:9c:
         18:cb:26:89:ab:8e:05:bc:12:d2:86:be:8f:c8:62:a6:79:fa:
         73:f0:28:f9:65:c3:6d:d2:a7:b6:68:9c:c9:5c:11:b5:9d:c4:
         05:58:c2:e1:28:35:62:b2:80:23:13:f1:ba:0c:2e:c0:7d:46:
         bc:6b:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:32 2025 by rpki-client