Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File:                     r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier:          8FzVZ63GdZ2B9fua6BxN3gTboQ6GcooIRYYlSNHN+08=
Subject key identifier:   02:AC:69:04:B1:6D:03:55:80:98:8A:07:11:3B:0D:26:A5:55:DC:57
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer:       /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial:       0197B7454C6076D70EECCDD0B1D98310522B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 16:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:01 +0000
Files and hashes:         1: acvvT5q-PVeUjsCLlPVuoTE00po.roa (hash: MQoBLU//Irn0dEBmlINyAJ8ehIRD+2s0D9hVDHRZB5A=)
                          2: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: Yd5dxLNm+RB06pj6NRk+DJSwcHFx27WnIrraiei0vxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:4c:60:76:d7:0e:ec:cd:d0:b1:d9:83:10:52:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
        Validity
            Not Before: Jun 28 16:01:01 2025 GMT
            Not After : Jun 29 16:01:01 2025 GMT
        Subject: CN=02ac6904b16d035580988a07113b0d26a555dc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:3e:d2:fa:49:b5:66:0c:5c:6e:c1:aa:3c:
                    35:20:f2:41:d6:e2:33:c9:cd:2f:7a:b2:d2:f1:d0:
                    7b:0f:bc:35:45:9f:97:73:d3:e9:5a:5f:95:81:c4:
                    e1:2d:6e:a3:4d:62:44:af:70:f0:aa:32:8b:33:46:
                    78:8d:31:11:bf:32:14:0c:a7:c4:2e:d7:69:3f:a2:
                    ee:16:df:e0:be:53:3c:a3:02:71:f1:57:8a:3b:83:
                    13:b3:0d:f1:1c:81:be:a0:26:d4:33:88:ba:b5:2a:
                    d1:23:1d:51:94:81:55:79:bb:b9:ed:3b:8d:aa:45:
                    00:75:eb:87:a0:b0:b5:c4:10:eb:6a:a2:83:37:06:
                    3a:82:92:a2:f1:a5:42:c1:af:69:e8:09:85:43:4e:
                    e3:ea:73:8c:bd:cc:dd:9b:69:a2:75:13:06:2a:d3:
                    5e:46:0b:af:dd:df:4a:b3:84:93:1c:35:5f:d6:e6:
                    71:31:8b:85:10:85:75:2b:1b:92:50:ae:05:3e:f4:
                    29:3d:97:ce:2e:cc:cd:c5:5c:3a:64:c2:65:e4:90:
                    2d:38:bc:88:b7:79:ff:cd:67:e5:da:57:6a:e3:e1:
                    82:c7:6f:d9:f1:77:94:16:2f:fc:42:08:50:75:e2:
                    8f:48:d5:0e:9e:89:a9:d3:70:99:ed:4e:b8:2c:70:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AC:69:04:B1:6D:03:55:80:98:8A:07:11:3B:0D:26:A5:55:DC:57
            X509v3 Authority Key Identifier:
                keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3b:6a:af:ea:54:81:3f:71:28:ae:c9:44:a3:04:2a:4f:1c:
         93:f5:b8:c7:4b:07:96:51:f2:f1:77:0f:e9:04:e8:3d:bf:02:
         27:af:ca:c5:1a:42:43:20:7a:81:70:bd:1b:9f:e8:5f:15:ef:
         03:cc:e2:3e:28:10:26:1f:3f:96:62:be:69:2e:26:4d:59:12:
         6b:79:3c:10:c3:83:80:9b:00:75:57:82:42:21:da:10:49:cf:
         8d:4e:4e:eb:e0:ca:4f:2a:77:22:4b:08:71:2f:30:3a:51:d9:
         d1:0b:af:8c:99:92:25:71:ec:01:4f:ac:01:76:bc:94:62:35:
         73:17:f5:a4:b1:b8:4e:2f:ae:2d:64:6e:67:82:00:73:2b:16:
         65:d5:8a:e6:a0:41:1d:87:36:17:72:a8:1c:48:c9:02:bf:1d:
         d2:f6:b6:3b:7b:c6:01:a2:ae:88:08:35:72:31:0e:4b:ac:7c:
         54:b2:a5:c7:42:a2:d5:17:20:32:0a:85:a8:a7:d9:e7:f3:93:
         09:8f:f3:02:fa:f9:f6:32:6d:87:dd:ef:a5:5f:b5:ac:f2:0c:
         8f:5d:73:63:92:c0:9e:07:09:2e:7c:74:22:5d:4c:ff:34:43:
         c9:38:cc:7d:e0:e8:e9:4c:bc:52:c4:b5:8a:f4:92:6a:09:7d:
         b0:5f:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:38 2025 by rpki-client