Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          7MGuvcqcCWdzURvb0MjENGPuVuz8WMP4KpBW1eVUVxU=
Subject key identifier:   38:36:07:6F:E7:60:F0:99:4C:3F:E4:C0:38:01:35:51:32:03:6F:79
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       0197B9D928DFD6FAB542A253E1B32840FFB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          15BC
Signing time:             Sun 29 Jun 2025 04:01:46 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:46 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:46 +0000
Files and hashes:         1: 5pSATMPZ0p7gsB8mMb7VRMdgILk.roa (hash: n6iETK+1U2jYxCvuN/hxrmzW6QRPJ6PVi/YnvpAOe54=)
                          2: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: eLJAeMjlkzZOsEHaW6QbQsANOOOxu/9g5qcYAU+MD9g=)
                          3: HOzDSyhci1oqkFYg_HbCSVURV70.roa (hash: nhIbLdZhFO91+DXj7DSINlsbz0bS+HiCo4ktiLJuf1I=)
                          4: HTtaJI7F0HZATXXascx3TmNByxo.roa (hash: d5j76fTLUAV6ovcqXej2UO/z7lwi9LauG77wR6/wZRE=)
                          5: Zc3EPNVFRcdWBGFghDwIYYsiutk.roa (hash: m81UKM1wAmpf9BPJ2gZjuvXEWH2Fd1esmxulacEVZrY=)
                          6: jEK1d3vUN0cIlA-uXNamjthkOwI.roa (hash: 41tF5GEIsjhhQFzZ4Z9ebWeIwUkdNFTY9RSR2SItUCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d9:28:df:d6:fa:b5:42:a2:53:e1:b3:28:40:ff:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Jun 29 04:01:46 2025 GMT
            Not After : Jun 30 04:01:46 2025 GMT
        Subject: CN=3836076fe760f0994c3fe4c03801355132036f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:f5:b7:ba:19:8c:e2:16:d6:ca:0d:ae:24:
                    82:2f:92:d3:21:6c:e4:45:17:7c:ad:a7:e2:c1:22:
                    7a:b7:9c:42:61:0e:a8:a5:6d:1c:9e:53:95:42:8a:
                    c6:5b:5f:5a:a0:9f:c9:bc:6f:72:57:d5:9d:68:ce:
                    18:96:5c:d1:8c:bc:89:7c:40:cb:7c:77:2b:eb:ec:
                    7a:db:1e:35:c2:98:2b:f0:ec:2b:8e:b1:1c:4c:52:
                    09:6e:62:3f:41:08:77:63:f6:a1:6c:8e:58:27:4e:
                    80:bb:cb:f9:6b:d9:a7:a2:9d:44:2b:22:0f:f0:bd:
                    aa:11:f0:63:1f:fa:2d:88:45:05:b0:a2:74:df:04:
                    c4:47:4e:ae:d5:57:17:81:94:b7:2a:06:51:1a:5b:
                    9a:03:2a:ed:65:3e:36:8d:1e:ce:5d:51:88:53:38:
                    ac:3d:73:1a:67:05:7b:d0:9a:c2:f4:78:87:1e:10:
                    9f:6b:bb:39:2f:27:71:6c:0f:b6:49:6b:1b:e0:98:
                    e9:f9:56:49:3b:da:c5:db:6e:d5:cc:62:a9:cd:03:
                    d8:88:7c:fc:ed:b9:cb:e5:64:02:db:db:9a:af:16:
                    3f:f4:c1:cc:cd:77:b2:a9:fe:c2:7d:52:23:28:a4:
                    3c:95:dc:3c:b5:71:34:44:70:02:a9:20:34:5d:86:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:36:07:6F:E7:60:F0:99:4C:3F:E4:C0:38:01:35:51:32:03:6F:79
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:5b:7a:46:1b:84:f9:c7:50:82:b6:06:3d:88:35:fd:10:
         76:28:cd:14:4a:c7:45:f2:e4:c5:2c:66:29:e0:0e:5b:f3:b2:
         4b:45:31:4a:49:5c:18:3a:59:ee:16:9b:fb:05:99:03:46:eb:
         71:9a:74:1a:8a:c7:56:43:0e:97:84:20:2d:4a:75:d6:0f:b4:
         db:d7:b9:62:3b:ff:99:39:1d:c5:b1:f5:1a:22:26:8b:00:b6:
         25:7f:66:62:14:e3:6e:1f:45:38:31:37:8d:e1:60:d5:ea:a8:
         23:e0:92:54:ef:97:ca:c5:0e:d5:86:05:20:10:e0:9b:82:5c:
         c6:64:94:2c:45:d9:42:10:a9:2e:97:18:f6:e2:bf:77:1d:a8:
         65:15:2e:9c:08:30:da:7c:09:ea:d5:2e:b3:ad:d1:ad:c3:71:
         01:c6:f0:eb:70:cd:c2:fa:b6:29:7f:fd:3f:d3:46:69:67:ea:
         90:a2:04:8d:e3:36:28:60:46:f6:42:8a:65:9d:fe:66:f9:cf:
         59:4d:fe:e7:c0:ca:2b:a4:9a:45:ec:26:49:73:45:d5:64:9a:
         3e:4d:fe:f8:3e:72:10:4e:6d:90:8c:2a:e8:b0:1f:c0:39:c8:
         4a:48:5d:83:5a:e4:a6:ad:3e:5e:fc:51:cd:c2:64:29:2a:6c:
         bf:f8:61:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:00 2025 by rpki-client