Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File:                     e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier:          83Yf1E/gy6DY3Fncf4vSOg6APyrxMUh57neh8f0GkFU=
Subject key identifier:   27:93:22:70:16:D5:3D:D5:EC:8F:1F:85:99:83:A5:B5:8B:78:81:EE
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer:       /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial:       0197B77C28B77991BDFB7F668162DF0200BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number:          15BB
Signing time:             Sat 28 Jun 2025 17:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:56 +0000
Files and hashes:         1: UnCcsT72IxAT_A7pPL3SizxwgN4.roa (hash: c7dhvZVWkHenODhaz4yGW2E9vwoS+Yy4F3XRITR7veQ=)
                          2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: bHLKFe4CdngNlD6Osd49URykNggVpqIFTK2vuw3sFLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:28:b7:79:91:bd:fb:7f:66:81:62:df:02:00:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
        Validity
            Not Before: Jun 28 17:00:56 2025 GMT
            Not After : Jun 29 17:00:56 2025 GMT
        Subject: CN=2793227016d53dd5ec8f1f859983a5b58b7881ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:f3:10:b8:7b:5d:2b:20:98:ba:0a:91:dd:
                    e4:3f:ec:7e:19:5e:de:37:74:56:25:bb:d1:d1:a3:
                    13:13:76:c1:77:aa:0a:61:3c:a8:bb:3e:fc:de:a5:
                    7c:12:81:9f:f2:f8:3a:3c:e4:96:a7:c6:88:40:88:
                    65:e2:c0:e1:34:8f:23:a6:a7:52:62:e8:ff:4a:d0:
                    9d:01:9c:cb:be:68:77:14:7d:16:57:0a:6a:01:af:
                    18:79:92:e8:5d:d0:0c:1e:fd:f8:19:3c:24:b2:a8:
                    3e:d8:35:b2:11:32:4d:a7:87:c0:9f:fe:79:00:88:
                    e1:bd:61:ff:24:df:9d:2f:25:bb:fd:21:b1:f5:5a:
                    eb:56:9a:84:99:ae:b1:49:83:cc:be:ba:1b:b9:3a:
                    63:f4:14:17:87:7a:29:18:7a:54:cf:87:2f:d1:5a:
                    97:d1:a5:f3:6b:32:57:13:1e:5a:4a:60:3d:ba:96:
                    3a:ec:f0:4a:db:20:88:96:6b:ff:ae:3a:48:e7:e1:
                    04:95:dc:9e:eb:8f:9a:f4:d8:41:11:c8:48:51:35:
                    c9:f1:b6:48:83:88:3b:69:1f:e7:5f:81:15:5f:fd:
                    e1:67:24:af:86:23:8f:33:df:cf:23:bb:6c:2b:07:
                    41:80:d6:23:f0:13:82:5e:2e:8f:20:f4:72:46:76:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:93:22:70:16:D5:3D:D5:EC:8F:1F:85:99:83:A5:B5:8B:78:81:EE
            X509v3 Authority Key Identifier:
                keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:43:d8:5e:02:d7:65:8b:c9:fa:d4:a2:bd:ed:b4:26:ea:
         e2:07:bd:0a:d7:d9:01:f0:56:a3:bb:ca:66:2f:65:74:39:02:
         b9:c0:91:b5:c5:90:49:a6:cd:4a:36:70:6f:07:94:dd:a7:f4:
         9e:af:19:e1:5a:62:fe:f8:38:bd:72:c9:1b:a1:97:76:a8:85:
         60:33:e4:7d:56:74:69:ab:95:85:1d:6e:34:f1:74:72:d3:d6:
         09:10:0c:36:78:be:9c:5f:71:59:40:48:ff:8c:df:19:92:f8:
         44:44:7a:4a:9a:1a:c9:73:7f:4b:6a:e5:f4:fb:a6:36:f4:56:
         c0:81:0a:91:76:93:31:ca:5f:e2:19:50:ff:8f:fa:b6:9d:cb:
         d3:b0:62:8b:cf:06:dc:d2:96:1e:ce:a2:42:c5:6b:51:86:79:
         f4:b3:5d:95:3b:d2:27:58:d1:6d:85:0f:1e:43:4a:74:fa:0c:
         8a:63:10:a2:c6:23:94:3a:9d:3f:ca:32:f5:1a:6d:a5:cd:52:
         e4:d2:86:10:4c:8d:8d:56:70:05:ef:e4:3f:79:da:f4:91:47:
         f3:46:f9:6f:dd:7b:ce:3c:4f:62:4d:1f:73:ca:97:43:63:e6:
         bb:6c:c4:bc:f2:1c:0f:fa:0d:3f:b7:25:46:0c:b8:0f:dd:62:
         79:da:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:31 2025 by rpki-client