Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          +kzq8SVWt3uzKIXLF81XaX3phBNY94AYa2ckvOjIUY0=
Subject key identifier:   34:1B:79:51:53:C6:06:13:25:44:47:B9:4B:6C:2A:22:E9:8A:6C:D0
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       0197B7B3143C53A697AC9DBBF09CA31FE070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 18:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:55 +0000
Files and hashes:         1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=)
                          2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=)
                          3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=)
                          4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: SfgPlLSAqTcM+yuQ+WSrwsAyfApoZbZkFl0ZGsv8tbw=)
                          5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=)
                          6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=)
                          7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:14:3c:53:a6:97:ac:9d:bb:f0:9c:a3:1f:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Jun 28 18:00:55 2025 GMT
            Not After : Jun 29 18:00:55 2025 GMT
        Subject: CN=341b795153c60613254447b94b6c2a22e98a6cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:9b:84:66:32:04:bd:27:f0:93:ed:d1:64:
                    5f:70:2f:ba:c0:ad:f6:9a:c4:89:d8:e1:98:44:f2:
                    eb:00:90:e5:ab:d0:79:ff:2b:05:41:04:e2:ac:bc:
                    f8:02:80:fd:f1:f8:b1:f6:58:35:e5:74:84:f9:57:
                    00:c7:0c:da:58:ce:71:43:46:72:af:4a:3f:15:25:
                    69:d0:e2:d9:00:a3:ff:46:1a:83:f6:ea:7c:38:b9:
                    f2:9f:f3:cb:f2:0e:c9:11:2d:89:a9:b0:1e:9f:b0:
                    5b:8f:8e:00:2c:49:ac:e6:bd:ef:76:8f:68:71:9a:
                    fc:1c:82:a3:dd:49:cd:b8:d3:b5:21:68:c1:f0:d9:
                    84:06:fa:5e:ef:25:60:ee:41:90:62:85:2f:cb:a5:
                    30:61:1a:40:d9:3e:55:72:82:1d:eb:90:89:4a:fa:
                    8b:f4:7e:f2:6c:e0:a4:f9:d5:f7:c4:e5:d2:d5:01:
                    64:bd:be:9f:ac:29:cc:b3:35:0c:7e:79:ad:9b:83:
                    4f:a5:c4:a7:f7:19:04:c7:6b:13:92:2a:4a:8c:90:
                    bf:7f:de:bc:2e:62:5a:1a:13:43:9f:6e:dd:56:2a:
                    a0:ae:41:90:e8:10:33:40:dc:cd:11:c6:95:ba:40:
                    2c:3c:87:07:0e:9f:93:12:3b:13:94:77:25:cf:26:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:79:51:53:C6:06:13:25:44:47:B9:4B:6C:2A:22:E9:8A:6C:D0
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:71:73:94:23:11:61:77:e5:d4:9a:fb:56:03:64:35:37:fb:
         8f:22:46:da:42:6b:59:0f:a4:99:c3:01:be:38:36:af:a6:8a:
         03:03:80:2b:2a:90:b7:9d:af:9e:20:37:f2:31:1d:5d:75:4e:
         42:94:0f:a3:aa:ee:0f:67:ae:9b:31:a7:a2:20:d4:23:35:6b:
         b2:b9:f0:87:02:13:81:96:07:b9:ef:f9:63:5a:8f:4e:f1:05:
         3b:29:58:cd:c4:7e:70:5a:da:8d:a2:74:59:80:a7:17:a6:8e:
         35:62:2c:94:6f:f2:69:b5:7a:85:4c:d9:30:b3:ca:e9:09:c0:
         65:1a:39:0e:c8:23:be:1b:4c:0f:25:d3:2c:49:b7:01:62:13:
         54:c2:4a:e2:8b:4f:e5:8d:a1:5e:38:59:9f:74:ef:89:2d:e5:
         fb:12:a3:98:59:0a:8d:0b:a9:78:d8:87:b4:22:7e:7c:09:27:
         59:8f:f1:ad:63:09:88:a3:9b:58:91:da:e1:d4:a3:ca:31:da:
         36:e6:fd:7e:86:51:87:d4:b7:5a:70:a8:a4:9b:8d:29:38:3a:
         2a:bd:d4:af:1e:ca:d9:e1:48:7b:25:10:c4:7e:07:44:f6:56:
         aa:6e:27:f7:05:74:a3:c4:5f:63:3d:79:58:e1:ff:63:30:45:
         b4:fc:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:15 2025 by rpki-client