Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File:                     F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier:          srWH1NYzjFGCnA4hcEuGUpkC81t/LiQVaIEK0tGXBiY=
Subject key identifier:   DD:1B:C6:24:2A:7D:55:F5:74:A6:94:DC:6E:EF:C2:F8:7F:6D:20:FF
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       0197B77BF43206F3F02DEB5F1804EEEE9ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number:          15C3
Signing time:             Sat 28 Jun 2025 17:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:43 +0000
Files and hashes:         1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: WnRhEsotNO1AHViLVFh3JSN5fpZDwJn8eNdIA+ttYaI=)
                          2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7b:f4:32:06:f3:f0:2d:eb:5f:18:04:ee:ee:9e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: Jun 28 17:00:43 2025 GMT
            Not After : Jun 29 17:00:43 2025 GMT
        Subject: CN=dd1bc6242a7d55f574a694dc6eefc2f87f6d20ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:59:ac:ef:2a:c9:06:bd:8b:d9:8b:4c:6f:
                    08:15:e1:c7:eb:f6:f5:27:bf:95:62:8a:6a:b3:83:
                    e8:fc:5d:f0:c9:20:c6:62:ab:11:eb:45:c3:3e:64:
                    d2:4e:ae:c5:43:66:b1:ef:f2:c5:6a:8c:64:40:ff:
                    f4:6e:b7:2f:1b:ae:c9:12:05:e5:e7:0b:a7:97:06:
                    dc:f7:f0:db:ff:0e:95:b8:b2:36:d7:fc:f9:6c:fb:
                    1e:39:94:40:8d:83:16:96:96:23:df:a0:8a:5f:42:
                    0a:f4:7d:b6:33:cf:c8:a9:4d:ca:8a:e4:b2:bb:c2:
                    07:7b:79:2c:88:ef:7f:20:4c:29:17:b2:e9:15:ef:
                    a0:6a:bd:ef:ff:f8:e4:d7:8a:8d:b1:7b:46:cc:dc:
                    75:43:7d:b7:b3:11:83:70:4d:92:17:d7:87:5c:e8:
                    dd:56:ff:b8:cb:26:30:c7:3e:ba:f8:60:b9:03:14:
                    97:c1:ed:f7:92:ec:fa:19:ee:4d:37:6e:c9:e6:07:
                    c1:13:b3:33:f6:e9:21:7a:9c:22:0d:fa:07:cf:cd:
                    e0:69:29:ec:d8:14:a4:0e:c3:78:1a:4b:2b:8b:43:
                    2f:ef:a0:4c:f0:70:18:2e:d2:82:ea:70:5d:49:28:
                    49:c6:1e:53:8a:60:d1:40:a7:30:7c:9b:1b:b6:b5:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1B:C6:24:2A:7D:55:F5:74:A6:94:DC:6E:EF:C2:F8:7F:6D:20:FF
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3e:ce:ec:d8:e7:21:1d:67:34:32:d6:3c:6a:3c:a6:39:b5:
         50:b5:59:84:a6:a8:cd:e1:18:74:c8:95:c7:92:b4:cf:b8:45:
         36:dd:db:ce:1f:ab:b0:0b:4a:66:5f:02:7e:a5:26:a2:4d:de:
         5e:ce:14:cc:2e:d0:17:c3:4e:5e:d9:a9:c2:02:a9:84:f9:60:
         d7:5b:2e:8e:c1:a9:1d:77:67:07:1f:4f:0d:44:2a:24:70:82:
         64:cf:f7:47:49:94:98:c4:2c:d8:fb:ed:fd:45:99:8d:49:82:
         d1:21:a5:21:8b:d6:07:18:5a:68:c4:f6:c0:99:38:9b:44:8e:
         69:2c:3e:d2:72:58:ed:00:94:e6:6c:cb:05:86:e6:c5:7e:97:
         38:42:dd:86:be:b4:23:de:51:da:5a:35:dc:50:41:57:88:6f:
         20:2a:23:b1:8c:57:9d:dd:07:91:9b:e4:92:09:2b:2d:e9:97:
         b9:e2:34:16:9f:27:c1:71:91:45:77:e4:79:9a:7d:fb:32:3a:
         69:bc:5a:1d:58:3f:52:ed:29:42:0d:7e:5d:e3:8b:99:b5:ba:
         ec:50:bd:07:5c:ea:86:63:09:5e:ab:21:c7:59:e3:0d:ea:54:
         6a:db:ac:b9:f1:4d:db:93:1d:29:dd:b2:04:3e:82:a7:64:08:
         1e:82:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:31 2025 by rpki-client