Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File:                     A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier:          RBHh6tOcocXBuMp8STKqZwcQBSnP/uK4IdjZfbeKCYY=
Subject key identifier:   84:89:C6:17:C4:E8:16:93:4A:4D:8B:8C:42:4D:BB:9D:97:E5:2E:DF
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       0197BFA431325892102BFF9D945AB968671F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number:          15BB
Signing time:             Mon 30 Jun 2025 07:01:37 +0000
Manifest this update:     Mon 30 Jun 2025 07:01:37 +0000
Manifest next update:     Tue 01 Jul 2025 07:01:37 +0000
Files and hashes:         1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: Gd9aFKT4Z76W4rr6ngZXYVL+L0SAf9drQk6lbBv61LU=)
                          2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=)
                          3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=)
                          4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bf:a4:31:32:58:92:10:2b:ff:9d:94:5a:b9:68:67:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: Jun 30 07:01:37 2025 GMT
            Not After : Jul  1 07:01:37 2025 GMT
        Subject: CN=8489c617c4e816934a4d8b8c424dbb9d97e52edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:ff:62:98:42:18:43:c2:cd:9b:51:86:e2:
                    a8:25:38:3b:86:a9:dd:4d:21:1a:ae:02:01:7a:a3:
                    f1:b3:79:23:18:74:4c:24:8f:91:e7:13:84:82:0f:
                    52:d1:5e:53:68:4b:0b:5f:68:d9:2c:49:45:52:4e:
                    a9:7b:00:4f:0d:42:86:b2:e1:d5:6c:89:c0:82:8a:
                    c0:7a:99:8d:5c:09:36:0a:2d:b4:4b:72:07:1d:58:
                    e8:93:cb:bd:22:b1:68:7d:b8:d6:57:33:a4:96:27:
                    4c:00:19:36:d9:ce:75:63:5e:7f:5f:5c:a0:27:a5:
                    63:be:2b:42:01:fa:ca:30:f6:79:69:6f:2c:44:5c:
                    6c:77:ae:c6:95:9f:b0:d0:e3:be:33:d2:c8:19:c1:
                    4d:a2:df:ec:e2:b2:a2:a2:5b:90:f7:69:7d:4e:b6:
                    64:8f:31:a0:8f:65:80:f7:21:39:90:14:70:bf:74:
                    82:96:e6:5b:56:94:c6:c7:68:f3:35:bd:6d:54:17:
                    20:97:84:f9:c9:30:8b:39:40:96:6f:80:47:8d:f6:
                    24:9c:47:22:c1:9a:28:44:9f:81:b6:4b:3c:49:79:
                    20:c1:cf:eb:e6:c2:43:c0:c4:82:de:62:fe:95:d4:
                    2c:03:6f:32:38:a0:a9:0e:d0:84:cb:17:50:04:a6:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:89:C6:17:C4:E8:16:93:4A:4D:8B:8C:42:4D:BB:9D:97:E5:2E:DF
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3a:6f:38:ae:b6:26:09:93:64:4a:1f:c2:52:e1:3f:da:a4:
         ad:5d:a7:d4:9b:e5:cd:1f:a0:62:21:79:61:94:0c:41:42:2c:
         2f:b3:16:5f:22:21:1f:57:04:7f:20:c9:3e:0f:4b:50:e9:da:
         ea:73:64:5d:a9:7c:07:3a:7f:94:c5:18:7d:9d:17:67:90:a8:
         1b:72:ef:33:8b:26:4a:e9:03:25:8b:65:f0:3e:a0:3f:1c:dd:
         8c:a9:5d:4e:7b:65:43:62:1e:d4:dd:c9:34:0e:d9:d7:a9:3a:
         21:99:c0:86:74:90:e4:45:16:fa:a6:8b:00:8f:6c:68:bd:ed:
         47:a2:9c:12:d1:4f:5c:ef:14:56:98:df:09:7b:9f:ea:7a:b3:
         27:b7:43:16:9f:fd:a0:8b:b3:4e:86:77:fc:22:42:5c:66:06:
         5a:1a:e8:e1:be:19:2e:07:88:09:7e:8e:6d:2f:75:2c:c4:34:
         f6:31:ff:24:22:3a:6a:ad:26:f2:b5:ec:ce:66:6f:a3:53:c2:
         4b:6a:f4:32:3e:0b:00:60:c4:ec:d9:61:c5:a5:81:94:65:20:
         c1:bd:21:83:0d:4a:cd:d6:57:cb:37:dd:f6:c5:d2:1e:e2:b8:
         12:15:77:70:55:c5:13:63:08:97:b2:0e:74:a2:41:0d:ac:24:
         05:4c:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:18:27 2025 by rpki-client