Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
File:                     CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json)
Hash identifier:          yByqtyO6cYGtZM5q6KLfSpgY8+DBY9PapdshTlO15iY=
Subject key identifier:   0F:D0:F1:5C:FA:E6:05:FF:7F:F8:EB:7A:46:22:75:45:6C:D6:31:1E
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       0197B7B346D8262BBD50EF95CBEB86E03975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
Manifest number:          15C2
Signing time:             Sat 28 Jun 2025 18:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:08 +0000
Files and hashes:         1: 43hLg4tOOv7SoGn-XftXhK9a-NE.roa (hash: fTCV6jJu7vHlfoEQtZwLz0NW5RubKgDanJcVlL86nkI=)
                          2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: ybHPJoIsKaiMc99j8M0YQqxR+U9cd8tpySvMct6WsjI=)
                          3: RservbDL-BVcPWiT5GY7GGmaqNg.roa (hash: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=)
                          4: SpbFu7cu1hyzijH4Dcq1zO1wfcw.roa (hash: s7llN+uwGj/YltcQ4pU6jWvPZRuwP/LeuHpZEDrxXAg=)
                          5: X_Rtsxh8a-tRwYEIISqdxYeVheI.roa (hash: Xix6PIF+hRiDX1wXAP04l3u77j1tQfJifz6hRdA+cvE=)
                          6: nvYcptlp0PUhINL8di32N1PMAlE.roa (hash: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=)
                          7: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (hash: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:46:d8:26:2b:bd:50:ef:95:cb:eb:86:e0:39:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Jun 28 18:01:08 2025 GMT
            Not After : Jun 29 18:01:08 2025 GMT
        Subject: CN=0fd0f15cfae605ff7ff8eb7a462275456cd6311e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:aa:16:8a:94:b5:93:1a:ba:9c:75:de:34:
                    50:57:3d:c8:34:09:95:85:fa:50:68:90:b9:8e:d9:
                    01:8d:4a:ba:3c:85:66:6a:84:61:0f:cf:74:0d:47:
                    91:7b:55:fe:fb:4d:42:a3:a1:4f:fb:79:24:48:d4:
                    bd:e1:be:9b:27:0a:c2:b0:e7:71:7b:fe:39:55:44:
                    08:10:23:2b:ed:db:b2:79:b7:3a:1a:e7:45:17:4a:
                    ce:82:77:17:0a:f3:8d:fe:a3:19:e6:2b:f9:93:9e:
                    ed:70:8f:69:1f:99:65:e4:3a:57:d2:eb:b6:aa:ff:
                    0d:49:45:b6:19:03:7b:e0:ee:76:aa:66:ef:6f:c9:
                    55:e5:7d:43:ec:39:b6:db:cf:1c:62:6a:79:59:52:
                    3a:81:6a:c2:94:3a:52:99:24:3e:9d:9c:c7:11:47:
                    c1:99:ce:93:1d:df:c2:45:ff:20:42:58:d0:5b:80:
                    4a:dd:83:2e:34:a1:84:49:06:bd:7e:34:a0:68:a4:
                    52:ed:b1:f2:57:9f:40:4c:63:37:f7:fb:90:f7:17:
                    b8:3b:ac:72:87:b1:c7:e9:99:7b:74:bd:e6:2e:35:
                    90:fa:e9:08:3f:b1:df:17:d4:38:55:0d:4e:db:cb:
                    5a:73:a0:66:52:6d:c0:ae:7f:bb:19:21:5f:20:d0:
                    a1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:F1:5C:FA:E6:05:FF:7F:F8:EB:7A:46:22:75:45:6C:D6:31:1E
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bc:a2:ff:93:19:6d:88:0d:a4:19:f8:ec:d1:95:aa:01:68:
         98:0f:6c:bd:ea:95:64:f2:8a:44:50:0b:d0:4c:4e:df:a0:1a:
         be:d3:91:f1:8d:9c:35:7c:54:70:b5:c8:bb:3e:81:10:48:15:
         45:08:f1:c4:6d:88:f2:eb:3d:7a:cc:9a:ef:d7:27:d6:93:f9:
         db:5c:dc:19:ff:0d:25:5d:db:5b:e1:fc:cc:40:4c:51:30:5a:
         3a:9c:66:d3:43:6e:8f:8f:a1:08:ea:5c:38:91:cb:4a:ac:b0:
         59:8f:b1:4b:67:68:17:7d:02:9c:26:f4:3f:21:33:da:20:29:
         99:8d:f0:d8:ce:d8:50:84:78:e7:c5:fd:ac:7a:3c:74:06:34:
         b3:63:6e:76:f9:b2:04:b3:ca:d2:ab:88:af:ab:e0:d1:ec:6a:
         26:f6:f9:c2:bf:38:cf:d2:15:ba:a6:6b:b6:5e:d7:50:1d:32:
         5f:8e:42:12:eb:2c:61:23:a5:3a:52:a1:e8:28:2f:6f:11:ae:
         ba:87:1a:44:04:96:e4:a5:00:75:c4:5d:13:95:14:95:21:0f:
         31:8c:2b:b6:1f:78:dc:c4:4b:b5:67:4b:ea:aa:84:5d:fb:35:
         26:cf:e0:84:b6:d5:9a:49:0f:d6:40:97:db:b7:23:4d:ab:f1:
         21:42:53:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s0bYJiu9UO+Vy+uG4Dl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm
OWY0NjUwHhcNMjUwNjI4MTgwMTA4WhcNMjUwNjI5MTgwMTA4WjAzMTEwLwYDVQQD
EygwZmQwZjE1Y2ZhZTYwNWZmN2ZmOGViN2E0NjIyNzU0NTZjZDYzMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOCqFoqUtZMaupx13jRQVz3INAmV
hfpQaJC5jtkBjUq6PIVmaoRhD890DUeRe1X++01Co6FP+3kkSNS94b6bJwrCsOdx
e/45VUQIECMr7duyebc6GudFF0rOgncXCvON/qMZ5iv5k57tcI9pH5ll5DpX0uu2
qv8NSUW2GQN74O52qmbvb8lV5X1D7Dm2288cYmp5WVI6gWrClDpSmSQ+nZzHEUfB
mc6THd/CRf8gQljQW4BK3YMuNKGESQa9fjSgaKRS7bHyV59ATGM39/uQ9xe4O6xy
h7HH6Zl7dL3mLjWQ+ukIP7HfF9Q4VQ1O28tac6BmUm3Arn+7GSFfINCh6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/Q8Vz65gX/f/jrekYidUVs1jEeMB8GA1UdIwQY
MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt
NmRlZjM5OGNlNWM5LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5
LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLyi/5MZ
bYgNpBn47NGVqgFomA9sveqVZPKKRFAL0ExO36AavtOR8Y2cNXxUcLXIuz6BEEgV
RQjxxG2I8us9esya79cn1pP521zcGf8NJV3bW+H8zEBMUTBaOpxm00Nuj4+hCOpc
OJHLSqywWY+xS2doF30CnCb0PyEz2iApmY3w2M7YUIR458X9rHo8dAY0s2Nudvmy
BLPK0quIr6vg0exqJvb5wr84z9IVuqZrtl7XUB0yX45CEussYSOlOlKh6CgvbxGu
uocaRASW5KUAdcRdE5UUlSEPMYwrth943MRLtWdL6qqEXfs1Js/ghLbVmkkP1kCX
27cjTavxIUJTWw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:41 2025 by rpki-client