Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
File:                     IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft (raw, json)
Hash identifier:          0aAnDbzTQzv1QvaP1U0n40D+0MV00JWUxumhyGMCdS8=
Subject key identifier:   18:1D:B8:EA:4F:1D:80:B8:BB:E2:2B:84:C4:7E:FB:7F:B0:1F:C4:21
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Certificate issuer:       /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial:       0197CB4A21A5BFEB3BBC0A5CBD8A2B9297ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
Manifest number:          15EB
Signing time:             Wed 02 Jul 2025 13:18:42 +0000
Manifest this update:     Wed 02 Jul 2025 13:18:42 +0000
Manifest next update:     Thu 03 Jul 2025 13:18:42 +0000
Files and hashes:         1: IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl (hash: tRkmO5iHEALl55SJftmM3Uc41GRGFOR9Cf+AMw64o5k=)
                          2: Q8etSu2zHMkh6fhsXllq0m85sqg.roa (hash: Aasfzwuv8iCEYaBcficgkTOl5p9Jnx6y2dL1fKqUxfY=)
                          3: R99dYNqYsBqUsChphTk93qUHPQI.roa (hash: oITPzkMB7sLtvkSUO+8ORkUXyH71yZzthGpvgYu/GMw=)
                          4: YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa (hash: JJTAqpTGe2vNlEv4BQ7ae6jf0gv/R7qn+RigFBVB2r8=)
                          5: jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa (hash: 0uCBihxg/sVC+EOc4ZTIYJf8x4v2kocHLJVgzm9lM24=)
                          6: wxI5PYnsJV_pw-ZAaHHG4istOuM.roa (hash: MuOSU2DUhtvwHObwNbqVRHZsUbztYSCYXG4GZ/vH3/I=)
                          7: xv12OPtaTpKWrICjs27-0WrsmIg.roa (hash: X8XG/cdIF+kjQf+VKvmL60lRdGE9r9sJ1I4ddr9jEgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:4a:21:a5:bf:eb:3b:bc:0a:5c:bd:8a:2b:92:97:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
        Validity
            Not Before: Jul  2 13:18:42 2025 GMT
            Not After : Jul  3 13:18:42 2025 GMT
        Subject: CN=181db8ea4f1d80b8bbe22b84c47efb7fb01fc421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:35:46:8f:f6:0d:6b:da:85:e5:e8:8a:5b:
                    ec:e9:c3:6f:d3:05:e0:46:f1:d9:9c:fd:81:9c:d2:
                    75:13:a4:45:79:4e:2b:60:be:e5:63:08:77:f0:b8:
                    dd:b0:81:81:bd:1f:0d:c5:62:e3:30:7f:3e:eb:07:
                    74:7e:24:df:33:d4:e6:6a:ad:d8:9b:20:65:36:83:
                    f8:e3:5b:98:db:79:69:d4:18:98:e5:30:c0:af:72:
                    d0:ff:38:db:a0:f7:23:22:24:3b:13:80:2a:03:36:
                    8c:88:c8:5c:62:b6:d9:e9:c4:3b:51:10:29:e4:ed:
                    33:64:f9:e2:4a:36:2b:8d:cb:08:9c:14:69:5e:d8:
                    79:7d:fe:50:5d:30:51:c9:b4:9c:ef:60:8e:ee:b4:
                    f3:3a:a3:1e:34:fe:80:9e:11:75:d0:1b:4f:13:1f:
                    8b:45:41:84:6a:60:fc:93:89:b9:1b:4a:fe:44:19:
                    ed:86:09:e0:1d:61:8e:c0:22:91:57:c6:ec:36:54:
                    30:13:8d:63:d3:11:93:75:0d:06:de:93:de:45:24:
                    e2:8d:71:f7:6e:8c:fc:37:2e:dc:d8:4d:43:d6:60:
                    4d:d3:44:99:c4:9c:f4:dc:bb:29:1b:4f:75:f7:f5:
                    67:20:8c:99:05:03:48:3e:67:fe:de:34:6c:58:b2:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1D:B8:EA:4F:1D:80:B8:BB:E2:2B:84:C4:7E:FB:7F:B0:1F:C4:21
            X509v3 Authority Key Identifier:
                keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:a5:ae:f6:67:d8:f6:06:48:a2:13:d1:69:bb:a3:a3:bd:
         bd:7b:4d:9a:cd:7b:03:70:10:a0:d6:f8:01:68:73:52:8b:9a:
         7d:30:dd:d9:92:7b:1f:de:30:db:c9:b8:b3:d0:26:b7:c9:a4:
         c3:e0:f5:86:bb:62:8b:5e:de:72:fe:5e:33:06:9c:6a:9f:71:
         26:3e:6c:4a:6a:8f:ee:53:c7:09:bb:62:51:de:d2:56:fb:46:
         d6:de:e5:5a:9f:4e:53:7a:42:eb:c8:f3:02:a6:df:fd:96:90:
         4c:0b:00:64:d4:e5:17:e2:3e:6c:0b:e3:6f:d0:77:6f:ac:27:
         90:08:50:2f:11:f5:e4:68:7b:2c:e0:23:9f:f0:59:27:1b:b1:
         19:f9:30:2a:18:56:f2:39:83:a1:41:93:96:60:44:ec:d0:eb:
         b9:ce:fb:a3:46:ed:44:aa:28:9d:6f:1b:62:fe:6c:98:de:aa:
         f3:9b:2e:a7:49:c6:c7:b7:d4:19:97:b5:e6:00:1f:13:1f:40:
         38:ba:b4:cb:3c:73:d5:53:3c:c5:13:3a:ce:14:cc:81:a8:25:
         d9:b4:21:7a:b3:dc:fa:a4:5e:a7:61:c2:8d:05:82:cb:7f:ac:
         a4:a2:68:bc:d9:93:c2:5c:f2:c4:df:6a:6c:73:81:c7:8d:5b:
         41:45:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:26:38 2025 by rpki-client