Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
File:                     cke6Q-JwyYvcZCqePCGMpSTrD1M.mft (raw, json)
Hash identifier:          7w/n15ow2ywS9DjbCNFlSbLgbaFBwOz7tj00sf/Tk4g=
Subject key identifier:   21:1D:DD:17:60:9C:2E:A0:10:2B:D2:B8:25:79:4D:B4:FF:F0:75:3A
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Certificate issuer:       /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial:       0197B7B363730F7948463F4E17BC38CCC320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 18:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:16 +0000
Files and hashes:         1: 1SSRPhQGWDVRDl7tVf5cgz9wb9I.roa (hash: cAcXHNB5q2899YSFSUe/YwygvaFymSVR7Dvr6t//gOI=)
                          2: cke6Q-JwyYvcZCqePCGMpSTrD1M.crl (hash: xmVxF3SB65aTxCsch6JMKstz6TTw8T87Rgu5OjZ9eTk=)
                          3: icOqkD3iZ1uQhUc1od-t1KdaP8Q.roa (hash: R662CVA1MQV0WqGE3hZcMqQgQJpHzJMBr1PqZkwqav0=)
                          4: nYSUhhKNV1AT2H-4naVza27ZDOA.roa (hash: o6xNr5Ke3qqZYzCqrvTkv0D8Qt/kg5dwkN1dH2Aaq3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:63:73:0f:79:48:46:3f:4e:17:bc:38:cc:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
        Validity
            Not Before: Jun 28 18:01:16 2025 GMT
            Not After : Jun 29 18:01:16 2025 GMT
        Subject: CN=211ddd17609c2ea0102bd2b825794db4fff0753a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:70:db:cb:65:01:41:2d:af:d1:f4:08:c3:
                    dd:4b:15:31:c1:21:b5:52:6b:39:15:ed:ef:e0:44:
                    8e:d7:b4:73:29:b5:e1:d2:1a:3f:f6:7a:20:c6:69:
                    3f:20:d8:66:9c:7f:e7:85:5b:87:cf:7b:9b:3a:36:
                    43:4f:a7:38:a7:d3:cc:34:60:59:c9:7c:66:fc:58:
                    26:f2:34:9d:10:b9:83:d7:06:c5:f5:74:e1:f3:17:
                    58:32:5b:30:a4:18:0d:e7:4c:b0:1b:e1:38:85:45:
                    5d:40:7e:7d:90:26:10:3c:b9:90:57:47:a3:8e:55:
                    6d:6b:d6:fb:f4:09:04:29:4d:e4:63:e3:e8:4d:1f:
                    85:4d:23:67:09:c0:5b:60:97:b5:49:4d:75:43:02:
                    fa:a7:79:6a:51:f1:cb:f0:3f:db:10:ce:23:f6:94:
                    2d:44:05:36:90:16:9a:55:f0:4c:cf:ab:89:c3:fa:
                    91:da:63:47:d9:81:0e:03:af:80:fc:aa:78:36:ae:
                    2f:da:9c:91:a5:23:21:f1:8e:c9:7d:f7:d4:a6:3e:
                    c6:d1:56:b9:43:0d:26:6e:07:b0:ae:d5:ee:54:80:
                    11:66:99:80:89:c6:07:b4:57:03:3b:8a:d2:f1:28:
                    06:03:ce:08:ec:51:a6:cd:91:6b:97:49:02:62:0e:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:DD:17:60:9C:2E:A0:10:2B:D2:B8:25:79:4D:B4:FF:F0:75:3A
            X509v3 Authority Key Identifier:
                keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:55:9e:24:73:c8:22:32:f3:b2:ec:63:58:f8:a3:8f:e6:b9:
         a2:8b:22:ee:12:ed:85:5d:9b:a6:18:c3:9d:31:05:7a:75:b5:
         a3:91:e9:d5:6a:3f:36:2a:76:5c:6c:49:41:c7:b1:85:84:c8:
         ad:34:16:98:5d:dd:26:94:f6:49:24:fa:22:30:bc:91:f4:9e:
         ea:d4:87:66:b4:5d:87:20:4c:9f:7d:88:89:d8:2c:d4:1f:3f:
         b7:2b:79:7d:8e:e4:e8:46:59:04:82:5e:b6:b4:2b:8d:14:3b:
         18:5a:d3:92:25:5e:41:bc:61:0b:1c:32:21:62:0d:16:a0:89:
         6b:2a:3f:c4:9d:b1:98:c3:82:f7:10:b8:5d:8e:28:09:b5:68:
         5d:fa:3b:79:9f:b8:05:a7:05:95:4a:9c:0b:7e:7f:24:3e:59:
         bd:b9:15:a8:a7:6e:90:91:fd:39:20:4c:41:23:06:b2:37:85:
         d4:3d:8e:b4:79:fe:f3:25:45:08:37:17:4d:4a:54:47:10:ed:
         b0:3a:f2:34:30:9b:69:85:e1:47:bc:45:2c:2b:93:73:05:61:
         12:bd:b0:cc:0f:30:e2:1d:54:26:ea:c5:b8:4b:9b:b3:18:b9:
         ed:c4:04:bd:3e:87:09:2c:a4:e0:04:fd:b8:21:da:6a:39:20:
         31:c3:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:27 2025 by rpki-client