Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File:                     33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier:          RngrmWdZx95w4sOPg3D6r3iZsEp7XdxWdpuzjyL7rs4=
Subject key identifier:   E8:EF:06:C6:53:EA:3C:27:F7:6E:E7:99:71:C7:8B:D1:1B:C9:39:FF
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer:       /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial:       0197B6A2013BEC237007B968109D170B4577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 13:02:39 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:39 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:39 +0000
Files and hashes:         1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: dBjnjd3xGNSRwo8sRIpCNexrWf3wswFkg8RhsLm5Hr0=)
                          2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
                          3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
                          4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:01:3b:ec:23:70:07:b9:68:10:9d:17:0b:45:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
        Validity
            Not Before: Jun 28 13:02:39 2025 GMT
            Not After : Jun 29 13:02:39 2025 GMT
        Subject: CN=e8ef06c653ea3c27f76ee79971c78bd11bc939ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:cf:2d:e9:0d:5d:5b:19:48:a7:64:bf:38:
                    b0:57:c1:92:26:c1:b6:1b:d7:c4:6c:88:5c:96:66:
                    df:0a:d0:1c:54:6c:c2:ba:60:6b:f5:9b:15:d5:9e:
                    ec:c6:d4:67:2f:7d:7b:62:7a:f0:0d:aa:52:fb:f0:
                    a8:cf:7a:ba:89:b2:98:c9:96:e3:b5:d4:6e:89:cb:
                    03:c6:8b:53:95:06:fc:6e:5a:c3:c8:94:30:91:b7:
                    c3:7d:8f:20:ad:91:98:85:8d:fb:81:a6:fa:ed:ff:
                    e0:6c:76:00:e4:a0:89:38:16:37:01:37:c9:03:36:
                    15:ca:bf:fe:38:12:30:64:6e:71:6b:92:42:a0:f4:
                    1e:ed:99:eb:58:9f:70:80:79:b3:c2:75:61:bb:80:
                    a8:84:e3:f9:44:71:79:48:93:69:59:15:3d:08:03:
                    dc:14:30:d3:cf:5d:1e:5e:b0:8e:30:16:bd:a0:8e:
                    41:59:9b:29:e6:ce:18:7f:d4:ea:fd:76:95:6d:84:
                    1c:3f:e2:ca:d6:07:c8:38:b9:2f:fc:e3:fc:5e:2f:
                    10:a8:70:d0:7e:b8:70:e8:e5:6c:d9:24:de:5a:64:
                    53:b7:1b:25:33:e6:67:53:4d:41:45:e1:90:0a:15:
                    09:1b:ee:ad:3c:0d:f4:dc:17:66:d1:98:83:d9:99:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EF:06:C6:53:EA:3C:27:F7:6E:E7:99:71:C7:8B:D1:1B:C9:39:FF
            X509v3 Authority Key Identifier:
                keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:24:5d:41:d7:83:17:0a:fc:ff:d0:e6:85:61:59:b1:a3:
         1a:65:57:21:ea:e9:9c:2d:61:55:a5:fa:a1:c3:e0:44:3e:ff:
         0e:d8:f7:c0:7e:a8:dc:60:3a:da:cf:db:8f:bb:e8:95:66:cb:
         55:36:34:27:06:80:02:51:d3:9f:f2:df:64:d2:64:aa:58:e7:
         3a:53:0a:69:50:1d:53:50:1e:4a:19:df:ad:33:f1:17:ab:3a:
         ba:80:7f:6b:7a:cc:0b:0e:f5:bc:dc:64:6c:dc:14:62:7e:47:
         78:14:f6:86:5c:9b:b5:76:34:c3:0e:59:86:48:02:d6:a9:8f:
         96:f4:e4:39:a8:62:db:96:9b:3e:7e:71:f9:63:65:65:49:ea:
         37:fa:bb:b3:e5:dd:a2:01:71:78:8a:2b:69:7c:b7:e0:84:18:
         49:c3:25:26:e6:62:55:bc:f0:3e:be:a5:36:60:26:45:f7:7a:
         38:f2:a4:82:ed:6e:d3:7e:89:5f:79:3c:82:6f:d8:4b:c1:52:
         a8:67:f7:05:88:a4:e4:25:54:51:27:2d:a9:f6:c3:e7:24:b7:
         49:64:65:ce:98:33:01:bc:8d:fb:3c:fb:f2:76:d5:99:17:c7:
         5a:30:c1:e6:b4:59:10:f6:54:91:f8:14:2e:44:9d:ea:e6:4b:
         07:fb:06:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:10 2025 by rpki-client