Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File:                     7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier:          WPPfUfMsH3CCKvBEYxbopqEBebPjTo1TQzrm8GqMowA=
Subject key identifier:   16:12:2B:D0:FB:7C:35:63:5B:C8:79:1D:E1:BB:68:E4:B6:E1:E9:E1
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer:       /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial:       0197B745407563CCA04126BA151874E47CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number:          15C3
Signing time:             Sat 28 Jun 2025 16:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:58 +0000
Files and hashes:         1: 0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa (hash: iLVj7sxryrS44+Um3qKoIRww0o5d/litSLFCSSNu8gk=)
                          2: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: 46sQhteroaidQM77cNVfAhCDHZ23Lcmyq5DoHOiuG8U=)
                          3: BUhsNJUBNyb2HSIUiIeGUaXbRSs.roa (hash: WZxDNbWAEQbOChQ4uBirZFUp84bvXSVkcscB3oLo9vU=)
                          4: g0sPCB79WMlgxKBl78JsjxBs-fY.roa (hash: X+EXtP8p8Q91QAPiVwkYVGvv2ZKJC7/ZwL2Di69yJ1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:40:75:63:cc:a0:41:26:ba:15:18:74:e4:7c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
        Validity
            Not Before: Jun 28 16:00:58 2025 GMT
            Not After : Jun 29 16:00:58 2025 GMT
        Subject: CN=16122bd0fb7c35635bc8791de1bb68e4b6e1e9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:02:7c:4d:3f:ba:9f:50:08:44:a9:c6:2c:
                    c5:cd:dd:ce:c1:c4:d9:f6:2a:b5:88:3e:79:23:09:
                    45:2c:ee:a6:ea:68:82:bb:bf:55:54:d3:82:e9:b3:
                    ce:8b:9d:b3:5c:6e:7e:19:50:03:c6:34:5a:c4:91:
                    9a:7d:a0:8b:ae:c8:79:e8:2a:f5:c2:0e:77:84:f0:
                    d3:5b:d0:e8:2d:d1:28:61:2f:c3:9c:c6:13:64:be:
                    ea:96:17:98:7b:e7:e5:c2:7a:a9:6a:5f:7f:ea:4a:
                    cc:48:3d:c1:8e:0e:c8:db:69:cc:30:c9:3a:9f:6c:
                    50:a9:4d:0b:af:cb:bb:f7:4c:8c:19:66:c9:74:ad:
                    f7:af:c3:3d:94:29:e3:d6:8a:80:c9:2d:0e:98:e4:
                    f9:43:a4:0b:bc:da:3c:d1:11:11:c8:0d:9d:a0:f2:
                    b2:0c:bc:f4:e5:b1:6d:6b:b6:3b:da:5c:09:b7:77:
                    8d:23:2c:c5:17:ba:1e:56:30:b0:44:a9:fb:5b:e0:
                    a4:61:c7:fb:bb:3f:8b:ab:4f:26:04:a6:92:e8:99:
                    07:a8:ed:3e:bf:84:2c:ba:04:5f:41:87:82:09:67:
                    40:f3:28:64:94:55:8d:e0:2a:5f:76:ea:ae:18:f6:
                    aa:91:db:90:9b:5b:06:e1:d6:39:52:51:00:a7:ef:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:2B:D0:FB:7C:35:63:5B:C8:79:1D:E1:BB:68:E4:B6:E1:E9:E1
            X509v3 Authority Key Identifier:
                keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:29:66:57:d8:aa:63:24:33:87:42:9d:b4:0c:67:37:96:07:
         7d:ad:f4:b5:74:cd:31:f1:07:2d:2d:1a:b1:48:16:9c:57:6b:
         27:b3:73:cb:f7:83:03:5f:ea:2a:22:aa:95:41:d8:94:f2:b1:
         dc:59:dc:77:14:5f:12:96:40:94:a3:75:38:50:31:1b:12:9f:
         35:0e:be:e2:44:e3:8a:d6:b3:f8:78:e6:49:ab:3b:a4:b9:3c:
         52:8d:3a:fc:c5:f9:29:d0:5a:fc:7c:53:70:cf:61:74:72:64:
         39:f2:97:11:f0:94:63:1c:84:ce:fe:9d:74:61:a1:0a:f8:ad:
         08:cc:98:d3:56:94:be:af:a9:ec:d7:b9:fb:77:71:73:48:f5:
         37:64:d6:05:44:1c:74:c1:99:5a:7f:0b:10:11:02:4b:c5:cf:
         b3:38:71:56:0c:ca:0f:4e:10:d6:ac:f2:b1:74:75:14:bd:59:
         b2:95:49:06:bb:d0:dd:d3:f2:1f:fb:db:d7:eb:18:2f:ea:54:
         34:04:74:c9:00:89:10:a9:2c:b5:e2:7a:04:8a:06:66:f1:10:
         da:2c:2f:73:75:17:58:69:ff:d6:fd:f1:54:ff:26:76:dd:e6:
         1a:ad:0c:aa:ab:f4:7b:50:db:6b:01:17:2b:a3:8b:cb:46:f8:
         85:c3:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:47 2025 by rpki-client