Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File:                     DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier:          qhBjVCVWWhn68wByuUVfKlItVojoMSW9Kz0OyWfiNQg=
Subject key identifier:   1F:22:DB:0D:F1:42:42:99:5C:EF:DC:9F:4D:80:44:B4:9B:01:8A:95
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer:       /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial:       0197B6D72CEE1FE3BBB0F20232CD44BD6D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 14:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:44 +0000
Files and hashes:         1: 27P-M6RaZradAhI02XRCxNJRajc.roa (hash: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=)
                          2: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: yIz+FEzPR8GgOuv0shINYLxk+VyIP5ujoqcEWqID2Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:2c:ee:1f:e3:bb:b0:f2:02:32:cd:44:bd:6d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
        Validity
            Not Before: Jun 28 14:00:44 2025 GMT
            Not After : Jun 29 14:00:44 2025 GMT
        Subject: CN=1f22db0df14242995cefdc9f4d8044b49b018a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:19:65:f5:da:fd:bf:7d:a3:d7:81:33:f0:
                    eb:fe:fc:a5:d5:69:49:32:f0:ed:09:7a:55:4d:d2:
                    b7:7b:b2:ec:e4:f2:c3:a9:b9:57:9c:43:e5:01:1c:
                    35:18:3d:18:a6:e3:fa:ff:db:09:c9:d3:2b:e4:dc:
                    3d:df:7b:86:f2:d5:cf:31:d8:38:df:63:23:25:73:
                    e0:54:54:51:7c:86:79:3d:c6:4c:fb:7f:27:88:57:
                    89:ac:4b:77:c4:2d:38:e9:15:fe:0d:e5:c2:2a:b6:
                    84:3a:a4:dd:b5:d0:c3:a5:29:71:ec:f4:52:51:3c:
                    dd:b7:30:90:a5:e1:bb:7b:56:b5:56:0c:11:e4:8a:
                    0e:dc:eb:0e:13:2c:c8:26:44:46:e5:f8:29:b4:83:
                    28:1b:89:6b:83:92:79:03:91:8b:40:f2:2f:ed:f6:
                    63:95:e4:00:05:bf:b6:b4:77:5e:34:d1:71:45:24:
                    b2:80:f3:e4:4e:42:e8:31:18:11:ac:d3:8e:4a:a4:
                    55:97:f9:9a:01:99:32:94:06:36:e0:56:4e:db:9b:
                    bd:ef:1c:13:93:91:44:7b:23:ea:d7:3a:db:02:4c:
                    83:2f:6e:42:6e:40:32:93:cb:db:50:9c:36:bb:bf:
                    92:a3:66:1c:cd:d5:b0:16:e4:d7:17:3f:2d:60:b2:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:DB:0D:F1:42:42:99:5C:EF:DC:9F:4D:80:44:B4:9B:01:8A:95
            X509v3 Authority Key Identifier:
                keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:83:43:98:f6:79:fa:3f:c0:54:7e:65:e6:86:4b:ea:7b:
         04:8d:ee:73:f3:2f:d5:be:58:eb:7e:24:bd:cc:7a:dd:7f:08:
         a1:67:c4:f2:4b:f2:e3:84:14:39:3b:36:0e:b1:6c:cd:73:04:
         b0:e5:f9:7c:55:04:c3:7f:57:79:61:9e:c3:b7:c2:8f:37:e1:
         c0:78:16:f8:d4:df:29:24:a8:6d:fd:2a:47:28:8d:c1:10:b2:
         33:94:03:c5:2b:ed:f6:6f:df:6c:f5:b9:2e:30:33:b5:34:45:
         55:e6:4d:d0:d2:45:f7:e1:c4:b1:4e:8e:fa:0a:19:70:cc:74:
         5a:c6:ac:df:5a:e8:06:81:67:59:20:71:e8:6a:7c:4d:2c:93:
         fb:51:c0:6f:5d:c9:71:3a:0d:95:a3:b9:34:17:f0:7e:33:17:
         ea:6c:20:22:12:45:6a:fa:b5:06:da:5f:bf:f9:d7:52:4a:f4:
         78:0b:e9:48:03:28:f8:bc:5c:b5:d8:bd:df:a0:37:11:bb:ab:
         2a:d4:fe:2e:7a:46:92:3f:66:46:ab:a6:12:d6:f4:4d:1d:77:
         d6:9a:7a:c2:7b:f8:f3:66:8f:e4:1d:9e:b4:fb:f6:b4:e3:3e:
         12:00:db:4a:08:95:f2:3b:7c:41:52:74:f6:2a:17:ac:b6:4f:
         51:03:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:09 2025 by rpki-client