Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File:                     MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier:          uOXS6d2ZbMt5vTcAVE/0H5J8Jbp4RZiW8Q+iXtwuv6g=
Subject key identifier:   CD:2F:B9:CC:4C:4A:3B:61:67:FA:2D:E7:9C:CE:F6:12:90:01:C1:DB
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer:       /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial:       0197B58E0E11E15F3785796420AB87BADF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 08:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 08:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 08:01:14 +0000
Files and hashes:         1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: 2c2zHXcdBdzLDtCJUnnGuojet34Def/efCGp+vZsMP0=)
                          2: jIxoBxvUdMCHFAPIgbpTv82jWLo.roa (hash: HrwO1TMjewTexEY6JfFnwLbtTAOtQU58BOb2eJzb5To=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 08:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:8e:0e:11:e1:5f:37:85:79:64:20:ab:87:ba:df:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
        Validity
            Not Before: Jun 28 08:01:14 2025 GMT
            Not After : Jun 29 08:01:14 2025 GMT
        Subject: CN=cd2fb9cc4c4a3b6167fa2de79ccef6129001c1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:08:5c:6d:d4:4d:0b:78:92:f4:83:4e:6f:
                    13:74:c6:f7:b5:3f:cf:1e:9e:44:57:ec:d0:ba:ae:
                    fb:15:b7:2e:dc:f1:85:e5:f7:42:14:8b:24:93:a3:
                    f6:cc:bb:3f:2b:f5:e4:55:d2:6b:91:7a:24:8d:5b:
                    ff:38:5a:ae:90:c2:8b:2d:3f:4d:62:1f:21:73:87:
                    9f:4e:4b:75:84:99:99:1a:bd:2d:9d:78:d6:ea:1c:
                    36:6d:a3:50:fa:4e:18:c8:09:3b:68:53:d6:64:53:
                    1e:fb:0d:3e:43:08:6e:b1:ec:fe:9f:ca:06:4f:74:
                    b8:1b:97:b6:69:3c:0a:f7:d1:18:b4:64:1f:46:f1:
                    5f:ce:8a:e2:02:a0:b6:c9:53:27:14:ed:9e:5b:fb:
                    04:a0:3b:38:fa:ee:87:92:b7:a1:12:3e:1a:fc:af:
                    f2:c4:7f:68:64:40:90:8a:50:18:3b:65:c4:97:ca:
                    e5:99:8f:af:42:30:f8:1f:51:06:b6:64:b8:b9:49:
                    57:af:ad:7a:28:73:ec:5a:84:fd:ee:ae:f7:92:fc:
                    e6:0c:db:30:ca:05:92:7d:91:00:0c:5e:74:94:a0:
                    8a:e6:03:7e:72:8f:80:ee:02:5f:af:6e:f0:3f:3f:
                    7f:d1:2b:2c:05:4f:73:db:09:38:93:6b:e2:be:19:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2F:B9:CC:4C:4A:3B:61:67:FA:2D:E7:9C:CE:F6:12:90:01:C1:DB
            X509v3 Authority Key Identifier:
                keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:19:31:21:9e:ed:bb:c9:0f:fd:7b:14:0b:16:76:25:85:
         ca:c3:a6:1a:6d:35:c2:87:8d:ff:04:85:f5:19:4a:0e:01:ac:
         e4:a6:e7:b4:eb:01:25:1c:06:93:28:f5:f5:0a:18:37:59:1d:
         44:1d:29:f2:4b:8a:3b:3b:dd:d2:4b:00:f9:e2:4c:59:35:e5:
         06:54:ba:6e:43:b0:91:61:9c:12:63:9a:f2:83:49:c7:55:4c:
         ea:0b:3c:fc:f2:a5:2a:d5:07:ec:ce:d1:a3:73:43:46:58:ac:
         da:c1:f0:86:56:c3:ec:5d:44:ce:d7:1b:65:ac:26:d1:1c:19:
         85:f4:13:b1:63:77:ea:35:7e:be:71:3e:38:9d:5a:3d:1b:a2:
         8f:22:41:86:a3:89:53:a3:60:f2:63:45:49:dc:49:32:19:67:
         28:9a:57:82:3c:6a:9b:4c:2d:fb:cc:6f:b9:51:6a:e9:7b:05:
         07:5a:2d:6b:b0:c8:48:d2:20:fb:b7:55:54:24:6f:d6:b5:b1:
         07:37:c2:62:71:60:b2:df:4c:07:60:9e:46:e0:51:02:38:6b:
         6d:3d:29:b5:fb:f5:20:a9:e2:d5:7a:5e:52:7e:d2:fb:f1:f6:
         ea:c1:48:f8:98:f8:21:05:81:71:43:00:0c:a2:ca:0b:24:fe:
         63:77:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:40 2025 by rpki-client