Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          7e2I/TjqkgdRLJ4mkF8lfH2gxHi/oCt4BUHPPwRI/DU=
Subject key identifier:   9F:8E:2A:26:83:59:2A:54:94:1A:BC:43:DC:23:35:28:33:14:5D:76
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       0197B6A0E4149CFEAED4C0CFB9FFBE664E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          1547
Signing time:             Sat 28 Jun 2025 13:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:26 +0000
Files and hashes:         1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: 3A5crzSMUTiMw+yRLV+Rm+x5mbizK76DafssrGMrEQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:e4:14:9c:fe:ae:d4:c0:cf:b9:ff:be:66:4e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Jun 28 13:01:26 2025 GMT
            Not After : Jun 29 13:01:26 2025 GMT
        Subject: CN=9f8e2a2683592a54941abc43dc23352833145d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:d7:c2:d0:59:5c:c7:de:51:25:9e:c3:ee:
                    0d:9d:22:22:32:64:19:51:f9:51:5b:2a:aa:b8:f2:
                    c0:c3:2d:20:09:e4:59:06:ae:81:28:f0:37:43:7d:
                    58:2f:9d:fd:40:1e:98:79:ad:5d:d4:55:ac:6c:5d:
                    d1:a6:fe:8b:55:3c:ca:cc:a9:d0:60:b6:a1:18:54:
                    b3:0d:3b:94:5c:bc:a3:61:6f:22:5f:88:49:7c:67:
                    59:be:47:d5:b4:d6:5c:61:02:84:cf:53:0d:ab:bf:
                    47:0b:12:88:ca:1c:ff:c5:9e:e3:f2:6f:b5:fe:3d:
                    c8:18:19:4e:96:69:53:76:ce:a9:76:8b:1d:15:b5:
                    83:25:50:f2:8d:48:4e:6a:67:f2:af:ec:a4:b5:78:
                    29:ba:43:ef:c9:46:3a:c0:d1:38:38:4c:46:b5:87:
                    40:dc:7f:14:3e:e2:0c:ca:86:e0:5d:96:53:21:dd:
                    99:8a:e7:d4:f5:10:4a:8d:aa:a9:ad:07:fc:54:9e:
                    82:cc:6f:9a:77:ff:b0:86:43:14:21:a1:4d:99:8b:
                    05:0d:5c:df:aa:f9:b0:e0:53:01:7b:26:3c:ac:dd:
                    24:20:e2:85:a8:bf:d7:d3:04:a6:df:b9:73:8e:cd:
                    f3:eb:8f:86:69:21:ac:76:7b:78:ef:af:a4:d5:86:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:2A:26:83:59:2A:54:94:1A:BC:43:DC:23:35:28:33:14:5D:76
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:cc:9b:60:71:cc:49:9e:89:c8:a0:91:c2:81:d3:c9:3c:
         75:80:0d:04:b5:e0:1d:e8:e7:dd:78:5f:ec:3f:68:5e:94:7c:
         58:87:de:2d:2e:d4:57:c8:d6:40:57:d4:15:a8:34:25:77:7b:
         e7:34:3f:ff:3c:84:e1:df:11:9a:9e:be:8a:d3:9c:3b:c8:7c:
         8e:48:99:e3:6e:9e:f4:c1:ee:b7:df:78:95:4f:88:46:8f:0f:
         99:93:96:a8:a6:da:0d:08:97:e9:09:58:2b:c2:0c:2a:8f:5a:
         73:b1:e1:9c:c4:03:b2:d3:14:91:58:af:e7:d1:3f:bd:5c:ef:
         93:ac:e0:b7:ce:c7:ca:2f:42:37:3c:d0:d7:92:82:8b:4c:d9:
         22:4a:30:ef:38:8e:a6:df:9e:17:1c:7e:b9:a2:ef:bb:4d:c2:
         a9:92:f7:b1:45:a3:0c:bf:b6:db:f3:07:7b:4b:d5:17:ec:a4:
         a4:ab:e2:e8:ae:45:5d:9c:fa:bb:80:c5:79:07:b2:35:8a:85:
         dc:5b:c3:da:c4:db:64:ba:1a:64:ae:3f:54:1a:42:59:1e:1c:
         a1:d5:bf:bc:2f:e8:f6:e8:53:65:d8:1a:0c:d6:04:7d:16:8a:
         d5:15:26:98:6c:25:fc:12:cd:b1:d3:83:f8:10:cf:27:65:57:
         04:09:08:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:53 2025 by rpki-client