Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          UGGtDcjXhBycG9PHRwV2Lyvt9XFRnJ5RosuqyPoodJE=
Subject key identifier:   A2:0A:E2:F2:6B:41:E0:5E:32:09:27:BE:95:A0:03:EE:E0:95:D8:A8
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       0197B7B32CA8911A74BA29FABBCB4B874976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          15BC
Signing time:             Sat 28 Jun 2025 18:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:02 +0000
Files and hashes:         1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
                          2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
                          3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: VZG99QKRYJCksq8zNT4d7wsN+8XSEvnNK27/QN6qdl4=)
                          4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:2c:a8:91:1a:74:ba:29:fa:bb:cb:4b:87:49:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Jun 28 18:01:02 2025 GMT
            Not After : Jun 29 18:01:02 2025 GMT
        Subject: CN=a20ae2f26b41e05e320927be95a003eee095d8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:3f:05:4b:b9:94:52:9b:af:46:49:a6:69:
                    b8:0e:5d:c5:94:45:0f:cf:e2:04:da:3e:34:d3:b8:
                    ef:f8:f0:4f:3a:05:29:28:e7:2f:ec:98:8c:ec:04:
                    ea:d0:dc:9a:42:1c:67:47:d1:3c:91:88:30:a8:60:
                    5e:b8:da:27:05:37:59:65:8c:51:93:d6:e1:78:7e:
                    cb:df:53:d7:91:cb:27:48:43:5e:80:4a:27:bd:46:
                    ba:90:89:43:37:57:2d:8d:be:35:60:18:52:36:43:
                    4b:24:4b:93:30:de:83:07:86:44:3f:27:37:40:aa:
                    87:2c:4c:51:77:d1:cf:2c:99:ce:66:90:a6:6c:b1:
                    48:19:75:5d:6c:83:e4:ea:b0:a6:64:f2:13:44:4b:
                    a0:ce:14:fa:96:0c:72:22:70:62:88:a5:67:90:71:
                    8b:89:b4:15:57:ce:3b:b5:a1:f4:57:6c:3b:fe:e5:
                    ec:ff:c5:b9:be:ef:e2:ec:ec:17:51:d1:37:ee:a1:
                    69:6d:af:b3:cb:6a:36:08:c2:c4:1c:01:47:0a:b0:
                    e6:15:c8:25:50:de:bc:01:e9:b9:a0:8f:b7:36:5f:
                    6b:4e:09:f4:b5:9f:bd:53:ae:4e:b8:1c:5b:b9:51:
                    b5:d3:43:f5:0f:82:be:f5:a5:32:fc:a5:82:b1:45:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0A:E2:F2:6B:41:E0:5E:32:09:27:BE:95:A0:03:EE:E0:95:D8:A8
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:20:1a:54:f7:86:21:7e:12:e7:a2:b9:60:d6:ec:b8:79:05:
         9b:55:9c:61:40:b9:c6:d6:c2:71:ca:0f:ea:1a:a3:3c:89:40:
         b5:b2:ff:56:15:fa:5b:93:bb:12:60:c6:e5:c6:95:bd:ec:66:
         22:96:ad:ad:8d:90:3e:ee:99:90:5f:f8:c6:76:ec:dd:ee:0c:
         f2:ce:b4:0f:22:56:e2:a1:77:82:90:25:fa:51:87:f9:de:eb:
         bd:21:2a:eb:82:0b:22:2f:84:e4:42:51:03:90:1b:3d:f1:1d:
         c3:bb:98:4c:80:0a:0a:5f:cc:6a:1c:fc:4a:17:d7:69:6b:f7:
         3e:3e:6f:10:da:60:e0:9e:c9:95:3b:fe:cf:b0:b7:4a:dd:ac:
         bc:22:cd:7b:82:1e:8b:0d:24:06:18:a5:c8:75:4e:cb:09:71:
         99:7a:2e:ce:8e:8c:d3:65:00:83:51:6c:eb:32:a1:92:97:f7:
         5b:48:36:5a:4d:5c:f6:21:9c:24:1c:55:9e:08:e3:65:5a:51:
         d5:ef:75:6e:c6:77:11:0c:26:a5:d7:a4:b7:45:d6:e2:b5:06:
         d2:f7:39:6b:66:f5:6b:39:36:ab:d7:20:b0:87:3d:f0:b1:fa:
         b4:1d:68:d6:7a:52:64:e9:5a:17:03:88:5f:6b:42:16:be:de:
         b8:1f:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:41 2025 by rpki-client