Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
File:                     _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json)
Hash identifier:          FLS8qvdMzUda1dhfdIn1w3unLrns4ZaHWOxLU10piVg=
Subject key identifier:   3B:95:EC:C2:9E:60:40:AD:69:98:9D:9F:D4:60:10:66:20:80:70:40
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Certificate issuer:       /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial:       0197B77C421AAD5C1CA10EACB17B6C9D9E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
Manifest number:          15BB
Signing time:             Sat 28 Jun 2025 17:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:03 +0000
Files and hashes:         1: SQnsB4pgBnmpIi4TRKO7zpVO0eA.roa (hash: WWdVpcd3MWSz2a/cTGWg0pR5ff1Hobu49xdGhZEZSxE=)
                          2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: HtqrfqI2cXXO0DegLlR9dGMuxAtjWvvNXX8bq+GXARk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:42:1a:ad:5c:1c:a1:0e:ac:b1:7b:6c:9d:9e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccca62cbe743328555483a857e521863f953b41
        Validity
            Not Before: Jun 28 17:01:03 2025 GMT
            Not After : Jun 29 17:01:03 2025 GMT
        Subject: CN=3b95ecc29e6040ad69989d9fd460106620807040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:f8:57:dd:ba:64:88:e4:03:41:45:de:4d:
                    91:cc:32:1f:fd:24:b0:3f:68:f1:fd:50:bc:4d:43:
                    5d:7e:6a:05:42:0b:be:a1:34:62:ea:9e:4a:a0:d6:
                    dd:ba:1a:af:6f:11:36:64:29:1f:56:ed:c7:a7:b8:
                    a3:92:6d:6c:e1:c0:2e:d8:d0:9a:60:61:af:9b:99:
                    00:5a:62:92:06:cb:e6:68:69:f1:fd:bc:ec:94:9a:
                    c8:dc:a5:3d:60:00:fc:3d:6a:1f:7d:c4:ee:8d:5b:
                    46:fd:ad:94:78:46:82:41:b4:c5:d0:92:5d:18:d2:
                    02:11:d7:da:64:7b:b0:e9:90:80:b3:4e:c0:d1:ab:
                    87:78:af:4c:9b:31:9b:fd:01:dd:6d:1a:f6:24:a0:
                    0c:04:a4:57:61:e0:c5:8a:95:87:a8:21:1f:19:c2:
                    65:bf:da:32:05:08:0c:29:40:b7:72:e7:a9:e4:a7:
                    f2:d7:5f:6d:f0:25:95:5f:85:c2:26:50:c8:b2:ee:
                    4a:61:5b:a6:57:00:8c:65:90:6e:cf:1e:97:58:aa:
                    46:93:9c:b1:ab:4c:a0:30:6d:a3:6d:27:25:f1:09:
                    68:fc:12:d4:6f:0d:6f:84:3a:28:c6:30:47:7e:45:
                    5a:7b:3c:34:bb:a5:60:a1:d4:0b:ad:66:af:71:00:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:95:EC:C2:9E:60:40:AD:69:98:9D:9F:D4:60:10:66:20:80:70:40
            X509v3 Authority Key Identifier:
                keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:1b:a3:ba:f8:68:80:86:72:33:2e:17:a1:14:26:d5:20:
         06:a8:3c:7e:7a:c9:5d:0c:9c:07:f3:69:63:94:d8:49:1d:58:
         2e:81:68:65:06:ac:7f:a6:a6:b7:06:bb:c1:4b:11:2f:d3:21:
         bc:7c:ed:a1:f5:9b:34:c6:5c:93:38:31:68:07:e7:ec:80:a5:
         19:ef:ab:80:e1:5f:4e:98:dc:0b:d9:99:44:b9:c5:2b:84:7d:
         70:d1:28:85:78:a8:d0:4c:f7:f9:f7:93:41:a9:d5:6b:f4:5e:
         bb:e8:83:70:46:4c:a2:2f:db:8a:99:59:1e:3d:24:c3:3c:7e:
         c6:69:59:cd:93:2d:4f:97:65:e5:6b:91:c8:19:b5:4c:c2:80:
         bf:c4:c5:a9:07:61:fb:81:5c:e8:2f:f1:7c:b8:5f:f9:34:91:
         73:b6:d8:f3:3e:d8:b1:2e:b6:e7:4f:66:26:d2:4d:d3:6e:80:
         5f:5d:c7:c8:e2:7a:59:5f:81:a5:a1:96:a0:d0:47:03:a2:ec:
         90:17:47:9f:f5:2c:ee:f2:01:f9:52:1a:0e:92:a4:00:a5:2a:
         c3:1e:b2:69:6a:81:fa:54:26:89:1e:40:05:bc:65:db:a2:2e:
         86:63:72:4d:bc:f3:03:dd:10:b5:1f:92:41:a4:27:cc:5c:35:
         f6:ad:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:32 2025 by rpki-client