Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File:                     Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier:          2v7uiLNG+zJB5TX2n6Zm1OtComP5fv9ckZnFt986NsY=
Subject key identifier:   BB:4E:64:D3:6D:45:2F:03:14:8D:CD:F9:BC:15:B4:19:2A:DF:5B:42
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer:       /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial:       0197B745B4E2D82BEEC5786E752D56818527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number:          15BF
Signing time:             Sat 28 Jun 2025 16:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:28 +0000
Files and hashes:         1: 23FE1oy_BAZmJkd81HCsu1MHa4M.roa (hash: XgMSku4Hr0QiLLVlfP0P+OjcCWijIwZIMflI7dpCQf8=)
                          2: 4dR87DFU1h-_n9gWgjfEcPKRNjQ.roa (hash: 2sOA9bFKi1Li43Qu+cU631T12GoMBvyIUcumh0ZnQK8=)
                          3: LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa (hash: 3vPL4LbfqaoCiLmMXdpcZ0SWEsuh6HbkyOFi9gXwiDM=)
                          4: ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa (hash: rqrMCzYgEY7X02NzXOKY4O8TfCQzErK1najWC4lkNO8=)
                          5: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: BTm/NbX5PWC2/DKfSn6hvzEDHPSH89NOuL1A0e01Q44=)
                          6: fyUduA7iLRzPOu8jJXAMIB-HOkE.roa (hash: cIQaQBrp3go+iSKqU55ZO7AX4q6Ht8Tb5+J8gXHDuFM=)
                          7: x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa (hash: 4r2sex74amynzwpK3bDSHVwPPeVxELbxt3yfW0ijSTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:b4:e2:d8:2b:ee:c5:78:6e:75:2d:56:81:85:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
        Validity
            Not Before: Jun 28 16:01:28 2025 GMT
            Not After : Jun 29 16:01:28 2025 GMT
        Subject: CN=bb4e64d36d452f03148dcdf9bc15b4192adf5b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:28:b6:6d:dc:c8:17:59:f3:13:ad:21:54:
                    c7:5e:ce:20:4a:63:47:ca:c6:c8:83:c2:14:1e:f3:
                    f4:77:29:63:3b:fd:af:b0:ae:1d:71:d0:5f:a2:65:
                    b7:d7:01:3e:ad:a1:17:84:b3:a6:18:40:27:a9:06:
                    f0:3a:ec:55:4b:62:60:ec:56:ae:51:bb:f8:3b:03:
                    11:f6:e1:9e:bb:1d:26:b4:34:1b:5b:d7:f9:e4:0b:
                    98:12:2d:04:f0:b5:dd:9b:5e:6e:a3:95:b0:62:04:
                    8b:f3:0c:59:f0:2a:8a:30:24:e5:0b:b6:7e:6c:49:
                    9a:0f:73:8e:c5:c9:10:fb:34:7c:ed:50:86:9f:7c:
                    16:4f:32:9f:88:3a:57:5d:ec:dd:26:ba:d1:1d:48:
                    60:b6:4c:f6:0d:2b:42:9e:80:36:1c:1c:69:c1:2a:
                    47:62:d9:ab:40:89:4e:96:42:82:7f:c2:1b:88:d9:
                    cb:52:19:91:b2:43:1a:5b:05:1d:79:5b:d4:af:6a:
                    e4:b7:62:f7:14:d6:c6:06:f1:27:98:8e:c9:c0:14:
                    17:8e:ba:ba:7a:a4:49:89:3d:ed:7f:e5:72:66:7f:
                    80:33:9d:41:5b:e8:bb:b9:61:8d:d9:4d:45:91:0f:
                    b6:b4:e2:ed:49:be:d7:fc:1e:c2:63:26:58:1f:a7:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4E:64:D3:6D:45:2F:03:14:8D:CD:F9:BC:15:B4:19:2A:DF:5B:42
            X509v3 Authority Key Identifier:
                keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:5f:97:90:f3:9b:a2:f3:38:46:5d:1a:3c:d8:86:2a:fc:
         d8:b1:31:2f:46:36:c1:cd:a9:62:28:9f:ed:48:b1:9e:dc:31:
         55:5c:45:37:92:b2:bc:d9:61:a4:a5:9e:fb:a3:89:9b:26:8a:
         c8:f3:23:82:99:3d:f0:03:33:87:90:61:11:0f:77:fe:7d:a4:
         7b:d7:6a:f6:56:50:4c:bd:f2:84:ee:22:44:cc:9a:b0:f7:a0:
         30:73:ea:a5:b7:8a:b0:77:37:15:85:1d:c3:2d:18:dd:b5:2a:
         f6:18:b9:42:83:7a:c9:c9:22:d6:1f:b0:f8:90:7b:50:dd:9f:
         87:25:70:77:05:01:9a:15:3f:2b:c2:1d:c8:df:a5:ca:99:eb:
         ec:49:77:fc:56:0e:40:ca:b6:16:f1:18:ba:e1:35:7e:44:9a:
         eb:3f:7e:39:bb:a0:85:bb:8f:c1:e9:34:ab:b6:ea:47:08:1e:
         35:8c:35:5b:02:49:3a:2d:38:34:44:b8:4f:38:4e:f4:35:26:
         61:31:c6:26:07:17:65:1e:c3:43:93:66:34:8f:d8:76:33:80:
         0f:a7:a6:0d:c7:b3:a3:97:c1:da:a7:fd:57:d1:32:8d:c3:af:
         ad:00:c0:76:f4:ff:52:f7:b0:b0:a5:74:0f:6b:76:4b:50:58:
         9e:16:a5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:32 2025 by rpki-client