Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
File:                     _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json)
Hash identifier:          N7cRmXy0e0UL0DtszIbni/l3mLjLPXIs/hMqcMsyCsA=
Subject key identifier:   15:3D:36:2C:1D:79:69:AA:51:4B:B9:00:76:F0:D5:9B:FA:F7:B3:41
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Certificate issuer:       /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial:       0197B6A0FFE23299D283A209212396D1C6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
Manifest number:          6A
Signing time:             Sat 28 Jun 2025 13:01:33 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:33 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:33 +0000
Files and hashes:         1: I32dN6KwFoewNSfpS4XBjG5myXU.roa (hash: PHYrnIWI7dP/AROY19OnK6Q0ENbOWp8OyZchyzmlbds=)
                          2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: fIZjVPDlis/PuJ9IsPFBQ/ZtXSnKd5jmj4iclnbDGAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:ff:e2:32:99:d2:83:a2:09:21:23:96:d1:c6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
        Validity
            Not Before: Jun 28 13:01:33 2025 GMT
            Not After : Jun 29 13:01:33 2025 GMT
        Subject: CN=153d362c1d7969aa514bb90076f0d59bfaf7b341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fe:60:1b:fb:f0:30:fb:71:49:64:46:fe:e8:
                    3f:51:21:10:98:e8:42:68:d4:de:87:d3:be:1e:a9:
                    37:11:09:7c:12:22:da:ad:07:f5:bc:08:f5:2d:31:
                    9e:74:be:d6:14:1e:ab:c9:14:de:08:8f:d1:6f:a5:
                    d0:29:ab:e3:36:7e:6b:9d:9a:ba:86:e2:92:66:b7:
                    e1:65:dd:f1:4b:af:3b:49:ef:ac:0f:b9:04:dd:82:
                    94:3b:7a:57:af:2b:aa:09:5e:5a:c6:7b:ca:73:cf:
                    ad:f6:c6:67:e5:79:de:1a:98:c5:a5:63:bb:d5:01:
                    64:7b:b3:74:2d:ae:70:38:f0:cc:4d:b3:af:a3:f7:
                    88:f4:e7:59:c0:2e:f6:ae:c0:28:8e:d8:36:fd:05:
                    86:14:04:2f:01:0b:f7:2d:aa:2f:d2:99:5a:19:f3:
                    0c:cc:04:46:29:22:9b:40:20:ea:67:89:37:07:b6:
                    b1:8b:f4:2a:8c:88:e4:e9:57:0d:78:05:48:bb:fc:
                    13:52:f5:2c:bc:0e:f8:27:b2:cd:6a:4f:11:aa:87:
                    7d:47:a4:f4:6d:cb:2b:63:5f:eb:ef:62:1d:f6:45:
                    f0:c2:00:76:bb:d7:ee:a4:97:59:c2:8a:75:6b:4f:
                    64:7d:70:a9:c2:be:cb:1e:09:8d:18:9d:47:72:d1:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:36:2C:1D:79:69:AA:51:4B:B9:00:76:F0:D5:9B:FA:F7:B3:41
            X509v3 Authority Key Identifier:
                keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:97:64:97:b9:b5:d6:b6:d4:c5:16:71:44:d1:a1:22:2f:c1:
         fa:66:fb:91:f4:f6:50:2f:34:f4:85:1f:ee:0e:c0:98:c1:b2:
         f4:d8:35:54:e6:7e:f1:11:8f:bd:8b:72:dc:c8:3f:7d:75:e1:
         fe:4c:c5:0a:d3:3b:99:06:37:6b:bb:66:8a:e4:81:37:f9:92:
         e1:3c:ad:ff:a1:1a:ef:91:b5:cd:ce:2f:49:00:91:ee:60:90:
         0d:0d:fe:7b:0f:97:5b:42:f3:7b:d1:53:9d:03:c0:7d:7d:fa:
         9a:8d:27:59:e9:c1:cd:85:28:6c:19:84:b3:43:2b:c7:4a:bb:
         7f:ca:3f:f0:a3:79:5c:29:44:db:0c:c4:95:84:3f:52:84:38:
         3b:02:e2:de:5f:bb:b7:ab:22:36:03:eb:43:78:0c:2f:36:41:
         d2:a8:9a:a0:e8:2a:fd:ce:c7:8b:d9:b4:60:14:83:c8:87:ff:
         cf:6e:fa:bf:9a:30:b7:d4:7c:29:bc:ec:35:e6:0c:24:81:1a:
         ab:93:66:cf:b5:62:5f:b4:6d:b4:83:a2:a5:37:41:dc:a7:06:
         0d:11:41:98:e1:cb:b9:9d:04:11:45:69:fb:2c:98:29:9f:94:
         7b:0f:83:47:ee:de:dd:e6:cb:99:56:e7:af:50:a3:a7:a9:25:
         b2:c9:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:16 2025 by rpki-client