Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
File:                     _j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft (raw, json)
Hash identifier:          HQimI90nxVyGUiDZOLLpm2olkxLffITQqcaV6X7PWDM=
Subject key identifier:   7F:8A:A3:18:BF:27:B0:CC:C6:05:1E:19:F7:EB:95:93:D0:F9:0D:2D
Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
Certificate issuer:       /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Certificate serial:       0197B6D7585365F2482C7324F548A92C2C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 14:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:55 +0000
Files and hashes:         1: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl (hash: n3IAs2UnpN5+3blQk7LgH14S5Gdo9C7RroKvoq6GWR4=)
                          2: jvYIR4cGI1xTBTMHiHmlslGT8ss.roa (hash: XYWrze0y1RSFOkB9yC9oozCL7v1si1KQCdXxbKpu5VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:58:53:65:f2:48:2c:73:24:f5:48:a9:2c:2c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
        Validity
            Not Before: Jun 28 14:00:55 2025 GMT
            Not After : Jun 29 14:00:55 2025 GMT
        Subject: CN=7f8aa318bf27b0ccc6051e19f7eb9593d0f90d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:82:0f:b6:3e:5f:20:c6:5e:2f:af:b1:40:
                    75:2b:5d:c7:22:2f:4b:65:2e:21:78:07:e2:14:c9:
                    74:d2:40:e4:d9:f8:32:70:63:0a:0c:70:da:28:f2:
                    38:31:6f:df:b7:af:20:93:e9:d7:86:aa:b5:dc:91:
                    d7:da:61:65:ac:4d:73:a7:27:56:e2:0f:e5:f6:aa:
                    b6:93:8f:9c:79:74:c4:eb:bf:c3:df:2e:a6:36:46:
                    fd:af:f6:9b:56:80:d8:cc:75:fa:d0:2c:3a:c7:56:
                    1f:41:d5:e7:2e:6d:5d:5f:7f:2a:e5:72:e0:bb:1c:
                    cc:5a:47:18:72:58:f4:99:52:83:8a:f6:01:f0:d1:
                    6f:72:fa:8f:9e:fb:4a:5f:2a:c9:33:39:2a:79:07:
                    2f:17:0d:ae:21:9d:7c:74:fe:32:73:64:28:b4:26:
                    33:8f:9c:9f:76:94:09:79:ba:08:ef:6b:76:e7:06:
                    b6:c1:e1:37:3b:8f:d1:19:1c:39:ff:02:f9:ff:d9:
                    23:b9:97:71:d7:50:17:ca:59:de:ae:bc:42:86:c2:
                    b0:49:03:73:f9:25:8c:6c:a4:82:93:fd:6e:f0:c1:
                    9d:0d:78:ca:d9:24:55:3f:d1:62:74:95:05:16:b5:
                    05:77:de:cc:62:69:e7:7f:99:83:ca:25:4c:1b:f4:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8A:A3:18:BF:27:B0:CC:C6:05:1E:19:F7:EB:95:93:D0:F9:0D:2D
            X509v3 Authority Key Identifier:
                keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:db:10:03:90:77:37:d4:bf:89:85:da:2d:f4:bc:04:64:f8:
         68:af:a4:51:70:e4:b7:a0:06:15:91:ba:ac:58:70:33:43:3a:
         06:f8:14:42:85:26:f5:62:a2:df:68:f0:df:e7:49:86:39:38:
         6a:43:1c:68:62:c0:05:45:bc:99:21:b5:82:76:cd:65:57:f8:
         6d:f6:43:29:68:f1:28:df:5a:e6:cc:6f:ee:02:b4:8b:07:d8:
         91:89:d1:9e:67:0e:50:f7:bd:2e:db:37:93:bf:fc:56:37:60:
         32:01:fc:b6:de:82:fc:e6:09:ad:9c:51:69:34:17:6f:61:97:
         8d:b0:44:3d:8d:61:6b:a3:80:24:92:ff:12:3d:4c:5f:b1:07:
         58:66:33:e3:30:27:58:02:28:da:b7:35:ec:6c:8f:a2:a1:e9:
         2a:d3:03:4a:f9:d9:9f:08:72:ee:87:8e:26:6b:3f:db:c9:bf:
         cb:3e:44:eb:ce:ea:14:20:b6:98:ec:4a:56:09:21:23:99:1c:
         e2:d0:c0:4d:0d:e9:ca:fa:db:22:4d:06:65:78:b1:5b:97:14:
         11:c1:38:d4:ff:19:c1:33:3e:5e:13:ac:98:d3:2f:68:ca:1c:
         b6:00:70:6c:cc:6f:90:04:53:45:72:03:ae:f5:89:57:ef:4a:
         a3:f7:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:14 2025 by rpki-client