Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File:                     RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier:          91tgYM9s5xQco7pkOU+XSJxulMPkFxWqmQIw5ymzmLQ=
Subject key identifier:   02:92:CC:8E:E9:9D:BB:75:78:37:6E:7E:65:08:A2:F7:6B:55:CB:8B
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer:       /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial:       0197B7EA8D0F8AD97D5B148D8FBAE557B789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 19:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:31 +0000
Files and hashes:         1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: 4bzOADmHjwyOylTPTqlrnKHL9N6Guvz5mZBjdVXCHls=)
                          2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:8d:0f:8a:d9:7d:5b:14:8d:8f:ba:e5:57:b7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
        Validity
            Not Before: Jun 28 19:01:31 2025 GMT
            Not After : Jun 29 19:01:31 2025 GMT
        Subject: CN=0292cc8ee99dbb7578376e7e6508a2f76b55cb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:8a:d0:75:ff:37:a7:2b:93:54:c5:1b:f9:
                    da:66:4e:39:bc:5f:9c:63:8b:d8:8c:1e:04:6a:c4:
                    1b:89:c4:f1:c2:ce:6f:d1:b6:cd:b0:e2:96:c9:61:
                    09:2d:31:3b:f6:bc:4c:d1:3a:4e:5b:ad:7f:b1:74:
                    59:8e:62:ec:67:fb:68:3d:e3:11:2e:6c:6e:2e:4d:
                    7b:2b:c0:bf:12:98:29:b1:9f:ea:3a:60:42:f1:85:
                    28:fa:7e:f1:1a:26:1e:c8:3e:48:f5:ba:68:75:1d:
                    00:4a:bf:d2:47:31:a3:27:55:a6:19:54:96:e3:7d:
                    f7:45:17:4d:a3:c5:be:28:b9:95:b2:cb:7a:96:bd:
                    3e:08:76:fd:3a:03:ca:3e:e7:35:fd:d5:b8:10:e1:
                    68:e7:fd:df:4a:89:f6:e4:30:0c:a1:5f:76:4c:d4:
                    c1:72:7e:f1:b3:b4:c8:7d:06:80:af:68:5d:e5:95:
                    26:92:36:6d:2c:51:ba:77:75:1e:6e:ff:f9:e2:c6:
                    dd:c2:01:fe:e9:76:a8:fa:64:45:b0:7c:7e:8d:e7:
                    75:b1:59:aa:52:d0:25:a1:b7:08:91:09:90:52:85:
                    ef:26:62:ad:34:dd:8f:d4:09:7a:2a:9f:f1:ba:9d:
                    aa:4c:07:26:57:7c:91:11:56:ac:44:d3:22:c8:2f:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:92:CC:8E:E9:9D:BB:75:78:37:6E:7E:65:08:A2:F7:6B:55:CB:8B
            X509v3 Authority Key Identifier:
                keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a4:6e:2c:bb:db:12:f7:9a:e1:0b:e3:e9:0d:e8:c6:82:49:
         4c:32:82:21:23:f9:34:7f:71:c3:be:7a:72:07:66:f0:d7:27:
         82:a4:2a:23:6f:c1:d7:0d:58:b8:5c:8a:2a:9f:9d:44:06:a5:
         77:b2:30:71:67:9d:cc:39:dc:92:f5:23:56:ab:55:a5:e8:db:
         13:70:1b:68:17:8a:44:f9:d7:03:23:0b:35:6b:63:6f:6e:a6:
         bc:d0:36:3e:c3:30:8d:7e:70:86:c7:9d:d6:12:33:62:50:2a:
         ee:fd:35:1d:43:47:7e:7d:6a:8a:49:3c:2f:c8:cd:ed:91:a8:
         be:e0:88:c1:18:93:af:29:e5:f9:ff:17:10:0d:54:71:fb:ae:
         61:6c:9b:b7:d6:f9:e4:3e:d9:44:aa:a5:01:ab:aa:9c:27:2c:
         97:7d:da:e7:5f:ac:10:69:e5:8e:1b:b1:1c:05:65:32:78:ec:
         49:76:51:36:13:4d:eb:3b:94:5d:38:1b:51:2b:14:ca:8f:5b:
         f6:02:e5:41:b2:fe:24:b2:73:54:7a:fc:97:99:b0:7c:a2:a9:
         5c:8c:63:af:e1:87:9c:e0:de:dc:3a:5d:7c:79:f0:a5:92:ec:
         5d:f8:e0:37:15:3f:fc:e8:ce:c9:66:f5:da:c3:95:8a:fc:95:
         13:c8:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:50 2025 by rpki-client