Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File:                     C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier:          9eO6ApuKaznSwatmsM2G9PJpOISL+8INifxT4Ce+6yQ=
Subject key identifier:   B2:83:55:2C:F3:2C:BB:0B:2D:F9:50:A0:C7:EB:4C:A7:98:24:D0:45
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer:       /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial:       0197B7B36643E012A9ABBDD9B880E04AA1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number:          15C3
Signing time:             Sat 28 Jun 2025 18:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:17 +0000
Files and hashes:         1: 1Rd2o3xUjPYq6-ROGbojsnIAO7o.roa (hash: cJibfgam1opzds5Qh9r7Y5ffttnidwSOVT40ptzFnqs=)
                          2: 3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa (hash: S8E8XfDmes95rq1PbjLgkDvVZJpWeDUS/8l576aU10U=)
                          3: 7bJ_SXsvQs5jd90zxR_xlvABeGo.roa (hash: m0ZQ2Y2DbXV8jV6KvTNs6fUZ/bk3yiFcpgd8GYS9O7Q=)
                          4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: mtGpaTCfP5O08WZtSfjY1RmSD6w+bkM1KEvAqVGXA/U=)
                          5: EJIUsUOKvSLerwNQFS-Out5zZuM.roa (hash: D433E6UiMyX9KdcjAcomX19JFn+CfTOeAqT8DsBwSkY=)
                          6: IYymNdWawqstgCP4XTcQ0LRxyO4.roa (hash: zZeH4Zhf/0r9N1702in9DCWq7U55L0ULISwTrHj2H68=)
                          7: L1Bz6qAa7Tw2r0koEROI1LNkc8U.roa (hash: DocEMWhWVMmnhBegXTSWZpGGhsBAl4jcHIRujEDNT44=)
                          8: b_Dm6TuKr2O9F9em_a6cktDchPg.roa (hash: ehArjKJWDMxsQnB7k5Ijrml5MK5YWi9DCvAWzUWkArc=)
                          9: vdMwrE1WRBo6tPAM0c8ANEH4m7w.roa (hash: aAOimEwL2ZyXBynFWKnhjaaS/YCd7rqkh4wnbJ4qboQ=)
                          10: xkRsFChgw8FgF1z4ealSBYfjSiw.roa (hash: c2XTA6ndUBR9DMhPW66OSPqlDjn7RwF/yQC+0Ynbm/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:66:43:e0:12:a9:ab:bd:d9:b8:80:e0:4a:a1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
        Validity
            Not Before: Jun 28 18:01:17 2025 GMT
            Not After : Jun 29 18:01:17 2025 GMT
        Subject: CN=b283552cf32cbb0b2df950a0c7eb4ca79824d045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:9a:24:55:ab:a9:47:e7:e3:b6:4c:6c:bc:
                    e3:12:fc:82:f7:95:51:e8:aa:b5:6d:87:f6:ad:09:
                    ac:e8:52:8e:8d:3b:bc:62:7d:7d:ea:33:3e:7b:f3:
                    ea:e1:74:a9:c9:9a:32:c2:3e:8e:6a:08:01:52:ea:
                    67:03:7b:d1:21:04:a4:6c:7a:74:e2:b8:8e:56:ec:
                    b4:06:34:db:38:0b:1b:b6:59:8c:f4:5e:07:7c:b9:
                    de:99:d6:b9:4a:bd:7c:dc:51:af:b0:b9:c4:78:1e:
                    a3:13:37:ef:ce:a4:b0:4c:06:44:79:59:53:3d:ee:
                    72:c5:e3:79:e1:6c:58:6a:e1:d9:b6:b0:ff:d1:93:
                    01:8f:45:36:c5:7d:05:11:39:3e:37:15:0b:24:92:
                    af:93:21:dd:64:4a:fb:cc:c9:ef:ac:ca:82:05:25:
                    39:3f:41:88:8f:8b:2d:85:0c:7e:2e:fb:6c:f7:b7:
                    33:87:10:35:53:0d:2b:a6:f6:53:e8:c8:8d:75:62:
                    78:67:f3:4e:fe:40:3d:78:86:b6:00:d3:da:09:25:
                    7c:fe:86:2b:39:8b:14:b9:cb:82:03:aa:26:c1:8f:
                    09:e9:8d:8d:b2:aa:0d:51:55:ba:33:94:a0:3e:34:
                    19:a8:fb:04:30:a7:0e:ad:9a:60:43:48:96:5a:47:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:83:55:2C:F3:2C:BB:0B:2D:F9:50:A0:C7:EB:4C:A7:98:24:D0:45
            X509v3 Authority Key Identifier:
                keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:75:ee:d7:c4:f9:45:9a:72:05:86:4e:61:22:73:7b:55:15:
         e9:50:96:0c:77:05:f5:b4:eb:8b:52:f4:d9:3e:e2:a1:49:8d:
         b0:2e:76:8e:dd:67:1c:cc:29:7b:dd:1a:68:1d:a1:cd:83:e8:
         6d:ac:4f:09:a0:34:54:76:9a:70:56:50:24:cd:ab:09:f9:29:
         73:52:f5:6a:d5:49:46:34:a2:b6:cc:ca:e0:9a:e4:a2:13:db:
         98:c3:53:9c:70:a1:a9:e6:89:df:6f:5a:17:4c:70:bd:f0:f0:
         f1:a2:c2:a5:0f:ba:c5:71:31:e5:0e:e5:a5:c4:1e:77:ce:32:
         93:43:f9:5a:0d:6f:e5:22:d9:b6:a4:95:86:80:6e:49:8f:13:
         37:15:f6:12:65:70:6e:c0:0e:8f:87:ea:1c:13:ad:e4:95:05:
         11:d3:f7:ae:24:b9:ac:89:37:ec:5b:cf:8e:e1:51:92:be:51:
         52:ac:28:29:f5:2b:d7:1c:2d:bc:e9:fc:3d:33:ce:8a:fe:03:
         61:e3:99:99:09:47:27:6a:a9:34:8c:0b:a5:e7:5e:fb:46:ab:
         29:51:7e:a7:fe:f0:e4:5a:d3:f3:ae:12:d3:f6:dc:b8:f9:44:
         e4:7e:c9:64:28:90:d8:a8:67:b6:36:dd:8b:87:a3:57:1a:50:
         8f:85:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:06:50 2025 by rpki-client