Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File:                     cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier:          XLHvX2zM/r0HScFJRRWINd2WnkN2OeDaGkY93mEeXrc=
Subject key identifier:   F4:DC:94:D4:26:9C:F7:D0:67:10:81:F3:AE:BE:F2:DD:11:93:0D:88
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer:       /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial:       0197B70ED63197F68D0975D038351DC20EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 15:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:32 +0000
Files and hashes:         1: 5j4kigVKwcUINFkbJ3xSgMqflUw.roa (hash: kVxN2YetN80jXaobnulfC7lyMJ7WxoaWB7joRYX4FHo=)
                          2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: 6XomhM62akoTXNNQHzDxkBqQDNYm85hVceQgVMamYLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:d6:31:97:f6:8d:09:75:d0:38:35:1d:c2:0e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
        Validity
            Not Before: Jun 28 15:01:32 2025 GMT
            Not After : Jun 29 15:01:32 2025 GMT
        Subject: CN=f4dc94d4269cf7d0671081f3aebef2dd11930d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:e6:56:f8:ff:80:74:a5:26:63:52:8c:de:
                    26:ce:9c:75:53:d6:8f:4a:f1:17:f9:99:f3:3d:67:
                    87:a2:da:d7:19:09:b5:c0:c2:f5:8b:88:99:f8:0e:
                    bd:80:36:91:4f:aa:1d:68:0c:6b:14:9d:10:11:ee:
                    33:40:0c:85:ea:87:f5:f8:94:06:a4:12:5d:e8:40:
                    79:d8:92:d8:dd:d2:c3:7c:e0:9b:24:f4:f6:8d:2f:
                    a3:c9:57:3a:88:b3:ad:8c:f2:fd:ad:c3:c8:15:84:
                    cd:7c:68:04:45:a7:90:02:b6:b8:69:f3:fd:6e:86:
                    9e:6c:2e:9e:ad:d5:fa:7d:ae:78:f9:07:9f:9a:54:
                    9c:3e:6e:5b:88:d3:13:dd:37:9e:47:c4:2b:80:cb:
                    5d:c1:e8:5c:9a:74:ca:7b:1a:54:d1:c9:32:0f:e9:
                    e3:cd:e5:6c:69:c5:ed:01:e7:53:ea:f4:4f:17:dc:
                    33:09:a8:2e:56:4f:92:c5:5a:33:c3:8d:72:cd:e3:
                    ea:2b:84:a4:3d:71:c4:b6:a2:da:60:13:92:d6:98:
                    f7:bc:93:39:6d:bf:f0:04:5c:e0:e4:92:80:d9:17:
                    ab:86:ff:05:9a:d8:07:8f:37:ef:2d:f8:f1:31:54:
                    a1:be:4c:8a:6d:70:0a:61:9e:18:2f:5d:3a:26:7a:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DC:94:D4:26:9C:F7:D0:67:10:81:F3:AE:BE:F2:DD:11:93:0D:88
            X509v3 Authority Key Identifier:
                keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:99:2b:04:da:fb:22:de:a7:ae:28:69:44:d8:db:12:d5:7b:
         c1:7d:88:91:3f:4a:cd:70:73:40:2d:07:9a:7f:dc:b1:ca:b3:
         c1:df:50:cc:32:83:1a:4f:fa:ec:23:3c:13:0b:03:54:e2:98:
         8b:9f:ef:45:83:94:e7:1f:77:45:c9:79:6d:39:ab:e9:32:c5:
         16:b2:87:66:83:3b:20:c4:e2:75:c9:d1:ad:04:de:59:83:7a:
         97:68:db:87:c3:91:74:de:61:fc:dd:e2:e7:1c:de:26:aa:0c:
         97:47:7a:a6:2d:99:38:2d:77:27:81:30:fc:e1:75:6b:b4:76:
         d9:9a:68:5c:1b:1c:1d:4d:13:2e:8d:59:38:c9:23:78:80:88:
         10:4f:00:1a:4b:ba:1c:b4:0f:c5:cd:8d:79:30:56:67:c0:25:
         50:4b:53:7b:9c:c7:1e:57:ef:1f:53:e2:65:4c:ba:13:c8:03:
         78:d2:cc:ae:31:b0:e1:91:7a:98:2d:09:2c:5e:62:fa:5f:0d:
         6b:e0:e0:62:30:4c:af:5a:98:17:ce:3c:e2:a8:a1:f7:3e:dd:
         4c:9b:25:45:67:86:82:47:ca:6f:a0:4b:f6:7f:b6:1a:1d:58:
         b7:6c:87:8e:f1:27:ef:d3:b9:33:89:be:03:37:a6:35:5e:e4:
         be:da:65:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:26 2025 by rpki-client