Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          35h4eJUz2CjOZ+D3E6g8c591OtJuPGyzBQiBiCCAJeQ=
Subject key identifier:   D4:83:59:ED:93:84:E5:17:2A:8A:94:4B:3A:69:35:53:8D:DA:B3:6F
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       0197B74511BB3021D5719BA1702846137C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 16:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:46 +0000
Files and hashes:         1: 2p40Nc2xaHE8kZlDDAIZtTe36X4.roa (hash: Gggun6qomuBE+OhHHJ4qJm9ChIbCJjaRrYY7HesQ4j4=)
                          2: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: WhSSI2+QNm7/v1HeyPR4giY2btHSne8uLbt8b9FB2hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:11:bb:30:21:d5:71:9b:a1:70:28:46:13:7c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: Jun 28 16:00:46 2025 GMT
            Not After : Jun 29 16:00:46 2025 GMT
        Subject: CN=d48359ed9384e5172a8a944b3a6935538ddab36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:9a:04:03:81:e4:bb:85:5b:c7:04:63:a1:
                    dc:cf:2a:18:2b:97:86:53:bf:be:15:d8:6b:de:79:
                    81:61:78:7d:c1:d4:d5:39:b3:20:3b:2c:36:65:ae:
                    e5:a7:ea:22:c2:97:11:9e:79:e7:35:12:7d:79:61:
                    ab:40:07:1d:4b:a2:b7:ae:72:31:d6:49:59:a8:ab:
                    39:f3:ad:5b:33:5e:fa:9e:65:09:bc:05:26:82:78:
                    bd:dc:79:16:4f:66:8b:44:a7:67:3a:04:22:b4:83:
                    88:61:d8:0c:fe:00:d4:14:8e:c4:5c:98:b0:d4:56:
                    55:63:54:5c:57:85:3e:1f:02:07:df:d2:d9:37:d6:
                    0f:fb:82:ae:60:f7:5f:1c:a7:9b:97:0e:a2:a8:73:
                    57:42:63:26:62:33:4f:58:1c:10:91:06:66:41:ae:
                    56:94:b4:11:ae:a1:63:ae:7f:65:e7:0c:70:9c:28:
                    80:7f:55:f3:5c:29:6a:0a:b3:21:5b:f7:b6:49:99:
                    4d:a3:87:00:7c:44:fd:d1:9c:cf:5c:9e:94:c4:f8:
                    30:61:27:19:16:95:cd:cf:d5:6c:0e:be:ce:e0:8d:
                    bf:43:f8:7c:4e:0a:55:9b:a0:dd:c4:2f:d8:e0:0c:
                    f6:ff:71:fd:fa:5d:e7:08:ef:5a:96:2b:10:62:80:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:59:ED:93:84:E5:17:2A:8A:94:4B:3A:69:35:53:8D:DA:B3:6F
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:31:cc:ff:3f:5c:b6:45:ea:91:77:90:95:e6:96:de:60:
         86:8a:b8:cc:36:3b:8c:92:65:a6:a5:c7:b9:ed:42:e4:7a:d2:
         45:67:3e:1a:06:1e:10:de:93:c1:e5:13:2d:89:61:b1:ea:45:
         a1:f4:fe:0a:93:25:84:06:77:23:6c:6c:97:19:88:60:10:e0:
         6b:3c:a7:fc:74:bc:a8:06:03:c3:05:7f:20:80:1d:a7:33:8f:
         0d:c9:11:d4:b2:39:32:d0:3d:7c:61:a1:b7:8b:29:08:0e:56:
         e1:40:a1:3f:ae:a8:24:07:f1:d1:b0:ad:ae:a9:06:61:05:57:
         ae:00:96:54:5f:aa:4d:ea:40:2f:b6:cb:4e:ba:2f:f0:a5:95:
         09:ee:bc:b5:67:55:67:94:15:af:ed:04:12:01:03:38:13:c4:
         0f:df:08:08:7d:44:79:06:09:35:33:a9:95:c7:26:be:7d:a5:
         af:f0:77:52:e3:6d:c7:51:01:b1:22:28:33:98:ee:67:9f:28:
         e9:97:d3:5f:80:5a:a9:5f:f0:a4:d6:fe:50:b8:4e:28:3a:49:
         de:a4:8a:b4:35:b8:30:f1:7c:60:09:9d:68:60:8c:18:ae:99:
         c4:88:36:b6:4d:9c:1f:52:b8:2d:ba:6d:94:f9:97:71:cb:34:
         d7:bf:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:33 2025 by rpki-client