Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
File:                     rnqbF0Wlpww797zCwu4WZGCv96g.mft (raw, json)
Hash identifier:          9iL/tqPLCpj9jdv4q+14wavLyy5iFt9Q5U3xUyTz/LU=
Subject key identifier:   13:2A:9F:98:70:4B:7D:F5:26:38:B1:41:78:92:1D:EE:30:01:CB:1E
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       0197B6A1E059742E0B0E3B63041B3A4A8D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
Manifest number:          15C3
Signing time:             Sat 28 Jun 2025 13:02:31 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:31 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:31 +0000
Files and hashes:         1: NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa (hash: UKGnXTi/GeJEOIoHxk7WzSeeqHfs9EFC0zZJNKKSIz0=)
                          2: XA_piEc4HEvUHExh_2CSkkKu2EE.roa (hash: o4y+DZ7Kqo85gSPTmaUUa/xs87y4f7OVpkKcmJxleCE=)
                          3: f8xBUwiIZuwlbLideHYCraA5b80.roa (hash: 80zoqn9Od9Yp6Ppqm8QLXbeCtAS1Mylgf7fSAtsOaVc=)
                          4: lR6zP5U5RH-kGUiT4tee76n_n7U.roa (hash: d+2joVrqEnxO1Au13OpUY3xGwfVao9EUryyrW7jhHKE=)
                          5: rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa (hash: ANGzzWXs9WMc8fyGIbBpWcfcISDjUPoF4F+e/jtJ45I=)
                          6: rnqbF0Wlpww797zCwu4WZGCv96g.crl (hash: UrRDqDgo0KccaSitFIDEI/TAZM7EPuQUU9rWaoeuMb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:e0:59:74:2e:0b:0e:3b:63:04:1b:3a:4a:8d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Jun 28 13:02:31 2025 GMT
            Not After : Jun 29 13:02:31 2025 GMT
        Subject: CN=132a9f98704b7df52638b14178921dee3001cb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:81:fa:ea:e0:b6:0d:63:8e:e0:e3:ec:0d:
                    bd:ab:c4:0d:b9:e2:8c:e4:54:ab:d0:b7:b0:94:5f:
                    3e:42:50:44:7c:dc:34:36:8e:09:e8:3b:72:91:18:
                    9d:e7:99:6f:e4:5f:b6:ca:c8:92:fe:38:cc:37:f0:
                    0d:77:76:45:4f:9e:00:fc:ec:f5:a3:66:b1:ec:4e:
                    d2:22:bb:db:09:9e:a1:39:2f:a4:09:70:05:68:f8:
                    73:02:bb:df:14:70:bf:80:c7:0d:ca:e3:52:82:ff:
                    b9:5a:82:fc:b1:fa:8d:de:89:a7:e5:04:02:6f:9b:
                    c5:41:98:64:bd:03:4a:2e:f3:b0:28:33:e8:e4:51:
                    1e:fb:cb:30:bd:57:b1:0e:66:cc:88:ed:b3:06:34:
                    45:5a:d5:6b:54:5c:5b:b3:7c:e1:e4:b2:e3:0f:14:
                    fe:10:f2:1d:5d:f6:6b:a8:eb:15:72:c7:c0:8c:f7:
                    61:ec:dd:e6:6f:48:18:e0:b1:7a:b6:46:35:89:d0:
                    01:8e:c2:8a:87:70:f7:b4:ff:b7:b3:69:f4:b9:e1:
                    db:12:ce:b7:28:73:ae:e0:68:cd:68:66:22:81:90:
                    99:1d:f6:03:9f:64:03:26:42:32:d2:5c:d9:b5:37:
                    fc:e5:08:c9:05:7c:70:20:5d:fc:02:8b:fb:b5:d4:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2A:9F:98:70:4B:7D:F5:26:38:B1:41:78:92:1D:EE:30:01:CB:1E
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:00:fc:a2:48:66:36:4d:39:f0:f5:10:f1:3b:ec:ff:99:8d:
         10:b1:1e:94:a2:62:5d:6e:bc:38:fe:4a:71:68:46:9f:69:5d:
         ef:9e:51:a0:ca:ba:14:ef:7f:f1:e8:b2:07:f8:c5:5d:63:2f:
         1a:fc:96:7a:ff:ab:d9:e0:06:ed:ac:71:f1:a0:54:df:7b:77:
         4e:de:e8:d3:0a:90:a6:59:7a:52:b9:db:06:ed:8d:61:a6:55:
         80:de:fc:ed:69:5f:7f:ba:ce:63:0e:bb:5d:9e:70:01:b0:86:
         6f:4a:03:58:7e:3f:dd:37:1e:73:be:be:44:af:4e:ed:1c:75:
         7d:b1:a2:a2:f6:55:03:9d:0c:7b:51:05:6e:7c:e5:ed:75:7d:
         d7:c9:f1:25:4e:69:0b:77:54:0a:70:e2:6b:e4:43:18:38:64:
         41:9b:59:e0:b8:2e:b9:58:36:bc:71:02:ae:d4:f3:8b:bf:c8:
         d7:5d:d5:6a:8b:30:4f:f6:dc:8e:bc:54:da:3f:c2:21:e8:d8:
         7a:c6:22:77:e9:11:b7:5f:44:df:f4:c0:84:31:a0:07:83:29:
         3c:97:49:25:fe:1f:f0:74:a5:74:eb:5b:79:c4:45:58:71:a0:
         1a:84:70:96:ae:a5:45:84:bb:06:3b:9d:13:68:62:2a:5f:b6:
         e1:aa:ba:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:28 2025 by rpki-client