Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          MIyYyGXuKb1bTnoKuqHOblrybOmktrJZq8I6SWpArO0=
Subject key identifier:   57:1B:61:32:00:BB:AE:4A:33:6B:3D:AB:15:B9:F4:38:C0:68:AE:D1
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       0197B7452A4C90CD90D5C2C3B003115AF951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 16:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:52 +0000
Files and hashes:         1: 0uRkVKY7XXnyDogUgS2r5XX9qoA.roa (hash: lp1oaMmoBZ+ARuOSInljJOVgC+Q+LtTeEykGOBERqsQ=)
                          2: 5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa (hash: yDLDGysDDqgqhb6WLikdy1EXoOl26sXWpiZCWG5MyOM=)
                          3: 9ER-EjHWCFxdiSxC-0UfxuWwEs8.roa (hash: HTr5ZfIPZkqpqy/GK7yq56zlAtqGayEHGuKpS3IdPQI=)
                          4: DpzvwQnVRaFViTZyqTXRWJwxueM.roa (hash: au+QUyze3MKMGVHiIM5HXwnLMoQJIUaM60I83uw/tEc=)
                          5: R5bViWXBO3ouBouRqDAFF7DEDMg.roa (hash: 1qmWPpwQKC0p19qQrIunGPBkKyWE5b9Vy7KJVtEO+pk=)
                          6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: 0NSe4Lgg/nlvoF/ilZGen0JVIbd2fn8FaRfbYNZ8CBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:2a:4c:90:cd:90:d5:c2:c3:b0:03:11:5a:f9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Jun 28 16:00:52 2025 GMT
            Not After : Jun 29 16:00:52 2025 GMT
        Subject: CN=571b613200bbae4a336b3dab15b9f438c068aed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:81:97:09:86:24:c1:79:d5:f0:6f:22:8d:
                    2f:1a:53:39:0d:e9:24:8b:54:69:4e:d3:31:4f:58:
                    48:cd:7a:b8:70:bf:b3:fd:92:17:3f:7a:85:0a:2b:
                    44:62:2a:7d:39:1a:3f:d8:55:70:3a:22:f3:95:8f:
                    b9:3c:30:a1:a8:81:0b:2b:72:2e:23:24:1a:f7:50:
                    15:7a:b0:90:a7:6a:97:42:97:35:16:72:90:c5:25:
                    79:ad:01:83:6f:c3:51:89:77:41:c3:3d:d3:51:fe:
                    49:a2:e8:69:94:1c:ff:27:28:40:f3:ba:23:13:45:
                    d8:bf:60:e9:2d:d2:3d:2d:81:be:49:68:fe:59:9d:
                    99:37:4a:a3:96:fc:3c:66:2b:e8:29:7e:99:6b:8b:
                    12:86:1d:92:aa:1e:20:5c:5c:02:64:73:5f:70:59:
                    4c:17:c8:d4:62:eb:78:55:84:05:1f:2c:8b:1c:5f:
                    6d:94:17:de:cf:9f:ee:58:4f:67:e8:a3:8d:12:a7:
                    6c:bd:d8:61:8d:c3:31:ad:36:8e:18:54:f3:74:a5:
                    86:d0:c6:38:21:bf:90:ed:d4:3b:b2:68:43:63:84:
                    76:e6:c8:1b:29:35:9c:ec:ae:47:94:ed:cd:19:4b:
                    67:d3:4b:ce:4e:5d:2a:56:4b:10:15:ff:e6:97:a4:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1B:61:32:00:BB:AE:4A:33:6B:3D:AB:15:B9:F4:38:C0:68:AE:D1
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:34:51:dd:15:0b:e8:2a:e8:04:a7:a2:0a:a8:94:ad:f7:fc:
         9e:23:0a:90:2f:0e:d4:95:bc:0e:ee:f3:9f:e9:c7:3f:f8:39:
         4a:99:11:8a:5a:d5:86:5c:0d:11:dd:02:6b:a8:6d:47:6a:16:
         5a:fe:82:09:49:33:c5:af:a0:e7:00:1e:e3:a6:d6:bd:65:5f:
         b3:f5:43:73:cd:16:a9:6b:08:56:ae:c3:ce:e3:07:d8:bb:0c:
         3a:d7:c6:16:03:42:cb:4a:66:e5:48:eb:0c:55:96:98:a6:3c:
         de:fd:37:ed:a0:f7:96:7c:06:7f:e4:6a:06:4b:e8:f3:9f:f0:
         df:ec:ff:c2:f6:8a:a5:4f:59:47:b7:f5:a5:22:26:a4:82:05:
         77:12:81:a2:87:05:0d:0b:ec:95:df:a8:0f:f8:66:fe:d5:33:
         9c:80:b5:22:e6:68:71:5d:d9:ba:36:47:5c:a2:52:c4:d2:2c:
         ae:99:92:31:9e:17:fb:1a:0c:14:90:4c:c7:29:de:7e:ff:e6:
         7b:e7:80:6e:a2:00:4e:16:d5:2e:42:d3:03:1a:5c:d3:4b:fd:
         80:29:80:53:e9:b4:ca:43:97:ad:ce:7d:a0:63:02:9a:7e:d6:
         77:47:67:ac:aa:f1:b6:9b:3d:9d:8c:22:2b:1b:71:78:54:52:
         86:80:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:36 2025 by rpki-client