Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File:                     oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier:          dWltGNeSipP0DaqV6EWrm0eZxlvToH2KqiKo4bPTN30=
Subject key identifier:   C3:C5:E6:83:8A:5B:31:44:DD:15:0E:97:6D:2D:52:CE:43:E7:51:6B
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer:       /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial:       0197B6A195300AD1C7DEA9FB3485B7E8F6CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:02:12 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:12 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:12 +0000
Files and hashes:         1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
                          2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: P8XShaQCexnoA1ILsKi/F9OjJ8JYlubPi4FsOvjrvzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:95:30:0a:d1:c7:de:a9:fb:34:85:b7:e8:f6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
        Validity
            Not Before: Jun 28 13:02:12 2025 GMT
            Not After : Jun 29 13:02:12 2025 GMT
        Subject: CN=c3c5e6838a5b3144dd150e976d2d52ce43e7516b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:41:43:98:14:03:bb:13:d6:49:2f:d3:cb:
                    83:7f:be:c5:2b:fa:1f:ef:72:93:28:3b:12:0a:aa:
                    b9:94:76:e5:fe:de:6e:ba:30:9c:28:40:e0:55:27:
                    22:8e:ce:ca:d9:54:5b:b7:f2:7e:02:02:ce:d7:1a:
                    5b:13:77:18:85:75:d7:51:5f:1d:43:0f:0f:e7:df:
                    0a:02:0c:87:fd:ae:fe:9b:c8:68:22:02:35:f0:b0:
                    28:28:48:b8:93:24:84:7a:29:44:ac:0a:e4:03:c8:
                    41:c3:9b:ae:06:6c:78:ef:06:53:2b:b8:8c:b0:93:
                    0d:3a:f4:61:bb:c1:85:fe:e3:ad:57:e8:0f:ce:44:
                    8d:94:ee:20:0a:8a:e8:b6:76:9f:f8:7e:f5:e1:89:
                    5d:7b:4c:3e:8e:e2:26:f8:5f:ca:49:9e:f7:58:7a:
                    74:18:34:ff:20:16:3e:41:4f:be:ca:81:f6:ea:e0:
                    95:7e:8d:07:e6:9f:03:1c:3f:66:8a:1e:84:64:21:
                    d1:d0:b2:b8:9c:29:dc:95:72:b1:38:c2:49:5c:15:
                    a3:0a:16:45:89:54:76:90:c2:32:d7:b9:6e:e0:33:
                    39:d9:c8:21:e8:ec:12:4b:b1:18:ed:eb:34:31:4a:
                    8e:49:98:b7:04:8c:8f:8a:40:67:cc:f9:03:31:80:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C5:E6:83:8A:5B:31:44:DD:15:0E:97:6D:2D:52:CE:43:E7:51:6B
            X509v3 Authority Key Identifier:
                keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c3:85:db:1c:21:88:31:fe:45:8e:4c:8b:9e:88:37:0e:12:
         d0:c7:ef:82:96:cd:84:dd:ea:ee:51:b2:e8:4b:07:c0:55:ca:
         d3:0e:99:03:e5:db:6c:a5:4d:55:da:96:f2:72:43:34:ba:fd:
         ce:df:0c:6f:ac:d0:12:2d:be:42:c6:9e:88:44:41:15:cc:dd:
         5e:3b:0c:91:c8:60:a2:88:00:9c:74:78:ff:b2:dc:3d:d9:80:
         cc:8c:1c:cc:65:bb:2d:d0:db:f6:82:ad:18:24:33:8a:63:7e:
         13:2b:4e:95:eb:24:0a:76:57:14:62:c8:7d:d3:5c:28:5d:18:
         55:0e:4d:72:0a:31:81:69:33:cf:34:5d:89:de:24:20:9d:9a:
         4c:42:ed:9c:57:5e:db:0d:a2:b6:c9:e2:e1:b5:b9:a5:10:c7:
         82:1d:86:4d:71:5a:60:01:51:18:93:75:ea:31:0d:90:6f:76:
         d8:e5:4a:d2:18:e8:e4:ba:e5:62:3a:fc:5b:b2:9e:01:42:fb:
         8a:ae:00:64:a3:f9:7f:13:e6:06:2d:5a:9b:74:5e:43:e8:cf:
         bc:6e:af:dc:d0:ee:ea:2e:71:05:dc:27:2a:46:d0:4b:8c:27:
         a7:72:0c:ab:4b:1a:b7:5d:e8:80:cd:ce:fd:c5:a1:83:42:1d:
         58:7d:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:02 2025 by rpki-client