Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          dbApVIIq08hZFvpW98Ih2HdU0ci9w/KmYU51l1J/gUw=
Subject key identifier:   A5:C7:E6:66:6D:EC:63:A2:78:7F:39:8C:4C:79:9D:A5:B6:AB:88:05
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       0197BFDA58B5517A22094F254094A788889F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          15CA
Signing time:             Mon 30 Jun 2025 08:00:47 +0000
Manifest this update:     Mon 30 Jun 2025 08:00:47 +0000
Manifest next update:     Tue 01 Jul 2025 08:00:47 +0000
Files and hashes:         1: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
                          2: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
                          3: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
                          4: SllXdUUCPVChZ4jvhpor-ghAAj4.roa (hash: gzrQw/PD5uiW072kDXHdmBevESe9Vs8UwVovlju078g=)
                          5: UlaIUZkK3B529LjdTkdHqn2YBxQ.roa (hash: PIB38ClEzEekziyvI7kD6lwcN8Tv1wlGPtaK62LmSRI=)
                          6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: Q31yTgE8g/KiUQtYtH6h7YHpR952BTX4WYF+IBWjjK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bf:da:58:b5:51:7a:22:09:4f:25:40:94:a7:88:88:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Jun 30 08:00:47 2025 GMT
            Not After : Jul  1 08:00:47 2025 GMT
        Subject: CN=a5c7e6666dec63a2787f398c4c799da5b6ab8805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:4a:e3:66:c5:a2:7f:a0:9f:55:db:0a:24:
                    8d:01:1b:71:ce:fb:87:ff:f2:2b:e9:41:ec:aa:ee:
                    a6:f8:67:6e:19:c4:4d:0e:60:3f:bb:dd:74:12:8d:
                    89:da:25:29:67:0a:a5:86:81:c2:92:71:c7:1b:ef:
                    9b:a7:a8:dd:20:ac:b6:6c:58:bb:77:89:80:d2:88:
                    40:1f:c2:19:b6:19:e8:35:84:89:ad:16:ca:b6:68:
                    08:8b:ed:91:b9:18:00:b4:75:38:75:77:d8:ef:de:
                    ab:82:ff:5b:ff:88:a1:2d:53:e2:a6:6f:d1:6f:2e:
                    6b:4e:42:bd:4e:02:c1:1e:45:82:91:82:9a:75:03:
                    aa:ed:f8:cf:f9:e8:2b:d4:3c:6c:ab:c1:3d:bb:c5:
                    ca:b8:bc:ac:81:16:2a:84:5c:0b:1a:24:cf:13:2d:
                    e7:ef:18:45:21:3a:0e:b4:12:3c:f8:e5:09:5c:a2:
                    15:c8:c2:6e:02:b0:e1:71:b2:03:c9:62:fd:47:3f:
                    84:ba:08:57:11:28:39:ff:6c:66:a6:a6:25:6d:11:
                    c5:ec:5f:84:3a:2d:6f:a1:3a:0e:f5:4e:7d:cb:86:
                    4d:d6:b7:90:20:bf:38:33:70:5c:57:0b:b6:ec:ea:
                    86:75:25:48:c5:dd:88:f3:bd:a3:fc:8b:1f:de:01:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:E6:66:6D:EC:63:A2:78:7F:39:8C:4C:79:9D:A5:B6:AB:88:05
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:4b:ea:ef:98:2f:2a:ad:94:36:ec:d9:0b:0b:61:7e:01:
         99:87:44:2e:5e:5d:cc:b9:a4:6b:78:c3:d4:0f:06:da:82:19:
         f0:63:f7:7f:9a:39:a0:5e:60:17:4f:30:1a:d9:77:db:a6:44:
         e9:c2:56:ef:f2:3b:be:ed:37:65:0c:e6:df:06:64:b5:0f:0c:
         d8:3d:d4:3a:34:cf:50:c8:4a:32:69:e5:af:25:db:58:f6:a5:
         d9:31:f5:92:7d:ee:d6:d6:06:c9:11:2b:dc:af:14:32:02:cd:
         26:40:9e:1d:4e:79:f9:55:5d:52:e6:94:11:d3:cc:3c:3f:81:
         90:b0:e3:5e:fa:f5:d5:af:73:c0:08:ff:08:bf:ea:75:77:bb:
         b2:92:e5:c5:af:d3:ec:17:3c:fd:d3:5b:c9:90:2c:78:26:94:
         14:2a:66:45:bb:4b:12:5a:8e:27:28:67:8a:d2:fc:a1:9e:eb:
         e4:c8:00:03:6a:52:2f:54:61:e8:ff:4f:54:f3:76:64:60:36:
         b2:33:26:b4:78:a0:59:46:94:86:69:eb:c5:d8:b7:da:d8:c1:
         54:73:c6:35:ce:73:11:d4:2c:ea:1d:d1:3c:3d:be:5d:96:ba:
         9e:60:29:2f:f0:72:40:ab:cc:a5:59:49:36:6e:78:3e:45:d0:
         de:53:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:52:46 2025 by rpki-client