Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File:                     A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier:          JP8wUKmWTmQpV2ceJMcTpnIB+E8lNNDEtgl9hrVRKYI=
Subject key identifier:   14:BD:22:74:57:62:5B:11:98:38:C8:51:9C:A1:4B:38:08:05:D5:0B
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer:       /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial:       0197B77C026999822A27CDC6CCF95762AF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 17:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:46 +0000
Files and hashes:         1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: debwzYRa0aPFyNxWuMZlCL+lk5SBRUILIxK0819EcRI=)
                          2: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (hash: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:02:69:99:82:2a:27:cd:c6:cc:f9:57:62:af:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
        Validity
            Not Before: Jun 28 17:00:46 2025 GMT
            Not After : Jun 29 17:00:46 2025 GMT
        Subject: CN=14bd227457625b119838c8519ca14b380805d50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:f9:8d:bc:4d:0c:75:0c:19:cd:cb:09:59:
                    dc:55:02:6f:47:9f:eb:ff:65:f8:f8:89:c2:5f:7a:
                    8f:4e:ce:f8:69:52:47:08:39:1a:3d:c3:9d:83:d3:
                    d4:eb:04:b5:75:ea:f8:b8:16:48:f9:d5:f0:1b:a4:
                    9e:c8:18:b4:10:70:2d:03:8f:14:81:59:07:7f:fb:
                    f5:52:fc:cc:cd:1f:fd:c4:d7:f6:3d:a5:a2:00:41:
                    66:a9:fe:d5:5e:83:e1:a3:24:18:ea:69:b8:fb:c2:
                    da:ea:01:f8:7b:1d:1e:9e:fa:1a:5a:98:4a:1f:77:
                    16:ab:d4:eb:5c:c9:81:87:fe:c0:e5:c8:28:01:61:
                    f4:9a:c4:63:75:31:cc:7f:ec:52:c1:d5:25:b9:bc:
                    98:ed:6d:53:11:db:3c:81:73:fd:f0:8b:a3:bd:52:
                    5d:66:3d:ee:3b:91:d8:47:6e:36:0d:e3:90:e2:79:
                    30:48:52:e5:66:3c:1c:e3:5a:1e:7a:7f:f9:2c:c9:
                    bd:ec:83:3d:20:ce:01:29:e9:aa:dc:8a:1f:e2:29:
                    26:64:2b:48:9c:cb:3b:84:ff:cf:f2:67:38:9e:0e:
                    03:ae:3a:b6:e4:2a:45:43:12:4f:56:35:ec:ae:65:
                    b7:5c:81:8a:bb:59:b5:07:04:e8:95:20:11:a6:bb:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:22:74:57:62:5B:11:98:38:C8:51:9C:A1:4B:38:08:05:D5:0B
            X509v3 Authority Key Identifier:
                keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:42:58:f8:f9:53:2d:c3:61:71:46:91:1e:76:9d:18:ba:93:
         f6:84:c1:e6:6a:62:ee:ab:3a:51:2c:aa:0c:3a:d1:ad:ca:a3:
         12:d3:50:57:1d:43:98:ac:fb:4e:0e:f6:00:4a:ae:03:3f:9a:
         1f:16:3b:cb:cb:3a:ce:9c:7d:67:eb:27:a6:55:8f:40:4f:82:
         0d:60:65:98:f5:7b:53:97:81:e2:37:a2:42:b9:0b:03:ca:5f:
         1d:51:6f:51:eb:cb:5e:a7:5a:c5:42:86:27:0a:ea:fa:5d:46:
         e4:68:8d:7d:34:50:f5:40:ab:60:21:0a:3b:61:42:32:42:09:
         6e:43:f2:25:f4:9b:96:10:f2:e9:04:3c:91:2d:23:3c:d6:98:
         3b:10:91:e9:9a:ae:3c:51:98:1b:2c:c2:aa:85:17:92:88:05:
         ea:7f:5e:1a:47:59:f2:1a:bc:21:a7:36:5e:36:9f:cd:6d:09:
         fd:09:8d:ca:e0:aa:3c:2b:64:9b:d6:6f:2b:f9:fa:ba:88:f9:
         1b:e4:4c:94:58:ec:77:64:39:43:4e:0e:c9:5a:bd:fb:1c:1c:
         64:71:07:53:16:d1:85:d8:9f:d2:ee:7d:5b:5d:94:1a:bb:0d:
         2c:e1:6d:87:07:ba:72:87:6a:97:cb:a4:b2:68:87:7f:fd:9c:
         5c:c9:3f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:52 2025 by rpki-client