Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          LoCs3DXeYTQjL5VRCiXKP3UtVYKGLhtamddcfCnBsoI=
Subject key identifier:   52:43:1D:AC:09:AB:C2:7D:B2:3D:D5:AE:56:73:9F:92:43:4F:B1:41
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       0197C191D40612FD7CBA86C9A4FC75B1A29B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          15BA
Signing time:             Mon 30 Jun 2025 16:00:49 +0000
Manifest this update:     Mon 30 Jun 2025 16:00:49 +0000
Manifest next update:     Tue 01 Jul 2025 16:00:49 +0000
Files and hashes:         1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=)
                          2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: 7XWvekNG+JChpWtnSbeefVFHwbH0bf6BP1RHFSxY+uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:91:d4:06:12:fd:7c:ba:86:c9:a4:fc:75:b1:a2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Jun 30 16:00:49 2025 GMT
            Not After : Jul  1 16:00:49 2025 GMT
        Subject: CN=52431dac09abc27db23dd5ae56739f92434fb141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:5c:34:6e:22:7f:1b:78:89:b6:ab:ab:65:
                    99:96:0c:5f:8f:f8:70:44:fb:13:aa:ac:81:a0:3b:
                    92:dd:f4:41:ea:3c:58:e7:a5:ef:79:3e:5c:d8:77:
                    5f:2c:25:1a:1e:59:3d:68:a5:2b:ca:7f:c0:43:bf:
                    e7:cb:19:2b:1f:5f:24:3d:0e:dd:f5:10:38:91:36:
                    cb:c6:b5:f9:95:f6:ee:41:2a:32:66:d9:86:89:b0:
                    31:63:eb:eb:3f:30:67:51:74:aa:ee:bf:e5:ff:a8:
                    ae:a7:5d:06:57:9b:57:a2:d3:5d:2f:de:14:ba:8e:
                    71:a5:4c:7e:66:69:1f:55:01:ad:6d:b3:bf:e3:5e:
                    20:6c:0a:c8:6c:aa:38:5b:a2:d0:4e:00:6d:56:90:
                    73:02:5a:4d:87:42:46:16:7e:12:97:58:68:60:bf:
                    59:d7:c5:60:b9:0c:82:a8:c4:4f:cb:9d:2d:26:f9:
                    33:74:69:ba:73:16:90:eb:28:e6:46:ef:4e:42:fa:
                    a7:57:62:d8:bc:47:9d:95:d8:02:29:e6:51:e0:66:
                    d3:6d:ef:be:74:79:11:31:ac:2f:6a:0a:dc:ec:54:
                    7e:f3:29:63:54:5e:99:8b:f1:84:50:b6:86:57:37:
                    74:0c:7f:0b:c0:c0:37:bc:0a:83:47:4a:26:a3:09:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:43:1D:AC:09:AB:C2:7D:B2:3D:D5:AE:56:73:9F:92:43:4F:B1:41
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:2b:c6:e5:50:21:4e:a6:09:b1:7d:c4:69:20:86:a2:79:
         36:f0:98:07:86:b3:c0:99:2b:2b:8f:2e:f1:e7:8e:46:9b:85:
         9a:20:cc:ca:4d:82:78:ec:9a:c3:07:10:5b:c4:bd:fb:93:12:
         99:23:0c:fd:47:3d:cb:f9:fa:0c:6d:f1:e0:c7:f5:6f:b6:99:
         df:6e:87:9c:cb:4d:77:54:20:5d:fa:24:38:a3:84:85:f1:ff:
         db:98:3f:3d:c6:26:82:0d:8f:76:89:33:c3:d3:39:df:9f:9a:
         2d:7c:11:30:d4:97:1a:30:00:8e:7a:65:4f:cf:77:27:92:dc:
         31:4e:e7:10:da:9c:45:83:d1:59:24:88:9d:9f:02:b4:30:81:
         96:65:d8:7d:20:68:b6:55:f4:4b:87:90:94:99:ec:92:20:72:
         5f:57:a3:4f:b0:99:99:cb:f4:91:78:3a:0c:51:a5:2e:4c:89:
         8c:19:8f:6c:db:7d:1d:17:bb:8c:61:b0:3c:d7:d7:b8:8f:46:
         0c:10:d6:d3:da:c6:ca:3b:c4:a0:a5:2c:f5:3b:64:12:31:1b:
         49:03:24:07:ef:54:17:5e:a9:72:72:a6:76:87:5a:6c:38:04:
         5a:a3:59:aa:09:66:fd:7c:c3:00:42:38:85:45:f5:cb:28:40:
         67:7f:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:29 2025 by rpki-client