Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File:                     R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier:          dZZw/Xe+Gij7N4I2Gn/E6Z65VIGs17Cb4CJEvNmIgTo=
Subject key identifier:   60:FC:EE:8D:0E:09:6F:48:EB:9E:8D:F8:4C:B5:E0:29:95:38:EB:BF
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer:       /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial:       0197B7450C5503691A74D20F5AB2E434A23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number:          15BD
Signing time:             Sat 28 Jun 2025 16:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:44 +0000
Files and hashes:         1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: x5BtRnXjdkjn6FYeIjg/kiQeLMXWurd/3S2bER1eU4I=)
                          2: ULHC_eqps-Zhve3ylast8DZ7_B0.roa (hash: rS2DzXzv6b1NgQdmnOKMIDSPXpweT7iIgimqwwzrLDM=)
                          3: VuGkSohHUfq_yXd_IRur3wQhe6Y.roa (hash: BWYBYUzZHQt0NYFkHSXMP74Q5d+hL0sst0bi6Iqm6QQ=)
                          4: mqcBsZguJ4u7DQyG9frvwf0EmHo.roa (hash: 0n6BWPSoOW6nqo6SiNgRiIzfLmFx0RVI3omPqv7vWao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:0c:55:03:69:1a:74:d2:0f:5a:b2:e4:34:a2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
        Validity
            Not Before: Jun 28 16:00:44 2025 GMT
            Not After : Jun 29 16:00:44 2025 GMT
        Subject: CN=60fcee8d0e096f48eb9e8df84cb5e0299538ebbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:c0:9d:95:04:e5:44:7b:ee:6b:28:52:ee:
                    1e:3a:b7:92:51:ec:49:cf:1b:a9:f0:b8:5b:f3:63:
                    d7:5d:e3:de:21:eb:78:0e:40:b4:f7:0b:6e:18:6b:
                    84:cf:4e:7e:a1:e2:fb:07:60:e6:48:64:56:e9:74:
                    59:b5:80:0a:bf:a5:bc:70:84:a3:7f:a5:d4:42:6a:
                    ff:f3:de:eb:14:86:77:5a:2e:5c:54:9e:ca:f0:43:
                    56:fb:c9:7c:d7:a3:48:06:60:c9:92:fb:dd:a4:0e:
                    e6:20:9c:0a:3a:a1:f6:69:3a:70:66:9e:14:d0:f3:
                    6d:49:d9:49:b7:15:0f:1e:d3:3b:d4:b9:47:f5:4e:
                    0c:9c:fd:2a:95:ae:4e:5d:60:05:b0:22:79:08:d8:
                    c6:9c:45:5d:68:ef:6e:dd:fd:01:dd:dc:a6:b6:dd:
                    24:7f:e0:05:91:ee:6d:eb:62:f7:fa:89:21:f4:2f:
                    f5:84:8e:93:89:11:63:9f:0d:cb:51:e4:fd:e4:a0:
                    23:f1:d9:3f:be:02:07:fd:31:52:4f:c4:01:c2:2d:
                    4d:07:d2:e3:c1:bf:c4:4e:1f:0a:22:ba:b0:c2:40:
                    74:c7:bd:67:30:f4:1a:f2:f6:9f:99:94:11:d8:b7:
                    0c:7e:b4:ac:59:75:ec:db:a5:02:bc:4c:d9:87:09:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FC:EE:8D:0E:09:6F:48:EB:9E:8D:F8:4C:B5:E0:29:95:38:EB:BF
            X509v3 Authority Key Identifier:
                keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cc:68:c0:91:13:62:d3:28:1e:44:e3:d0:b7:36:39:90:91:
         5e:8d:7b:21:8f:9d:f2:8f:42:b4:cd:1d:05:8f:1f:5d:fd:eb:
         c5:7d:5f:af:c9:cd:3b:7e:94:a8:63:55:e4:98:dd:f8:ca:e5:
         4c:f5:b5:f1:6f:0e:4b:79:08:41:e1:f0:ec:53:73:d3:16:39:
         a2:6b:87:42:76:70:cc:41:8e:a3:59:36:3f:87:16:66:3c:6c:
         fb:83:7e:bc:39:41:52:15:85:71:9d:45:ac:a1:02:99:5d:fe:
         1e:af:1b:d6:19:91:6d:9a:3a:e6:3b:cb:aa:2e:8b:a1:6d:7d:
         3a:dd:c9:ff:99:2d:ad:04:84:ce:72:1c:8c:3b:c7:91:89:c0:
         0d:d7:48:a9:49:c1:fb:13:a8:8d:cc:b3:7d:b2:74:ed:cf:10:
         08:4a:76:a4:c3:1c:a8:96:5a:c1:4f:38:cd:c8:24:2d:3e:a6:
         16:6b:ea:f4:4b:37:f7:9b:0f:07:dd:97:17:42:59:e6:a1:17:
         ab:88:bf:c4:23:89:e8:6b:5c:9a:c7:bb:5e:11:43:69:3f:5c:
         3e:40:be:c3:ad:2a:7c:bc:4f:27:01:cb:5e:36:8a:a5:a3:2b:
         78:ce:68:94:f1:f3:56:0f:00:5f:75:51:1f:d4:78:55:9a:65:
         a7:52:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:20 2025 by rpki-client