Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File:                     RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier:          u6WTwKougoDBBTkZnbeAJZIC5s+oC6FIdqgQTliY9t4=
Subject key identifier:   EC:E2:E6:17:7E:82:07:86:A6:B8:ED:5C:1A:FB:54:99:9E:5C:99:C8
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer:       /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial:       0197B6D7439083DF4C8B97B7B0A37FF7A232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 14:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:50 +0000
Files and hashes:         1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: Itq4isX/rWBn2niWqCdF3ziLQvb42taInUxvN7JZ6Go=)
                          2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:43:90:83:df:4c:8b:97:b7:b0:a3:7f:f7:a2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
        Validity
            Not Before: Jun 28 14:00:50 2025 GMT
            Not After : Jun 29 14:00:50 2025 GMT
        Subject: CN=ece2e6177e820786a6b8ed5c1afb54999e5c99c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:15:31:d0:92:a1:5b:a6:2a:be:97:fd:50:
                    b2:a9:29:2f:70:9b:c9:78:24:a3:85:6a:c8:43:5f:
                    c1:27:e4:d9:34:52:05:05:f1:ec:dc:65:82:4a:13:
                    09:fb:3c:3a:2e:b9:92:ff:b9:a8:ee:b1:04:b0:1c:
                    06:a5:4a:d0:26:70:92:fa:fc:8d:1a:f8:8d:b7:bd:
                    f1:5a:11:2c:19:5a:3b:c4:b6:5d:85:ff:8c:4b:ef:
                    34:a8:cd:e2:10:15:78:33:47:58:bb:41:b0:70:22:
                    19:98:7b:5d:c2:45:f8:74:8a:f1:e5:15:e6:c1:f2:
                    af:d1:b8:ec:3e:d6:ce:dc:3f:20:5d:79:95:74:b2:
                    88:5d:33:ff:88:79:a7:06:7c:12:27:50:fa:aa:2b:
                    dc:61:b9:42:ad:c0:8d:df:d2:c5:df:56:52:e9:f2:
                    27:00:ed:a6:cb:33:e7:da:a5:8f:26:e7:bd:1b:c9:
                    4c:45:8e:07:89:9b:dc:f0:4d:e9:06:17:9b:41:b3:
                    a0:66:a7:a7:8c:e9:ec:7d:c6:f2:e4:04:6a:ac:fe:
                    59:16:4e:51:04:e6:c3:1d:b2:a8:d3:df:d8:d2:36:
                    c3:f4:5e:52:ce:9c:0b:36:fb:38:1f:55:24:35:fa:
                    66:12:2d:c1:93:06:24:6e:5a:21:f1:e0:c0:25:18:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:E6:17:7E:82:07:86:A6:B8:ED:5C:1A:FB:54:99:9E:5C:99:C8
            X509v3 Authority Key Identifier:
                keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f8:f4:35:7a:b6:af:61:9e:e2:13:03:8c:38:8e:a2:53:1e:
         70:02:7b:2a:00:ca:3c:64:54:b7:47:a2:fe:2b:f7:7c:c6:e8:
         c2:b6:31:03:cc:7e:a6:a1:37:2b:a1:2f:a4:38:00:1b:f8:27:
         24:a6:ef:4e:75:81:74:cf:05:c7:0d:31:1d:1e:d3:b3:cc:f1:
         e5:91:e1:34:31:ee:0c:6e:73:64:65:df:c2:6f:e6:4e:9f:bc:
         62:f8:66:b6:7b:9a:d1:15:69:7a:a7:0f:fd:6a:f9:89:1d:8c:
         0f:b8:dc:62:98:fa:b6:2b:09:59:1c:ff:66:4f:ba:23:4d:81:
         f9:02:22:2e:97:f2:ec:82:ce:05:94:91:bb:3c:a7:3f:b1:72:
         cd:78:6f:4a:64:6a:f3:73:b7:5e:1a:fb:d7:9a:d0:86:25:4a:
         ed:26:e2:74:36:cf:ab:d1:67:9e:a2:1c:8a:22:73:2f:57:22:
         6d:93:c3:41:70:bf:12:06:51:b9:0e:75:6e:ee:db:d0:02:99:
         f7:69:81:d2:3b:c6:19:f6:d7:5b:74:5f:b8:17:16:f7:ec:5b:
         02:5f:c1:e8:04:66:9e:26:66:5c:1e:8e:cf:09:2b:5e:9a:29:
         f6:f8:b8:19:96:be:9b:1f:a1:90:fc:c4:05:1d:4d:73:f5:fb:
         84:91:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:49 2025 by rpki-client