Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File:                     ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier:          6iXqIFto78a3D6V6wY2VGsCBPXN6nSnY+AKs/FN8+oY=
Subject key identifier:   D0:5A:EE:9F:54:85:B8:3D:7A:7F:EA:1B:0C:6A:D1:84:0C:F4:7E:81
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer:       /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial:       0197B58DC088512E663EA2985D708ECC7A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 08:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 08:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 08:00:55 +0000
Files and hashes:         1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=)
                          2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: 2uWzJ+X9vRMhY79vooOGGhAenrZ7SbUcbBHF1nrbYSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:8d:c0:88:51:2e:66:3e:a2:98:5d:70:8e:cc:7a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
        Validity
            Not Before: Jun 28 08:00:55 2025 GMT
            Not After : Jun 29 08:00:55 2025 GMT
        Subject: CN=d05aee9f5485b83d7a7fea1b0c6ad1840cf47e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:59:8f:e7:94:07:24:9f:16:9f:db:b2:7c:
                    8d:26:fd:3d:18:cb:d3:7a:d2:a8:95:50:84:a0:f2:
                    91:ff:7e:82:35:44:88:2c:bc:da:b8:13:3a:3e:9b:
                    58:64:09:93:f7:31:1a:6e:4b:42:a0:96:3b:a3:83:
                    fa:33:22:d4:2c:e1:5a:43:57:1d:5f:0d:06:e2:3e:
                    3e:8e:45:f2:cd:f0:ef:dd:bd:a1:62:cb:95:26:bc:
                    6d:f3:8b:08:3b:28:6a:bf:6f:01:b4:dd:3d:46:c9:
                    43:98:e1:09:ed:3a:fa:98:ce:ea:88:d4:00:24:67:
                    c2:a1:4b:2d:76:ac:6e:9f:23:07:e7:c8:39:6d:97:
                    07:9e:31:c7:11:b5:ac:4c:f4:98:21:62:e7:04:67:
                    ab:b9:32:41:f1:fb:b9:4e:d7:96:50:ab:86:c5:6e:
                    7d:24:2d:2f:34:99:61:55:12:1d:51:94:0b:9c:fc:
                    46:7d:68:ec:20:e1:f6:5e:ab:aa:ac:7b:32:5a:a0:
                    2e:b7:1e:ac:6c:56:b0:de:aa:45:30:2a:ab:8a:cc:
                    2c:dd:9b:38:e1:61:48:99:f5:98:61:01:df:7a:57:
                    62:46:d1:53:a8:49:ae:fe:6d:c0:77:36:53:fb:a4:
                    db:23:38:b9:bd:73:0e:5c:e5:28:64:9f:82:95:22:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5A:EE:9F:54:85:B8:3D:7A:7F:EA:1B:0C:6A:D1:84:0C:F4:7E:81
            X509v3 Authority Key Identifier:
                keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:00:1e:50:10:84:62:a8:a0:41:09:ef:98:65:ae:ca:8b:
         99:f6:d4:16:ed:b9:da:52:67:7e:59:70:95:cb:7e:a5:3f:2c:
         3b:dd:dc:e0:4f:18:62:1f:a5:d1:a4:99:17:3a:16:8a:6b:3f:
         45:41:59:18:9d:fd:bb:36:28:d5:91:b4:6d:f5:cc:af:7b:78:
         28:9a:a5:b7:7c:5a:da:85:97:e4:73:44:c6:8c:34:ea:e3:ca:
         62:ea:3a:74:9f:86:44:9e:70:62:c7:1b:b3:4f:d1:16:90:3e:
         c8:50:01:c8:f0:3c:e6:a2:ed:79:30:fc:cb:f8:b0:85:3f:ce:
         37:01:53:59:3f:42:77:28:da:b0:62:02:af:90:64:ab:ab:74:
         58:96:33:3c:9c:b3:bb:9c:9c:32:46:ba:30:53:e7:ce:b1:30:
         4d:58:da:e0:5c:65:c2:21:52:13:f0:ba:1f:69:c9:a3:c5:6a:
         fc:67:d2:18:7a:80:14:00:e2:9b:c4:56:ee:cb:56:bd:79:23:
         38:f1:7c:28:b5:e6:93:a8:61:cf:df:65:3c:a0:d1:03:59:dd:
         e3:77:9d:24:e1:2d:2e:dc:03:8e:95:fe:13:50:a2:6e:7e:11:
         2e:1e:3d:1d:5f:15:81:b4:d4:00:bf:b2:1c:f8:9b:47:28:ae:
         49:ec:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:51 2025 by rpki-client