Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
File:                     L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json)
Hash identifier:          ynwYG9XX7svURi8bDpgXPBybUCR4m0kGXv601I+GrTc=
Subject key identifier:   13:AA:BA:0E:75:40:27:F3:37:44:73:87:7D:DD:D8:EB:55:C8:B2:95
Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
Certificate issuer:       /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Certificate serial:       0197B6A181FBC77CA7C2C07B70BB83A1DAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 13:02:07 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:07 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:07 +0000
Files and hashes:         1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: gNkiLdnK37ymL2IRlS4vhS/vwJ3nKqCLZIRIfjqH3Kg=)
                          2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:81:fb:c7:7c:a7:c2:c0:7b:70:bb:83:a1:da:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
        Validity
            Not Before: Jun 28 13:02:07 2025 GMT
            Not After : Jun 29 13:02:07 2025 GMT
        Subject: CN=13aaba0e754027f3374473877dddd8eb55c8b295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:f8:f6:66:e7:c8:0d:d7:01:36:8b:89:72:
                    a0:17:49:e0:e8:a3:de:12:26:e3:09:6a:1a:67:46:
                    31:b9:25:f7:52:71:90:f1:a4:c5:0b:9b:df:84:90:
                    cc:a0:a1:d5:84:02:44:2c:8a:cc:49:9c:8d:32:a5:
                    13:b7:74:37:94:e5:8c:eb:ff:4d:21:03:24:14:42:
                    50:71:3c:c5:3b:3a:12:5e:e6:e9:d6:1b:8b:e6:c0:
                    37:f9:e7:b2:57:5c:02:fc:92:05:2e:bf:98:13:eb:
                    16:a0:ce:47:ce:eb:95:52:fc:0a:08:0a:29:b2:9e:
                    b7:a7:46:e3:39:f1:10:1a:87:49:d9:f3:5e:e8:43:
                    cd:03:7c:ed:25:cb:5b:a1:d9:8d:ec:b2:66:4f:65:
                    d3:b5:9b:37:45:53:6a:0d:29:40:b8:44:5f:89:77:
                    c1:88:1b:ec:67:0e:cc:dd:bd:57:80:35:ba:77:e2:
                    af:f1:97:8b:ca:60:e7:c3:c8:8a:ad:82:62:39:d9:
                    2d:71:1c:57:db:61:9e:f3:cd:51:b0:e5:49:c1:38:
                    63:8c:63:97:7c:69:95:d6:08:28:62:7a:de:91:c7:
                    44:83:44:45:45:31:5d:55:ec:2c:bc:8b:6c:29:92:
                    34:6a:7d:ae:1c:c8:88:34:fc:69:33:bd:f1:20:94:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AA:BA:0E:75:40:27:F3:37:44:73:87:7D:DD:D8:EB:55:C8:B2:95
            X509v3 Authority Key Identifier:
                keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:2f:fe:31:95:ff:74:e1:f4:d1:b1:5a:bd:ab:01:4a:d9:f2:
         36:01:32:30:ef:b2:54:e6:7b:e3:f1:36:45:29:eb:00:04:4d:
         39:ac:47:40:02:6a:9e:98:b5:cf:b3:56:f2:f6:e0:24:43:6a:
         82:94:e2:52:87:41:00:75:90:0b:df:c1:07:dc:db:5b:d0:7c:
         01:48:c5:e7:c4:c5:b2:ad:a3:3e:8c:b9:89:1a:c8:46:43:af:
         a5:01:b5:3c:60:bf:89:21:07:cd:ec:83:93:a6:97:c5:32:a2:
         29:0b:5e:38:b9:2e:b6:38:5f:e2:a0:f7:d6:95:0f:f0:44:78:
         20:9d:41:a2:d9:1a:03:b7:b4:ca:c9:5a:15:cd:fe:60:08:f6:
         35:d2:d2:e4:b8:64:3a:2a:5a:ff:8b:5d:a1:29:b5:f9:b8:2b:
         38:66:19:f0:a9:f8:7b:c4:47:a2:47:7c:e6:9f:38:25:7e:59:
         64:55:b8:6e:ef:b8:b2:1a:6a:57:bc:21:6c:8d:db:e2:85:b1:
         50:a9:5b:d6:3c:81:55:44:20:59:cd:f1:59:54:57:50:1d:9e:
         8f:70:69:ba:d9:c1:58:50:f3:17:c9:9d:5a:70:c7:ab:42:37:
         47:da:d1:1d:39:de:06:a8:b2:0b:5e:f3:b0:0d:82:ac:e9:e9:
         45:12:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:18 2025 by rpki-client