Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          5b2ygdY8B3JGh+pyC8ccAnJHnMl9sHHd2ZyZuV+b6oM=
Subject key identifier:   82:C1:1C:DE:59:77:BD:4B:8D:ED:AC:AC:59:7A:78:55:D2:4D:31:43
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       0197CD28E361D994B5FC12564D9A060BAEB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          15C0
Signing time:             Wed 02 Jul 2025 22:01:38 +0000
Manifest this update:     Wed 02 Jul 2025 22:01:38 +0000
Manifest next update:     Thu 03 Jul 2025 22:01:38 +0000
Files and hashes:         1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: MBeZxrshTO90Q+7/2xV6WNm7X1Ph55ehkmncKRFzHvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:28:e3:61:d9:94:b5:fc:12:56:4d:9a:06:0b:ae:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Jul  2 22:01:38 2025 GMT
            Not After : Jul  3 22:01:38 2025 GMT
        Subject: CN=82c11cde5977bd4b8dedacac597a7855d24d3143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:70:ab:ac:98:b4:04:9e:2d:13:c8:b1:62:
                    21:89:f3:06:9d:f6:7a:d2:1e:4a:42:91:b7:40:fd:
                    e2:96:fe:ba:55:b2:19:f4:a9:23:f2:f6:ec:5e:86:
                    34:de:36:b1:47:5d:6d:60:c2:e2:16:75:ab:82:da:
                    fe:9c:02:45:21:c8:4e:11:d8:f5:bc:9b:1d:ad:1f:
                    08:dc:97:61:4c:89:1f:1b:ce:a5:51:21:89:eb:dd:
                    83:74:76:9a:8e:8c:d4:91:9e:7b:e2:7b:47:7b:aa:
                    ec:17:3a:d3:7f:a4:70:aa:74:ba:bf:ab:4e:b3:b5:
                    13:80:75:46:a8:75:29:46:a0:e0:8e:15:e7:c1:c5:
                    86:83:58:5c:6e:4a:28:95:cc:ea:26:28:f9:7b:dc:
                    46:79:f0:a9:9a:49:c4:85:91:ef:d9:38:31:38:a8:
                    d9:b6:f1:d9:fe:fa:af:ba:44:de:a2:62:bb:5c:a5:
                    1c:e4:96:6b:3d:98:d2:78:60:37:bb:bb:c2:45:1c:
                    8b:7c:94:fd:34:08:96:a6:42:d5:f8:2f:50:09:2e:
                    07:65:95:11:97:61:76:5a:ff:77:9b:ae:2b:96:55:
                    1f:35:82:eb:09:44:db:7b:db:e4:26:79:d7:00:21:
                    0d:0b:ec:03:38:80:6d:57:ab:56:d5:43:38:47:ed:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:1C:DE:59:77:BD:4B:8D:ED:AC:AC:59:7A:78:55:D2:4D:31:43
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ea:7d:21:1b:d9:e5:b8:77:83:83:dc:d4:eb:3c:49:d8:72:
         fa:81:c2:c5:e0:df:11:7d:3d:d9:fb:15:81:22:45:70:73:28:
         94:b6:31:f9:69:22:a1:bb:87:da:45:33:61:97:5f:b6:c7:79:
         a7:21:32:f5:c9:50:78:f3:70:b9:7c:c0:1b:01:d1:23:c4:f3:
         33:99:0b:88:ba:30:83:28:01:29:36:59:ee:aa:49:1d:1d:96:
         e0:ed:9d:97:d4:bd:3c:35:91:d3:8f:94:81:47:9b:f8:28:15:
         b8:ea:c6:92:d7:82:99:59:23:ec:6f:26:b4:6c:6d:c8:68:62:
         fe:c9:67:d2:ee:f9:ce:e0:bd:47:1d:eb:f8:1c:5f:6c:fc:04:
         9f:4c:6a:a4:65:b0:1b:f1:be:53:9d:10:d5:0b:c8:f2:64:0e:
         66:ad:d0:19:fe:de:2f:e3:3d:7c:75:4a:fd:e2:b0:b8:1a:e0:
         3a:e9:70:ce:36:74:09:70:0f:e5:27:da:18:d5:8a:88:36:1a:
         04:cd:e4:a3:17:6b:2a:c5:fd:c1:23:e2:2b:6f:03:1e:f6:c6:
         71:ff:03:6f:d5:6b:9a:d3:eb:9a:8d:f9:52:7e:b7:9c:de:19:
         97:44:50:e4:31:d0:1a:91:97:d0:ff:fa:68:c2:fc:54:7d:b0:
         81:10:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:54:54 2025 by rpki-client