Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File:                     0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier:          pcFKBo+lmu4YwF5rVHzWRhUgKGunKE7QuAZxU0Yybog=
Subject key identifier:   F9:62:2F:B5:B9:83:F9:BB:DE:A4:33:25:6B:98:6A:B4:27:5E:CC:EE
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer:       /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial:       0197B77C2F3DEBE70724217C9F86C9EEB6D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 17:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:58 +0000
Files and hashes:         1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: oyrL2Zrh6yDmtHmOEqjOvnPytbt3nDNPelxZM3D/X5o=)
                          2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:2f:3d:eb:e7:07:24:21:7c:9f:86:c9:ee:b6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
        Validity
            Not Before: Jun 28 17:00:58 2025 GMT
            Not After : Jun 29 17:00:58 2025 GMT
        Subject: CN=f9622fb5b983f9bbdea433256b986ab4275eccee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:da:a3:6c:99:30:4d:99:84:90:e9:98:a3:
                    3f:2c:c7:27:7e:bf:65:f7:9c:c4:de:7d:45:1b:b5:
                    b7:3d:1c:34:f3:27:6d:bc:c3:87:a4:7f:2b:00:a5:
                    6d:75:44:43:5e:e2:ae:c4:6f:e8:a9:f1:2b:42:e1:
                    22:1e:e0:fb:38:92:55:c6:50:ad:8a:aa:45:a8:bd:
                    c9:27:58:c7:f8:ac:98:22:cd:86:56:b2:50:53:50:
                    2d:78:f3:df:2d:3c:df:16:ba:3d:62:8a:48:c9:f6:
                    33:16:86:65:4c:d3:20:10:6f:ef:fb:d4:62:19:08:
                    a3:41:8c:3c:1f:a9:49:88:7d:a8:3a:b7:92:cc:78:
                    95:73:99:9d:9a:ef:6a:9b:a9:64:14:5d:88:2a:64:
                    72:08:61:4e:19:d7:3d:44:22:34:8a:57:22:fb:12:
                    da:5e:25:f9:bd:d7:0f:f9:e5:ea:57:1c:54:62:c4:
                    ba:ac:d9:7c:ad:59:20:7e:3c:f8:29:00:64:95:02:
                    f3:45:12:0d:c3:0f:d8:d9:9a:d6:3f:03:ee:e6:68:
                    8d:b7:9c:74:5e:24:ad:eb:68:cf:a6:dd:b2:f0:db:
                    5b:45:5d:29:f0:6b:6d:66:03:b6:c9:a9:b5:00:ae:
                    2c:60:85:cf:93:3a:2e:26:18:52:b4:11:fa:19:0c:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:2F:B5:B9:83:F9:BB:DE:A4:33:25:6B:98:6A:B4:27:5E:CC:EE
            X509v3 Authority Key Identifier:
                keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e6:21:f6:cc:52:42:04:c3:fb:65:c5:2c:ae:d6:8b:3d:b5:
         9e:db:a3:e1:b7:8c:40:52:40:fc:79:68:aa:8a:9f:4a:43:8e:
         8e:0f:44:6b:cf:30:ec:4d:bd:9a:01:fe:e9:f9:b8:68:bb:c5:
         a2:f0:c3:a5:7a:1f:b6:44:5e:78:1e:19:46:63:75:b6:1f:8e:
         4d:60:4e:3d:45:44:e8:7b:a7:cd:f8:b4:4e:c0:ab:40:a2:f8:
         e4:1b:00:b8:05:91:9e:be:f0:d0:0d:4b:a5:e7:10:4d:32:84:
         64:38:d8:b8:e5:4f:5f:58:fb:1c:e8:d0:44:38:b4:09:b1:2f:
         51:fe:60:0b:fd:42:a1:f5:6d:db:17:14:7a:f5:c8:99:7c:61:
         50:9a:78:1a:68:f8:78:f7:12:84:71:ba:66:85:03:4c:f2:c9:
         83:ff:9e:30:d0:2b:bc:55:51:01:dd:14:05:42:5c:40:1b:1d:
         0d:29:43:ec:f3:b6:c2:e2:c9:6d:0e:34:ad:5c:f8:1c:12:5a:
         08:0c:71:f9:32:7a:37:1f:03:ab:77:25:be:02:0f:34:f9:0b:
         82:df:49:40:25:b4:f0:11:96:22:e9:78:6b:9a:f0:82:2b:0d:
         03:e7:c0:cb:26:b4:e6:25:83:9b:b6:f7:fe:94:9b:8e:5e:67:
         de:04:6e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:29 2025 by rpki-client