Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
File:                     dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json)
Hash identifier:          XIL694cm93wJWpmaESu/tlfGHIM+iaEwgXzLQDMjM44=
Subject key identifier:   C0:FE:3E:27:F0:8B:22:34:52:44:30:12:20:0B:8F:7E:1C:77:09:E8
Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
Certificate issuer:       /CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Certificate serial:       0197C614E24B1EE06D3F2F5FC4C869CB2034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
Manifest number:          15BF
Signing time:             Tue 01 Jul 2025 13:02:26 +0000
Manifest this update:     Tue 01 Jul 2025 13:02:26 +0000
Manifest next update:     Wed 02 Jul 2025 13:02:26 +0000
Files and hashes:         1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: J7k8R2wKBLkRpEIhb2Q0e16/QwoOKFxti36X7IikdFk=)
                          2: dnhmPWmpRWX9rAh9nBMTSVjDqxs.roa (hash: fzOf1Or3/SM11VjxsfHMYPlVNvpYFDsl88MJ3GBj7FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 13:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:14:e2:4b:1e:e0:6d:3f:2f:5f:c4:c8:69:cb:20:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6
        Validity
            Not Before: Jul  1 13:02:26 2025 GMT
            Not After : Jul  2 13:02:26 2025 GMT
        Subject: CN=c0fe3e27f08b223452443012200b8f7e1c7709e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:b9:f1:8b:56:bb:9f:88:05:66:df:62:f8:
                    03:85:54:7c:4a:bf:41:c3:ac:6b:b2:ee:c2:6b:8a:
                    e9:80:5f:43:64:c3:9c:6c:58:53:62:36:91:c3:85:
                    9d:26:92:0d:67:28:02:58:d7:c9:f4:de:c1:fb:84:
                    61:24:f5:ee:f8:d0:31:b9:4e:ae:4a:da:91:36:b7:
                    97:f3:0b:bf:58:a6:98:d7:fb:11:76:22:0f:56:ea:
                    a0:fc:4d:eb:e8:51:76:06:4d:25:d5:d2:3e:5f:b3:
                    3b:a1:8d:a8:5e:a0:81:dd:de:06:9f:8b:4b:e9:7c:
                    aa:cb:47:a7:a0:bc:f6:af:93:37:b8:f2:8b:f0:44:
                    48:68:60:f1:0c:7f:86:62:19:ab:5d:6e:83:28:7e:
                    f4:e0:e9:1f:22:4b:ec:25:77:5e:6f:d8:36:36:c9:
                    ef:b9:46:8e:54:a7:cc:27:f9:6a:d0:b2:36:09:99:
                    0c:52:d1:8d:8b:8f:37:26:f0:90:63:b0:e4:b9:23:
                    5c:b2:7a:96:00:3c:6e:4c:af:9e:ea:6a:9b:98:c9:
                    90:9c:68:15:e4:13:cd:09:df:ef:e7:41:00:d2:09:
                    d7:7a:5e:ed:12:f9:9f:10:67:9b:ed:17:bd:f5:bd:
                    34:24:fb:4f:32:29:2d:21:30:0b:ed:bc:3c:09:b0:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FE:3E:27:F0:8B:22:34:52:44:30:12:20:0B:8F:7E:1C:77:09:E8
            X509v3 Authority Key Identifier:
                keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:21:e0:1d:da:e8:71:a1:3e:cb:ed:c1:f2:d3:58:55:b4:60:
         69:08:36:bd:91:c1:3a:55:b8:e4:03:cd:6d:7a:17:a5:19:c5:
         31:93:39:be:cb:e4:75:4d:e4:09:3f:55:a7:de:1b:49:81:99:
         78:6f:29:48:8c:4b:1d:ff:a8:9b:9b:17:77:18:d8:d3:b0:c9:
         d3:f6:56:4b:23:44:30:16:9c:1a:2d:a4:3e:4b:a0:89:c5:b8:
         26:3c:6c:ad:07:02:fa:00:62:2f:1e:b2:95:23:7e:32:bc:84:
         2f:d4:35:40:80:f4:0c:8d:1a:4d:69:be:65:08:b4:78:5c:f0:
         78:8e:d3:88:90:a6:b9:54:3e:3c:7c:11:33:43:ce:5e:49:4d:
         45:38:ad:03:ba:b6:98:bf:f6:35:c7:57:aa:6e:fd:64:66:b6:
         7f:a9:f9:b9:c5:67:c2:67:2b:16:af:d4:f7:5e:d0:d0:47:f6:
         55:ad:d0:d2:10:d2:e7:3d:a3:58:3b:a0:57:33:a0:f1:a3:ca:
         ce:af:53:58:8d:e9:90:75:49:7f:57:1a:e9:75:71:da:24:0c:
         11:69:9e:7c:99:32:52:c1:43:c0:30:79:2e:91:45:02:5f:63:
         04:2b:0e:9e:90:11:c1:93:0d:e2:31:1b:ec:f6:95:37:de:9e:
         63:7d:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:46:29 2025 by rpki-client