Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File:                     9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier:          WlftJheHalGBodSz0IAbDlGhN1sYxmbdsXC3co3Y9dw=
Subject key identifier:   9A:B6:28:7B:08:86:BF:6C:5A:8C:4D:11:4A:E1:02:01:97:BB:DB:5D
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer:       /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial:       0197BA7EB7C625BBF92B3AA61B5BE6884154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 07:02:36 +0000
Manifest this update:     Sun 29 Jun 2025 07:02:36 +0000
Manifest next update:     Mon 30 Jun 2025 07:02:36 +0000
Files and hashes:         1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: VAMedO5wVPRtGjrgKiMK0hmuDmAso8LTb0If/pQdilg=)
                          2: Ru57e4KJGmCNDXrPayGNrM1Z2dE.roa (hash: PjkMG0o3XCBX2V0z1wG5kUtXFYLyKVu1bhkUTY6FzyU=)
                          3: nRY6f0HmJ7S8CYmolnmrtVb1JGw.roa (hash: jhgaQrPs/TQq82v7wbUyYwj7VfBFttXWHM8WTx1fF9k=)
                          4: wn3IojBdCy5Wl_2EBruQi7YNS44.roa (hash: 1KdRgMRZAJuO8z+H0eUMB9aA/0ER0ehetz8BXxZxUoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:b7:c6:25:bb:f9:2b:3a:a6:1b:5b:e6:88:41:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
        Validity
            Not Before: Jun 29 07:02:36 2025 GMT
            Not After : Jun 30 07:02:36 2025 GMT
        Subject: CN=9ab6287b0886bf6c5a8c4d114ae1020197bbdb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:44:f9:4d:c3:88:86:9e:02:e5:79:d9:72:
                    ff:e1:40:71:a4:7b:23:fa:34:3b:df:70:3e:f6:7c:
                    c8:f0:4e:5d:6c:da:0e:69:32:af:65:35:80:cb:b9:
                    d0:e3:57:ea:03:73:f6:20:f0:5c:2b:ab:cc:cc:24:
                    16:8f:a7:5e:a0:aa:2a:e2:52:ac:4d:f7:1d:9f:dc:
                    15:00:71:c8:e7:17:35:4e:ec:48:44:01:2c:fd:35:
                    68:46:e1:69:8c:3b:8f:a7:3f:05:19:af:94:8d:9f:
                    46:e2:ca:dc:e7:d0:29:54:08:46:89:d6:dd:4b:66:
                    16:c5:2b:3a:fc:ac:f5:31:8e:ca:e2:d7:ad:72:f6:
                    99:98:15:06:75:c0:d0:4e:76:e6:e3:fe:a4:f7:46:
                    cb:ff:5a:7f:50:53:07:a8:a7:60:3c:88:38:39:48:
                    53:86:e7:cc:79:5f:72:74:61:bb:55:f1:aa:f7:5a:
                    39:fc:84:74:2e:f5:3d:38:c9:c7:b8:b4:80:6f:86:
                    bb:de:41:79:39:8d:0c:d4:d3:5b:53:11:df:0d:85:
                    50:b9:70:92:02:5b:81:7d:a4:fa:3d:51:19:52:b8:
                    71:2c:a0:21:7f:00:ba:be:92:d7:ee:79:a8:24:88:
                    0e:95:24:13:13:7d:2a:ae:43:f7:cc:16:f1:97:34:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B6:28:7B:08:86:BF:6C:5A:8C:4D:11:4A:E1:02:01:97:BB:DB:5D
            X509v3 Authority Key Identifier:
                keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:95:40:16:8d:da:48:93:91:2f:44:fe:7c:f2:48:ee:b3:c7:
         34:1e:db:4c:e3:a3:23:d6:79:31:33:16:9a:e2:27:eb:cc:1f:
         7d:81:53:1f:4b:e8:cf:f7:f0:36:76:92:e7:13:d2:17:3f:d5:
         7e:d2:44:5e:87:56:57:43:d4:e4:d2:6d:33:1d:45:e7:f2:86:
         97:ae:be:d0:e2:4a:ed:bf:60:22:fb:48:cc:ea:3e:22:66:7d:
         3f:cb:12:63:b3:39:41:ec:cb:b1:89:eb:a2:c1:0d:a8:29:0f:
         5b:ef:21:8f:31:bd:c2:04:36:25:ff:8e:61:ed:91:42:ab:75:
         dd:6a:87:ce:5e:af:4e:a1:2d:6f:7e:39:f3:28:57:fc:38:b7:
         54:11:fd:a9:86:1d:03:74:9a:3f:e8:21:00:d5:87:56:03:00:
         3c:23:60:10:d0:96:d3:69:66:99:20:71:c4:0f:8b:68:f5:50:
         a7:ce:78:47:fc:79:da:19:e8:49:d4:8e:fa:ef:98:f4:56:e0:
         e9:20:22:e8:ea:ef:17:f3:a1:49:9b:3b:66:34:25:03:ea:00:
         ab:fe:7c:b5:b1:64:96:bd:e5:9e:92:4a:a1:67:0a:fe:99:1c:
         74:f5:5a:a1:a6:39:72:c0:c8:84:3d:96:21:7a:81:ed:51:cd:
         f8:83:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:34 2025 by rpki-client