Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File:                     F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier:          Y4U72bEiMR1kyAXb+BxJxFQog7vmxBvIlMEJB+y+vXw=
Subject key identifier:   29:27:C8:62:EA:2E:8B:6C:FB:A9:C4:86:F7:29:DD:12:5F:87:77:C3
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer:       /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial:       0197B745948F70EBF3A89418F14F5B99B6D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 16:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:19 +0000
Files and hashes:         1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: XOHxUchW0cpHKtKCGWD42uxNhSBpWGjd0ZutWy8N9Bs=)
                          2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:94:8f:70:eb:f3:a8:94:18:f1:4f:5b:99:b6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
        Validity
            Not Before: Jun 28 16:01:19 2025 GMT
            Not After : Jun 29 16:01:19 2025 GMT
        Subject: CN=2927c862ea2e8b6cfba9c486f729dd125f8777c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:41:d7:77:bd:c3:e1:9f:72:11:38:c5:56:
                    e7:72:d0:26:c4:fb:0a:33:3c:16:3b:70:a0:e2:26:
                    84:ba:95:ac:99:d6:0c:d3:da:af:c3:23:c3:cc:1a:
                    6b:f7:63:b0:d6:db:ba:ab:53:f8:85:58:c8:33:b2:
                    0e:46:9f:e8:97:2b:c3:30:7f:44:eb:ea:37:bc:c4:
                    7d:0d:e2:1a:a9:c2:31:b0:7c:fe:fe:19:f3:52:80:
                    bc:d1:a4:a1:58:55:dd:13:ab:bd:dc:fa:c4:e0:c0:
                    6e:d6:9b:85:eb:85:44:5e:f4:c2:bd:2d:09:9f:1f:
                    66:84:76:c7:66:95:ef:1a:4e:58:6c:8f:54:6e:8f:
                    7d:33:c0:20:d9:99:ed:76:7b:69:29:ce:e7:b3:b3:
                    48:05:ee:49:bc:c5:cf:15:c8:e2:12:01:c2:7e:32:
                    37:bd:ce:e7:a2:bd:89:84:c2:40:9b:c8:b1:82:e1:
                    dd:7e:8f:68:0a:bd:a4:99:de:b5:a7:a2:87:73:d4:
                    63:56:df:75:bd:21:9a:29:47:40:74:6d:0c:45:bb:
                    6e:72:2a:e7:3c:79:d6:6c:28:69:8a:6d:a5:3e:05:
                    51:d1:21:8f:5c:d9:18:4a:bf:2e:91:0a:21:d6:75:
                    df:c5:da:45:6e:f1:b7:28:65:17:b8:1c:59:d1:76:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:27:C8:62:EA:2E:8B:6C:FB:A9:C4:86:F7:29:DD:12:5F:87:77:C3
            X509v3 Authority Key Identifier:
                keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3b:c6:bb:91:f4:5e:80:72:d3:61:66:18:ae:9a:52:13:27:
         6c:99:84:16:cf:1f:01:c8:7e:5a:79:27:05:41:31:b1:ea:9d:
         f7:56:f4:9b:ad:ed:85:50:fc:70:da:30:a6:3f:cd:5f:35:ee:
         ce:bf:c6:7d:53:31:2b:77:92:da:56:65:f4:6a:6e:61:ae:91:
         78:01:05:69:0f:bb:9c:a3:72:39:47:f3:fe:aa:11:c6:6b:31:
         d4:61:88:b0:cc:ba:76:4e:4f:d1:9f:58:7e:f8:27:17:0a:1c:
         35:c7:88:db:b3:92:af:b1:7c:0e:3d:94:37:ea:51:38:b5:b0:
         94:dd:3a:1c:f6:22:2e:99:a8:7e:82:e8:9f:f8:68:24:77:61:
         70:47:f0:82:9c:2f:6b:af:e2:a2:ec:08:ec:35:7f:be:f5:0f:
         db:cf:a0:65:87:1d:04:ce:e9:91:5a:ed:89:e4:1f:4f:f3:3c:
         f0:c2:bb:89:cc:a6:cd:71:bf:32:90:2e:68:f2:6f:98:4c:2a:
         9d:9d:b4:bd:7b:d6:b6:f8:0d:a0:6a:86:0e:52:24:f9:0e:e5:
         01:66:9c:5b:d7:70:7d:3d:9b:cf:43:fd:9c:c3:d1:28:fb:a3:
         dc:46:1c:f9:2e:b8:3a:ef:ea:36:d5:37:98:37:e3:3b:62:ef:
         6b:fd:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:17 2025 by rpki-client