Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File:                     dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier:          7JAxHM+JhEjEzUoh4OWIyEfD41ZNkwEage3pMIr9edw=
Subject key identifier:   83:27:A6:23:03:39:D9:7D:53:0E:BD:D7:32:0D:E3:5F:98:C1:22:B3
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer:       /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial:       0197B6D784E4E4118D0936FB872C52B938D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 14:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:06 +0000
Files and hashes:         1: 0gep-REqlULawvS-x4T-wK7S7GA.roa (hash: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=)
                          2: Q1XUBD_s1D_F0SITgp44J4I9gSg.roa (hash: w5981UwpX34Mt96TzsvSXFggOvVKomyq+xMftlqjtX8=)
                          3: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: TIyjJ7ddOGVfGCr8aap8J8xvDWemFL/0KzZK+/3H5TY=)
                          4: wN2TdkfIPR3J0gvl0DtgYNB7D9w.roa (hash: NqvC6VGS3DEUxOPhIZWiZLcfYzHuOJ6bd3D616XpZos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:84:e4:e4:11:8d:09:36:fb:87:2c:52:b9:38:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
        Validity
            Not Before: Jun 28 14:01:06 2025 GMT
            Not After : Jun 29 14:01:06 2025 GMT
        Subject: CN=8327a6230339d97d530ebdd7320de35f98c122b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:9d:98:79:74:40:df:d9:d0:fb:c6:26:b2:
                    67:18:58:07:16:6f:3e:0d:98:88:51:15:17:f9:14:
                    55:16:3a:47:87:f3:c5:8c:fc:3c:e5:c3:c1:50:15:
                    fd:68:36:d0:6d:1e:d4:dd:49:50:57:9a:f4:1c:d0:
                    ad:26:ef:d3:37:6c:3f:bf:d1:f4:6b:b7:3d:fd:be:
                    db:f3:85:77:06:1a:2a:b8:08:db:22:6b:16:40:93:
                    53:9c:33:b8:46:c0:0a:c3:3d:eb:7f:dd:dd:2e:d0:
                    dd:9a:5f:75:ca:65:f6:c4:02:32:c6:28:50:39:72:
                    1b:5f:7c:df:69:35:5a:07:d5:ed:19:8e:c9:fb:7f:
                    60:bf:8b:d2:45:c0:bc:65:37:3b:f7:bc:89:5f:be:
                    8a:2b:20:81:2c:6f:4a:5e:a7:57:e9:2a:76:33:b2:
                    c4:46:68:a5:ca:50:04:5c:96:e2:95:48:49:39:30:
                    35:f4:84:fd:74:b4:ef:76:60:a4:91:15:6e:24:67:
                    76:ec:3b:10:e4:1d:70:6d:d2:71:bf:26:c1:eb:4d:
                    f2:0a:c9:e8:95:09:02:a7:a0:03:34:35:65:06:d0:
                    c7:84:5a:0f:7d:59:51:cf:77:22:20:ca:44:c3:84:
                    5a:df:b8:8d:e2:cb:6e:49:21:c9:19:54:6d:26:1b:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:A6:23:03:39:D9:7D:53:0E:BD:D7:32:0D:E3:5F:98:C1:22:B3
            X509v3 Authority Key Identifier:
                keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7c:60:7b:e9:c4:a0:a9:7d:81:01:7b:2f:f6:92:cd:cb:7b:
         00:9b:3e:81:73:28:3d:76:ed:1c:cc:44:0c:07:87:4f:41:55:
         0a:ac:3c:43:27:f5:4e:4b:32:70:19:e2:94:3d:61:02:0c:45:
         eb:01:7c:d9:ef:e6:64:af:1c:e6:71:59:d9:89:7a:6f:ce:db:
         dc:27:22:a3:e5:4d:a9:b4:fd:33:d9:5e:02:20:32:e2:ae:fb:
         20:1a:9a:7b:da:0e:8a:05:72:54:ec:d3:0d:e5:89:5f:5f:2e:
         d2:d1:1b:98:1d:f6:b6:a3:c7:a4:3a:77:c2:e6:12:f5:2f:9f:
         2f:56:be:69:40:5c:49:5a:b9:21:f2:e7:93:6a:d9:bd:c6:b1:
         e5:3f:d7:0b:dc:a0:06:2e:43:3a:eb:b2:17:0d:27:29:a9:a8:
         79:ea:17:1f:29:5a:2c:e3:a0:ff:b9:19:29:2a:a8:25:15:8f:
         de:7e:78:2b:d3:7f:67:bb:d2:3e:9d:ee:f2:04:6c:a8:06:9c:
         e7:fd:4f:17:37:98:b4:7a:f3:cc:19:c3:12:b7:b4:0b:db:2b:
         04:fb:05:1e:18:d4:95:59:ae:4e:ec:8d:81:ab:f5:3c:18:e2:
         3c:58:6b:ff:dc:ad:ed:46:7e:80:d5:5c:a1:74:a1:1a:8c:7d:
         59:bc:9b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:39 2025 by rpki-client