Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          9Sfd0E3+GAXe9h+YuS3SQo+9fmnz2V44jg4uyGge3PQ=
Subject key identifier:   15:B8:B4:3B:7E:E9:9C:C2:B4:2A:2A:55:43:39:2C:F6:3B:35:D7:C4
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       0197B7456CF992783C05EBD64EFC869E3970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          10BD
Signing time:             Sat 28 Jun 2025 16:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:09 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: YzHeDpslj0nSRz2b1LTDNYZZbAA/b23ywslMIlvK4H8=)
                          2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:6c:f9:92:78:3c:05:eb:d6:4e:fc:86:9e:39:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Jun 28 16:01:09 2025 GMT
            Not After : Jun 29 16:01:09 2025 GMT
        Subject: CN=15b8b43b7ee99cc2b42a2a5543392cf63b35d7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:c7:1b:dc:87:b0:79:ae:c7:3d:83:90:a6:
                    10:5c:38:f9:cd:9a:8a:ab:59:3b:50:e2:9a:e4:61:
                    d1:db:a9:63:f2:2f:e3:bc:4b:7b:cf:60:e2:5c:56:
                    02:6c:aa:79:7d:38:5d:9c:93:d7:57:89:0d:00:12:
                    90:bb:aa:3a:ed:03:6c:1b:7e:65:dd:30:9c:3e:d2:
                    a1:ef:20:7c:c6:6d:fc:e6:0d:e5:be:45:f0:a1:cf:
                    8b:27:f2:9e:ad:7e:80:56:36:75:4e:60:30:20:a8:
                    17:14:b6:e7:07:5f:10:f2:c2:30:b8:eb:dd:f8:63:
                    5e:bb:d4:5f:80:95:25:c8:16:59:c1:88:0b:6a:c6:
                    38:84:91:92:c8:1f:d4:c3:3a:ad:38:ab:11:dc:30:
                    49:97:50:25:5b:70:d7:ea:d0:e7:af:22:cc:cc:f7:
                    93:e3:82:c6:8a:e9:46:06:a3:75:d5:13:73:89:ec:
                    c7:aa:77:00:cf:b6:31:e0:de:81:47:da:0f:ed:07:
                    57:d6:4f:59:29:1a:05:65:97:17:46:e4:db:7e:13:
                    ce:43:f1:62:72:aa:34:ef:f8:53:5c:d7:fd:66:6a:
                    91:1d:a0:2e:29:5c:5d:29:5b:ad:f3:f4:1a:a8:e4:
                    af:65:f2:2e:53:20:e4:4e:d9:e4:22:1e:88:aa:37:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:B4:3B:7E:E9:9C:C2:B4:2A:2A:55:43:39:2C:F6:3B:35:D7:C4
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:24:ac:c7:a5:50:a9:10:cc:ca:a4:4c:15:93:b5:22:a6:75:
         a3:f4:dd:07:c5:7e:54:56:a9:02:f2:d5:bc:cf:38:61:ed:dc:
         30:3f:a8:ad:06:21:38:72:e4:8f:93:b4:ee:bb:d2:79:70:82:
         ef:0a:2e:c2:4e:99:6c:74:51:16:45:36:b4:8f:1f:30:bb:d9:
         6f:9b:13:1a:07:f0:20:87:6d:10:db:ae:a7:2a:38:ec:5f:25:
         4e:47:79:1c:ea:f9:ff:ce:0d:e7:8f:2a:84:c8:73:2a:74:6e:
         4c:8f:3b:29:28:cd:b0:52:09:14:04:84:67:66:e2:e2:4d:ca:
         30:7a:c8:2d:4a:7d:60:21:66:fd:02:f3:66:98:25:37:89:6f:
         a5:87:5d:c0:e7:dc:8c:03:a8:6a:12:09:84:3a:07:b8:f2:b1:
         1d:94:2d:e4:c6:f6:88:4f:c9:39:c0:cc:b4:72:b7:f0:01:04:
         82:af:9b:6e:e6:3a:46:5b:53:3c:8f:13:66:29:f2:7b:c4:a9:
         bb:f2:b1:cf:04:79:d8:9b:1b:bf:85:da:51:0d:fa:39:22:9c:
         49:41:ea:7f:32:bf:02:1f:08:5b:3a:d2:e0:c4:b4:ff:a0:45:
         55:aa:3e:05:4b:8a:36:37:48:cf:5f:23:e7:71:67:f2:50:ab:
         90:f8:36:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:20 2025 by rpki-client