Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          QGs6BCsIKFSov5bjSi9rO8Ihd4g4hfxglM2C77CONWw=
Subject key identifier:   98:32:FA:D1:F0:8A:0F:A6:22:7E:4A:26:58:E2:B8:6E:7C:FE:18:AF
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       0197B77CA2A3E7B7E5D120B698EAB2046469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          15C5
Signing time:             Sat 28 Jun 2025 17:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:28 +0000
Files and hashes:         1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=)
                          2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: C3KK0OPabVJNe8vltDJrldGJHasf1DfiLDAt660UZ88=)
                          3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=)
                          4: J2u59yFgmuGdudgIENAeqcAIi5A.roa (hash: 1czvcte4D1PcVrf098gt6GCTblFnQnU2WnM5dPM5CwQ=)
                          5: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=)
                          6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=)
                          7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=)
                          8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=)
                          9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:a2:a3:e7:b7:e5:d1:20:b6:98:ea:b2:04:64:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Jun 28 17:01:28 2025 GMT
            Not After : Jun 29 17:01:28 2025 GMT
        Subject: CN=9832fad1f08a0fa6227e4a2658e2b86e7cfe18af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:0b:7f:b2:60:1a:bb:51:78:1e:fd:d7:d4:
                    da:8f:bf:29:be:2c:18:a3:34:9f:98:d7:7d:4d:72:
                    ff:66:c2:3a:13:97:43:b7:c8:4b:37:68:9a:57:62:
                    a2:da:64:5b:dd:16:ee:7a:04:1c:44:09:55:f6:1d:
                    07:c7:95:13:a3:0d:1f:e7:3c:ca:de:c0:2a:f8:a7:
                    31:0a:02:62:c0:18:c1:a3:78:ff:fe:d9:3b:86:d3:
                    b3:a7:7b:70:ee:b3:cb:10:94:42:23:b3:d9:a0:3e:
                    ca:28:5e:fe:75:f3:80:77:f3:c3:42:9c:be:87:73:
                    8d:c4:38:98:ff:1a:06:05:66:c7:cf:0c:f6:49:bd:
                    9c:dd:6f:3f:8f:68:54:28:0f:37:39:a3:6e:e1:46:
                    f6:86:8e:af:36:8f:62:7b:41:45:72:bb:0c:56:58:
                    e9:0c:57:19:bf:42:b6:77:0a:65:55:12:44:77:dc:
                    63:d1:39:8a:85:24:ae:bb:46:f1:41:7b:90:7c:e7:
                    ea:28:28:c5:39:31:6f:3f:88:f7:95:00:49:c4:47:
                    32:95:e7:19:3d:f7:5f:7b:3d:e5:1c:15:59:02:e3:
                    3a:a1:04:d4:43:12:e0:97:e9:ba:f5:b9:d3:50:88:
                    24:d9:0a:e1:12:f1:b2:3e:b9:d4:d8:5d:54:e8:47:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:32:FA:D1:F0:8A:0F:A6:22:7E:4A:26:58:E2:B8:6E:7C:FE:18:AF
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c4:42:9d:a3:28:e2:a2:f6:06:7b:01:9b:1e:c7:73:83:93:
         6c:f6:d6:83:5c:bf:1f:9f:44:62:5b:1a:a6:a5:e4:ea:ef:7c:
         2d:39:19:d8:36:c4:df:d0:14:dc:16:91:4f:21:df:2f:e4:0a:
         b8:90:13:01:30:e9:03:a7:f7:e2:95:c8:92:38:51:71:fe:75:
         7b:4e:69:6f:ad:54:ae:39:af:25:bd:64:e3:f6:3d:0d:cd:8d:
         8c:bb:7b:de:4c:a3:fa:10:7a:3f:05:75:47:96:41:6b:71:d8:
         fe:23:37:5f:24:23:2a:44:e1:48:b6:fe:8f:5f:05:b1:00:c4:
         bb:ac:df:76:ba:e5:59:92:57:03:e1:a9:72:e2:7b:24:20:bc:
         92:3d:f7:6c:55:5a:e6:99:5f:ce:be:1c:03:f1:a2:2f:23:d2:
         cd:bc:0f:ad:dc:7b:08:f0:ba:95:d1:d1:a7:9d:f1:5c:7f:64:
         60:11:4b:40:87:08:7f:50:4d:7a:30:fa:d4:1e:22:27:11:f7:
         76:0d:ce:4a:3b:48:09:20:c7:a6:eb:3a:26:03:2f:30:10:bd:
         4f:83:fc:ee:9d:a1:4e:78:fe:37:ee:92:57:45:58:49:1b:eb:
         78:10:15:e8:f1:9c:dd:92:08:43:15:0e:2f:f7:0c:80:6d:16:
         31:87:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:03 2025 by rpki-client