Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          kHAOT37q70psG2vlJhpnJIHMCbHSOSWTQW2gitD7KkI=
Subject key identifier:   B7:85:03:14:1B:C9:BC:D6:48:03:D1:5E:33:89:A9:A8:52:42:22:4C
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       0197B6A0A113D210FCA88D9FF82301B14E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          15CB
Signing time:             Sat 28 Jun 2025 13:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:09 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: l5goTuP+rBDNIDBY+MSo38TtRbCJlXEN80AwCLpRFeU=)
                          2: ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa (hash: B9pNA14gZya54yZcULKpZm4AHqIWlkttw9up4kc/opc=)
                          3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=)
                          4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=)
                          5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=)
                          6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:a1:13:d2:10:fc:a8:8d:9f:f8:23:01:b1:4e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Jun 28 13:01:09 2025 GMT
            Not After : Jun 29 13:01:09 2025 GMT
        Subject: CN=b78503141bc9bcd64803d15e3389a9a85242224c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:5b:34:0a:62:80:f1:77:90:fb:d7:4c:92:
                    6c:c7:35:a9:61:23:4a:bc:10:72:c8:43:30:e8:4e:
                    1d:4c:84:03:de:7a:1d:03:b2:08:d1:b0:64:32:eb:
                    f1:bd:5f:b9:0c:42:24:5f:bc:20:05:e0:ab:eb:bc:
                    e6:1d:70:ef:52:8d:4d:3f:23:f4:85:49:40:55:d0:
                    f5:92:b8:87:c8:c5:78:1d:df:01:e6:14:69:70:8f:
                    2c:ba:f3:ad:7e:2e:f4:ef:07:68:dd:16:49:08:b3:
                    79:16:3d:20:6c:63:39:f6:6c:e6:23:61:21:73:63:
                    de:33:a4:6e:ac:08:d8:36:7c:6d:e7:d2:d7:74:f5:
                    93:cf:b4:57:49:e6:60:15:41:96:c3:aa:1e:d6:e1:
                    13:ea:38:9d:3a:39:da:bc:71:39:08:e2:74:de:3b:
                    ed:6f:5d:43:43:5b:40:4c:5f:4e:95:37:d0:bd:27:
                    f5:ea:1c:41:0e:7a:25:fa:28:5e:92:b8:c0:5c:25:
                    54:0c:d5:04:0e:76:eb:91:f4:e9:eb:a9:f6:7a:3a:
                    cb:70:12:03:70:18:bf:d1:33:90:ae:84:06:23:34:
                    35:9d:02:d2:47:ea:1c:96:b9:3e:62:0e:82:df:a7:
                    3f:77:cf:ca:29:65:94:2e:9c:e4:32:c5:68:2e:3b:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:85:03:14:1B:C9:BC:D6:48:03:D1:5E:33:89:A9:A8:52:42:22:4C
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:75:7f:a5:2a:34:04:8f:d7:a8:c0:fc:53:cc:0d:d8:d0:0e:
         af:67:85:8a:16:0c:d7:63:95:b6:45:0e:52:5d:3c:31:c4:34:
         d8:51:f3:ad:35:3d:da:cb:8f:d8:fd:46:3f:82:21:38:ab:9e:
         25:83:c3:4f:c7:6e:da:55:bf:cd:6c:cb:cb:47:f1:d7:de:01:
         d7:17:84:c7:49:2e:42:6c:29:91:91:81:5a:3f:6a:79:ea:b0:
         6d:98:c6:7d:80:82:44:57:3f:b7:de:98:38:72:43:99:e2:26:
         c1:15:ce:2f:1b:35:ef:8a:28:3e:53:71:1c:50:d7:1c:77:5c:
         6d:b4:19:63:29:2a:7d:f1:3c:a0:d6:a2:69:8c:6f:08:52:b8:
         83:cb:ce:af:9f:ae:19:33:d3:4e:81:bf:6e:1c:0c:01:f1:51:
         ee:85:6b:ed:01:8a:2b:b7:9d:52:58:a4:55:79:eb:d5:af:73:
         8a:d0:e6:22:59:40:dd:2e:04:a0:55:22:0d:3e:71:56:6f:d3:
         7f:d2:70:de:0c:1f:7d:bd:e3:ab:04:7c:1d:81:f9:85:c5:b0:
         96:9b:78:f3:81:62:fc:db:2d:f2:cb:ed:61:5d:98:42:0f:9b:
         fd:74:4f:b6:dc:35:ed:b8:66:87:ed:e2:7d:6d:1a:a3:e3:69:
         88:58:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:16 2025 by rpki-client