Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
File:                     mecgmoybF2-_Yj7fPuC4IAf8LEA.mft (raw, json)
Hash identifier:          lpUo3p2Ki36nhWHM9aUS8i6dw/5odeySzBT4qzOZqXc=
Subject key identifier:   BE:4C:E7:AF:4C:69:84:D8:21:2F:8B:28:72:58:3F:86:83:B4:16:45
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Certificate issuer:       /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial:       0197C75D645104AA1468EF4C4AD6E0973AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
Manifest number:          15C4
Signing time:             Tue 01 Jul 2025 19:01:15 +0000
Manifest this update:     Tue 01 Jul 2025 19:01:15 +0000
Manifest next update:     Wed 02 Jul 2025 19:01:15 +0000
Files and hashes:         1: 8Yr3TcpHaEQid4NaHBnD3vpLE84.roa (hash: nwAi63b6Bc3AJUqoLYElL2URnBMmDXAT9b7jn7wDHew=)
                          2: fiBm-H6MZf3doc0iQRwx1WfOBtU.roa (hash: lFEwHkm3foVU/vLtJDQi6VsIU7NhnRJ+voXn3vgZZsQ=)
                          3: iN2o8Un7JSexkG6ogPuRCgUoi5s.roa (hash: 0i0wGTTCh3Vi/q7aaqLAPQw2w2BEX/CZ+wUQ84+gybo=)
                          4: kQbp2qzFUZPwkhJafZeDm861YjM.roa (hash: Fkm5avfRjVcfP/ZhaPCK6QXfyeZa3X+294m6m4o5WkA=)
                          5: mecgmoybF2-_Yj7fPuC4IAf8LEA.crl (hash: xg3N/tTQJTHA/EPCSLmdPQDU/XKLI/YXjcqTNdVkcCA=)
                          6: ow3qzF69wqcAle7bTyTRDSI-CjU.roa (hash: zPkJxRIh+4adiToqm5Gt9iWworMW5Po/0t9AKhqJJ1k=)
                          7: t1AESqjDY-KutFWdkZGisFfagCE.roa (hash: MNFsAROxqzLCXF98BXrdVFPLVe5mdJi+XK1r2Onz//o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:5d:64:51:04:aa:14:68:ef:4c:4a:d6:e0:97:3a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
        Validity
            Not Before: Jul  1 19:01:15 2025 GMT
            Not After : Jul  2 19:01:15 2025 GMT
        Subject: CN=be4ce7af4c6984d8212f8b2872583f8683b41645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:e9:b1:0e:7b:f4:2d:14:0a:c8:a3:85:57:
                    28:97:59:ab:e2:e8:8b:76:7b:c3:97:40:97:30:64:
                    5d:fe:b3:0a:7f:e3:b0:f4:ea:36:8c:c8:0e:7f:41:
                    a1:1e:05:48:2f:bd:38:b6:f9:93:29:01:68:6f:b3:
                    81:13:f9:2c:5c:43:35:b8:7e:c9:3a:b7:db:55:f2:
                    c2:e6:86:ea:40:17:ba:05:fc:a0:c7:95:68:29:15:
                    fc:67:81:0b:88:e4:6c:2e:9f:ea:ca:45:1a:03:69:
                    e4:fd:34:cd:80:d1:56:15:1f:98:37:3a:a0:ce:c7:
                    49:74:e7:f2:45:89:6f:5a:2c:d5:46:35:8d:9a:6e:
                    51:93:8c:13:47:75:b5:a7:1e:05:57:03:62:01:fe:
                    ce:1d:aa:e6:68:c8:05:43:6d:f9:6e:c5:08:30:6a:
                    de:f0:e9:58:69:da:b5:0d:01:bd:1d:9a:f5:ff:84:
                    0a:c4:82:1a:d9:86:6a:ae:ec:95:0e:96:3c:42:0b:
                    e9:6f:52:f8:0d:be:9a:b1:90:6b:c3:2e:80:56:1a:
                    a7:c8:2d:28:2f:a4:ce:20:19:d9:91:a9:3e:bf:2d:
                    f7:34:34:ff:a1:6d:ec:3e:e0:9c:be:df:f3:74:9d:
                    2f:e3:58:de:a7:03:64:37:2e:53:71:dd:63:00:32:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4C:E7:AF:4C:69:84:D8:21:2F:8B:28:72:58:3F:86:83:B4:16:45
            X509v3 Authority Key Identifier:
                keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:2c:79:a0:83:16:70:3e:8f:a3:ea:61:81:d8:c3:0b:90:76:
         df:8c:af:49:f5:36:92:e5:b6:dd:80:6a:e2:ff:9a:a8:c5:e8:
         89:4f:57:31:cd:e1:93:b5:98:14:e2:90:3b:6b:fa:05:de:a5:
         51:b0:56:45:03:28:61:17:d5:31:45:d9:ee:0e:7d:b6:cb:b7:
         5b:c1:0f:90:04:7a:40:4c:43:fb:25:eb:60:44:1e:32:64:d3:
         79:c1:09:97:15:d4:e3:79:b4:3d:48:72:06:43:3d:ff:89:68:
         1d:25:7c:99:b8:78:43:ea:84:9e:bb:3b:d8:71:a6:f0:02:84:
         a1:48:b4:3f:f7:74:dc:2b:bf:32:e4:61:60:46:e0:f9:d7:c8:
         1b:dc:aa:8f:af:c0:13:bc:68:08:ed:7d:20:b6:c0:ba:54:55:
         ee:2c:e7:27:67:15:f9:5c:b8:79:c5:28:6d:35:2f:95:09:79:
         40:6f:75:db:4f:43:a8:73:4c:91:97:ce:1d:a4:ba:11:0b:0f:
         50:f5:c8:81:00:1f:e5:1d:6a:e0:32:5c:61:3f:3b:2d:b2:36:
         c1:ea:23:87:d5:e2:be:1d:03:38:97:1d:c9:af:8d:21:33:13:
         c4:78:cf:05:34:65:a4:f1:ca:47:11:07:b1:ec:26:64:f2:83:
         00:e0:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:21:55 2025 by rpki-client