Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File:                     I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier:          aNZLuoAVLsh6CqYfNZCoI8znGz0F+cQZUc69WC3S7/c=
Subject key identifier:   FB:FB:F3:9C:B4:26:CB:4F:6A:67:E8:0B:FF:9A:D4:8C:28:34:D4:A3
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer:       /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial:       0197B70F2C206697975610A9A85CA0EB024E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 15:01:54 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:54 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:54 +0000
Files and hashes:         1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: gF/g+ix7xZjDVNb7ZFCq3Zh8jrRIecTbgIGz++9XUJU=)
                          2: MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa (hash: 4bP/TTzv7AEu1D5qKcmPGabc7tnqcf7nz+XM5tO/PTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:2c:20:66:97:97:56:10:a9:a8:5c:a0:eb:02:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
        Validity
            Not Before: Jun 28 15:01:54 2025 GMT
            Not After : Jun 29 15:01:54 2025 GMT
        Subject: CN=fbfbf39cb426cb4f6a67e80bff9ad48c2834d4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:1e:a2:92:86:d1:7d:5d:3a:f0:3e:9b:97:
                    78:bf:cd:67:0c:ac:cd:f3:43:6a:22:c6:98:9b:cc:
                    cd:f7:20:be:07:77:32:e9:3e:24:85:21:73:69:54:
                    08:1c:3c:4c:6e:a1:8b:57:93:3d:10:b7:26:91:b5:
                    dc:9b:23:fd:c4:7f:fd:04:40:30:cf:d3:08:9a:56:
                    99:41:81:88:0a:9f:0c:84:d6:4e:39:5a:15:8e:c2:
                    66:c4:11:fe:64:87:40:71:bd:45:12:52:7a:2f:04:
                    a6:68:46:9e:19:1d:01:c6:ab:b5:1e:a4:55:ff:1d:
                    62:ba:4f:2b:25:83:77:f2:e3:a5:c2:3e:e3:23:1d:
                    2b:97:17:58:72:1d:04:2c:6b:43:46:4d:3f:0e:1b:
                    84:5a:ba:5e:3e:29:11:c9:ef:22:a1:f2:81:40:4f:
                    43:04:2b:68:81:c9:e3:f0:4f:b9:66:da:72:06:09:
                    ac:e7:eb:2c:51:bb:e2:36:14:50:d8:60:6e:1d:f6:
                    d2:7c:16:b1:18:16:75:a9:8a:d0:4d:ae:73:26:58:
                    4a:33:41:87:20:db:7d:e9:92:b8:49:98:b3:1d:f5:
                    53:60:36:6b:e6:3c:e4:d3:3e:29:6d:fe:c9:c4:b7:
                    cc:6a:c0:a8:86:66:2c:17:c6:a8:aa:95:58:77:13:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FB:F3:9C:B4:26:CB:4F:6A:67:E8:0B:FF:9A:D4:8C:28:34:D4:A3
            X509v3 Authority Key Identifier:
                keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4d:4d:0a:c8:75:39:5d:94:9c:7e:f8:e6:ba:3d:ea:18:0c:
         3e:96:13:43:b3:a1:bb:58:f8:b5:67:9d:c0:5d:c5:95:1f:d2:
         68:1e:0d:9e:36:6f:07:a3:bd:df:ac:a4:73:80:b8:8b:76:bc:
         50:7f:b7:11:42:f3:4c:d6:b5:97:58:c3:b6:04:d6:be:0b:80:
         83:23:6a:da:f5:f7:78:6f:6f:af:1e:73:47:04:d9:d7:bf:02:
         96:4b:d9:36:bf:61:56:37:35:65:0d:3e:46:fa:b2:11:6b:9b:
         23:1b:9a:37:59:d4:ea:ee:dd:98:41:cf:e2:2a:a1:6f:37:6d:
         e9:cf:55:08:d9:99:ae:12:c3:e8:3f:e9:90:8f:72:41:27:be:
         98:29:3a:b8:d7:54:2c:40:1c:22:43:bf:c8:f5:6f:52:df:37:
         60:04:a4:4d:fb:cf:3e:d4:98:2c:22:2f:16:ce:cb:ca:86:0f:
         a1:79:14:a3:ba:b5:61:68:a4:31:4a:21:eb:c4:4b:4e:94:f0:
         77:6f:07:ea:19:8d:a0:9f:89:b8:36:a1:40:ac:d4:88:d6:9e:
         3a:54:24:e7:8a:b5:34:e2:f9:f4:20:4b:a6:3c:dd:fa:ea:34:
         a0:8b:41:94:65:23:88:f9:4e:a9:b4:3a:3e:16:1e:ee:74:54:
         4e:07:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:14 2025 by rpki-client