Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
File:                     egXqWYBflL4YUoIDm7ri-oqSU_U.mft (raw, json)
Hash identifier:          LJdjalhzvpTPZnqpG6TqjsnHYOQ6/OARYNMZE9RkHdk=
Subject key identifier:   23:B6:70:37:B6:43:7A:12:01:2F:BE:A6:A9:05:6A:91:18:C6:98:62
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Certificate issuer:       /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial:       0197B96ADAC6164884B3A409FA2D4E7ACF47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
Manifest number:          15C3
Signing time:             Sun 29 Jun 2025 02:01:17 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:17 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:17 +0000
Files and hashes:         1: IfT3mv-srwgc4CQ7fQArEzebBBA.roa (hash: 95gb7vVhebJAmqOzG0YfdjEqberXj+/78wM2EUtK1Cc=)
                          2: M7L8Od19i3zBt1lIltsTIc1xDpY.roa (hash: Kdrd9VSOIQRz2qDd3ciFqvoijJdSk3rHZS6hc9xgTio=)
                          3: egXqWYBflL4YUoIDm7ri-oqSU_U.crl (hash: ShlcKlXoWBFXYn8sRVtGT7poGeFkC2kgXG7HV7A6dB0=)
                          4: xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa (hash: ZuaV3q0OgmaLrqgLObSDoZ2eNoEB+XGTiCr0RvXHj+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:da:c6:16:48:84:b3:a4:09:fa:2d:4e:7a:cf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
        Validity
            Not Before: Jun 29 02:01:17 2025 GMT
            Not After : Jun 30 02:01:17 2025 GMT
        Subject: CN=23b67037b6437a12012fbea6a9056a9118c69862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:f2:bb:5c:62:80:64:2a:b6:36:40:07:61:
                    b4:7f:50:c6:5a:00:01:b9:e2:69:8d:25:26:2b:c5:
                    72:c4:5d:db:83:27:75:11:8e:76:e9:5c:e2:1e:af:
                    1d:bb:22:f0:e2:4d:a6:72:86:4a:2b:80:36:20:77:
                    39:f4:b1:a5:13:24:42:8c:6d:ff:c2:f4:40:27:ea:
                    09:54:49:f6:d7:8e:4e:4c:fd:a0:24:6a:0d:c1:22:
                    05:e6:33:b6:1e:a7:54:7c:52:61:2a:14:e1:c5:bd:
                    bc:43:41:80:72:a6:57:70:a3:1e:1e:6e:b8:bf:4b:
                    0a:bd:42:fa:94:a1:7c:a8:11:71:75:20:3d:c4:18:
                    21:b6:68:e3:7a:8b:6c:97:65:de:8e:e5:96:83:c6:
                    c9:c8:84:cc:91:86:b9:a7:4c:c9:d5:18:06:1f:a0:
                    63:f3:48:95:77:ec:e8:92:c4:24:38:20:4d:ab:51:
                    bb:c7:ce:be:b4:33:6c:2b:69:1d:b0:a6:f8:b2:2e:
                    15:c4:cd:75:fe:85:ff:4c:b2:13:4b:e4:a2:ea:84:
                    a5:ce:26:e7:bf:ae:6a:e0:1a:b2:13:b6:5a:86:17:
                    a3:a0:f9:0e:c4:42:a1:21:04:ad:fc:21:63:7a:57:
                    cb:c4:f3:54:ed:4d:10:2d:a2:35:a9:6d:69:1f:e1:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B6:70:37:B6:43:7A:12:01:2F:BE:A6:A9:05:6A:91:18:C6:98:62
            X509v3 Authority Key Identifier:
                keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:31:39:51:c2:c6:5e:80:1c:56:0f:fc:8c:07:c2:1f:3d:c9:
         ad:a7:dc:72:d9:c0:83:55:e1:3b:30:ea:ec:93:ad:b2:5c:95:
         f6:ee:a2:17:92:f8:70:56:bd:aa:1d:6d:57:30:00:bb:bd:6b:
         d7:78:c4:fd:1e:77:ec:83:71:9e:13:8f:7d:24:f2:1c:ba:df:
         81:61:62:56:c8:c5:93:16:7c:8b:07:78:13:da:90:90:81:f8:
         fc:0d:24:6f:0e:17:e4:de:08:cf:9c:8f:63:2f:b5:6b:d7:82:
         fc:38:f0:7c:44:95:32:f4:80:d3:46:8c:36:1e:43:61:d2:5c:
         9a:b2:72:0b:7f:83:1a:17:39:29:d2:57:8c:17:46:2c:00:84:
         14:b7:38:10:f7:95:f8:0d:7b:b2:ce:da:dd:7f:fc:af:25:c2:
         87:fb:a4:ed:51:87:ec:8d:91:ab:21:d4:97:10:7f:9f:40:92:
         52:56:b5:58:ac:a6:44:c5:30:c7:ed:e5:5b:b2:71:78:46:6f:
         a7:44:59:30:c3:8c:fb:b5:a7:85:1d:8b:f8:ab:e9:2a:77:dc:
         e9:57:62:67:60:10:20:0c:a9:88:02:6a:9a:76:98:54:67:05:
         88:52:b7:e0:9f:25:24:6a:69:63:3f:c5:e5:d2:eb:e7:fa:34:
         bd:b4:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:12 2025 by rpki-client