Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File:                     5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier:          YtbEWhQJOknfDfho9ESgr2tfLwAbmxjToRAtSdA10mY=
Subject key identifier:   B6:FA:0D:B5:07:02:CD:58:F1:09:0C:3B:DB:D9:FA:E8:E9:6B:30:BE
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer:       /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial:       0197B74510BFAB8E8F66E0C2CDA045437CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 16:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:46 +0000
Files and hashes:         1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: mauJ5eaEp0RkmTpxK4LMy2+ajd8t2wfbmtlYyqzqxy4=)
                          2: 6_MzG3BJa4ElBBdEF9-BTMf874s.roa (hash: JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:10:bf:ab:8e:8f:66:e0:c2:cd:a0:45:43:7c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Validity
            Not Before: Jun 28 16:00:46 2025 GMT
            Not After : Jun 29 16:00:46 2025 GMT
        Subject: CN=b6fa0db50702cd58f1090c3bdbd9fae8e96b30be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:db:30:4e:d9:5c:b3:67:b8:69:e1:30:cc:
                    4b:a2:00:ed:53:68:4b:a8:6b:38:4d:39:95:36:d9:
                    6f:1a:2b:c1:7a:25:1a:5f:28:5c:c1:01:be:45:5b:
                    b0:bd:b1:64:48:ce:4b:ef:f9:2c:06:6f:f9:fa:8f:
                    05:dc:ea:a2:76:26:7e:2a:33:50:43:12:0a:09:fa:
                    e2:30:2a:00:a6:ff:8b:9d:c4:90:38:b4:a0:76:79:
                    80:47:a3:e4:b8:3d:5f:2f:a1:90:32:4f:84:07:6a:
                    cf:f0:87:82:b0:ed:d6:76:87:93:45:bc:fb:b8:db:
                    c8:1f:59:97:0e:6d:60:3e:7d:3d:30:10:e9:86:58:
                    ed:54:e9:84:b2:f4:3d:fc:81:c8:55:d8:46:30:bc:
                    89:17:59:ec:e5:f0:9a:09:47:fe:be:b5:a0:bd:b1:
                    f0:98:32:67:24:59:39:31:ee:9d:26:45:ee:34:66:
                    a4:7d:0c:d9:e4:c4:c3:f5:d0:53:4e:87:5f:70:45:
                    98:e8:05:16:98:8f:21:d0:a5:38:b9:45:c7:6a:a4:
                    b8:c6:cb:26:d7:26:c7:25:41:97:00:c9:31:36:9c:
                    08:4d:60:9d:0a:b0:9d:86:08:a2:97:fc:5c:a9:1f:
                    9c:85:a5:9e:ad:67:51:be:6c:4f:69:dc:33:78:36:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FA:0D:B5:07:02:CD:58:F1:09:0C:3B:DB:D9:FA:E8:E9:6B:30:BE
            X509v3 Authority Key Identifier:
                keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:29:55:de:52:52:6a:58:6b:23:43:95:f1:3e:5e:9f:0f:18:
         8c:b1:7d:1c:e8:e1:89:17:e1:03:0e:1b:a9:8a:df:fa:93:fa:
         ce:c4:53:d1:08:9c:a5:8f:08:74:67:59:c0:91:5b:a9:2d:ef:
         90:23:6d:ea:ef:68:a9:61:2c:28:85:48:24:62:81:3d:cd:7b:
         14:5f:17:7a:fe:97:ed:31:4e:56:6e:fc:ac:99:e6:78:6e:7e:
         d5:07:73:d9:36:03:13:7d:9f:03:e3:6f:ea:f1:9c:52:a4:c5:
         63:a7:ca:b8:59:f3:74:86:43:20:47:15:a4:dd:b4:cb:d7:10:
         ed:0a:fe:ff:67:d9:6b:69:41:3d:e8:fb:0e:3a:27:c2:cf:ce:
         af:b4:69:45:89:b3:cd:b9:d9:f5:b8:e6:7b:4c:77:1e:30:95:
         1f:7b:f8:cc:d2:82:8d:b9:ab:37:69:0b:00:d6:3d:2b:4e:c6:
         70:ef:a4:6a:cd:7e:82:e5:64:d0:3d:64:12:f7:61:4d:5c:63:
         ac:9e:20:87:30:05:81:47:49:7e:dd:e0:a6:ec:9b:34:7d:3a:
         65:10:15:be:90:de:31:c5:7c:6e:7a:c2:12:8d:55:b9:7b:2f:
         bd:79:2c:34:f1:16:14:46:a8:dc:a2:3f:15:77:f8:cb:fd:98:
         a7:5b:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:54:09 2025 by rpki-client