Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File:                     pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier:          Ugaqe2BM6fHyHZDjL1HDEIG3exyOsiaNw69uqwXDu3I=
Subject key identifier:   C5:4A:8D:EB:32:BE:B7:15:56:D5:5E:2F:A9:25:8B:1A:16:DA:97:9B
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer:       /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial:       0197B6D7BF05BC910741DEE010FA7D045547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 14:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:21 +0000
Files and hashes:         1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=)
                          2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: w9wEyhUI6J6dUeSSyguprRhCfpqcTIZWOuaHBscyWJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:bf:05:bc:91:07:41:de:e0:10:fa:7d:04:55:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
        Validity
            Not Before: Jun 28 14:01:21 2025 GMT
            Not After : Jun 29 14:01:21 2025 GMT
        Subject: CN=c54a8deb32beb71556d55e2fa9258b1a16da979b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:94:3e:45:ff:31:c1:4f:1b:e8:35:97:98:
                    b1:1c:c2:1f:95:d3:df:77:6c:5f:8f:ff:32:34:0b:
                    b1:45:86:c1:9b:5e:22:08:8a:01:5e:38:df:e3:12:
                    06:79:14:6f:0f:de:52:04:94:92:24:9c:68:3d:c4:
                    fa:5f:14:f7:34:ff:7e:82:d0:61:3a:ab:8d:ed:45:
                    1b:9b:a1:65:11:b6:cf:e7:71:18:92:02:44:16:8d:
                    f5:1a:f3:3a:14:20:1b:ae:f0:75:89:9a:e1:e6:5c:
                    49:02:ac:a7:70:e9:02:d0:2a:8c:9b:ef:04:2b:b5:
                    88:f2:42:f3:62:8f:7b:ec:ab:1e:0b:0f:c5:60:4a:
                    f4:2c:68:7a:9a:41:04:96:83:54:c5:05:5a:c3:05:
                    51:c5:ed:f2:14:19:f9:a0:11:14:2a:95:9a:22:b8:
                    5e:9d:15:2c:a1:ce:14:7c:6f:5d:bd:db:89:dc:ed:
                    0c:32:a1:a9:d7:83:07:2a:8a:90:52:5b:b4:bb:a3:
                    ea:c9:bd:34:5c:59:d0:ff:f7:7b:b9:a9:fd:c5:e4:
                    9e:9e:03:e3:a4:5c:17:33:53:41:3f:22:3c:81:1f:
                    bb:7d:0f:c9:5c:95:59:5a:45:13:c7:20:e1:75:e6:
                    77:d1:f1:17:63:ab:eb:0e:90:8c:25:84:83:f0:ec:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4A:8D:EB:32:BE:B7:15:56:D5:5E:2F:A9:25:8B:1A:16:DA:97:9B
            X509v3 Authority Key Identifier:
                keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:78:ae:8c:8b:4d:d9:fe:d9:c0:58:bd:6b:fc:e1:fb:53:89:
         7d:ba:cd:37:0d:13:96:d1:da:b7:bd:6b:f6:76:72:e9:96:2b:
         89:3f:73:3c:7b:89:82:78:96:d0:47:1e:72:61:1f:8f:0f:a6:
         91:ff:af:20:55:15:57:f8:49:3d:12:01:3d:9f:67:19:a9:92:
         b9:4a:49:5a:9a:de:7a:04:35:72:42:0f:c9:e7:0a:b8:d1:85:
         44:50:fe:42:69:66:e4:26:a1:0e:1d:8c:25:b0:77:f5:0f:d1:
         11:ac:c0:cb:45:59:e9:f3:8d:0e:5c:d0:f8:98:17:12:24:03:
         19:d8:c6:07:a4:db:23:af:dc:11:37:16:a1:83:03:e5:e2:53:
         97:19:e9:dd:bd:e9:96:77:ad:14:b9:62:b6:72:65:02:f0:f9:
         d6:58:5f:c9:e0:bc:8c:43:bc:c0:ea:f1:73:c5:b3:6c:0c:57:
         55:1e:43:b8:b5:52:38:0a:7b:eb:57:23:3d:d8:7e:a0:1c:63:
         8e:49:0c:50:51:5e:1b:67:7e:a2:90:2a:6e:99:c3:9a:f6:f8:
         4f:66:cc:75:3b:ec:37:ed:dd:b3:69:42:08:06:b2:34:0a:b0:
         2c:99:4f:c6:18:b3:5c:7d:18:77:3f:06:87:da:0e:47:20:66:
         58:96:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:54 2025 by rpki-client