Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File:                     r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier:          C9NdC5ptqXhn+EoHLTZbOjT/dzzFpmu6J56jHoH+3is=
Subject key identifier:   02:5D:A9:3E:6C:E0:3C:1F:F6:BC:BE:B1:7E:6E:41:54:1F:A8:30:CE
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer:       /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial:       0197B88ED8613F3969C61388589EB697944D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 22:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 22:00:58 +0000
Files and hashes:         1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=)
                          2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: hxbS8ry/XjJkqZ8EMpiNZlLbwDFMVKhTQlpJ0C60vDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:d8:61:3f:39:69:c6:13:88:58:9e:b6:97:94:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
        Validity
            Not Before: Jun 28 22:00:58 2025 GMT
            Not After : Jun 29 22:00:58 2025 GMT
        Subject: CN=025da93e6ce03c1ff6bcbeb17e6e41541fa830ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:0c:ec:24:41:19:1d:b0:19:b6:22:9f:75:
                    9b:8b:68:7b:02:54:9c:e2:7c:6e:63:2c:2e:ad:7f:
                    d9:24:d1:d5:60:c7:7d:ba:13:ff:61:d7:f0:eb:2c:
                    02:80:9c:b2:32:97:08:3d:fb:8e:79:00:ff:15:57:
                    67:1e:3d:77:d6:51:de:67:ef:23:03:41:de:32:f1:
                    22:23:55:90:c3:52:88:80:51:b4:1c:78:de:73:27:
                    bf:ad:3a:bf:c2:95:28:85:3d:d1:c6:cf:30:83:e4:
                    08:bb:46:a4:76:b9:c1:4e:14:f7:f0:94:12:74:92:
                    69:44:b1:2d:ae:59:08:7e:d8:ed:19:06:0f:43:eb:
                    33:3c:d7:c0:2a:d7:1f:52:2b:c6:f1:d0:96:74:ec:
                    e4:b9:b9:de:15:e5:ec:25:ee:08:d1:82:ec:3e:c5:
                    7f:a5:0f:ce:cb:71:17:6c:c5:19:83:d4:e4:da:00:
                    7a:d6:50:8d:40:2a:46:f9:96:d4:ce:c5:b5:ef:fd:
                    63:c4:ea:9d:6f:d0:0f:d2:73:80:cc:b3:59:a0:ed:
                    6c:bb:96:c8:01:2a:52:28:05:b8:75:f3:4d:38:16:
                    17:95:4f:92:ea:ab:f2:b6:fc:53:97:5a:58:db:ea:
                    ac:d6:ef:4a:11:b5:b7:6e:24:06:76:e5:ac:99:8c:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5D:A9:3E:6C:E0:3C:1F:F6:BC:BE:B1:7E:6E:41:54:1F:A8:30:CE
            X509v3 Authority Key Identifier:
                keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:71:e4:65:98:e1:64:ed:05:fd:86:56:30:42:93:69:17:f3:
         d4:b0:e9:b7:a1:37:fb:aa:50:5c:cb:6a:e1:6c:25:2c:4c:cb:
         6f:8d:70:74:6c:c4:d7:bd:b7:a7:90:51:9f:29:74:54:0c:51:
         00:ed:5c:54:00:d4:2b:6f:00:e8:b6:3d:48:c0:e5:57:e3:b7:
         b1:95:93:81:aa:8c:d9:7a:bb:65:43:49:38:77:ee:cc:26:26:
         fa:80:45:88:9c:46:39:42:be:78:3d:6d:85:8f:0c:8e:2c:cb:
         4a:16:7b:0a:f5:72:1b:cb:dd:ad:62:86:2c:55:1a:b6:2f:bc:
         a0:ef:2f:f2:60:45:4e:cb:1f:88:3a:15:9b:5a:8f:72:aa:72:
         45:e9:01:83:05:a7:81:f6:f1:ab:1b:a8:87:40:10:62:ef:59:
         8a:5b:07:83:90:98:a4:f4:eb:c2:f2:d7:9c:9d:0f:98:d2:8c:
         01:e6:14:55:25:ee:7f:ef:a3:1e:f2:99:d3:e2:37:0b:50:a2:
         60:a6:c3:3d:23:27:1e:33:a3:74:da:4d:af:cb:2c:09:85:db:
         51:8f:e8:f2:03:24:12:7d:14:dd:c5:74:fc:de:75:8a:6b:0e:
         4b:59:6c:f9:4d:9f:b8:4c:60:78:91:8a:28:82:2d:c0:4b:cb:
         fe:4a:4e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:43 2025 by rpki-client