Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File:                     RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier:          Al6pzqw//9Ud9iDf1b38URWRMjsHXkRZAD2HQw3E+uM=
Subject key identifier:   2F:21:8A:BC:82:58:EE:0F:37:93:31:10:AF:EC:C3:A1:D9:F6:6D:59
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer:       /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial:       0197B6A1F3BC55CDE1CE013699E72899FFFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number:          15C1
Signing time:             Sat 28 Jun 2025 13:02:36 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:36 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:36 +0000
Files and hashes:         1: 9NPwe5Cch9DKsApne4lBck33dDg.roa (hash: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=)
                          2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: uaBm14FB4opaveMV4927jUbw8ow+GUzP9p3Km39DIvI=)
                          3: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (hash: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=)
                          4: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (hash: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=)
                          5: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (hash: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:f3:bc:55:cd:e1:ce:01:36:99:e7:28:99:ff:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
        Validity
            Not Before: Jun 28 13:02:36 2025 GMT
            Not After : Jun 29 13:02:36 2025 GMT
        Subject: CN=2f218abc8258ee0f37933110afecc3a1d9f66d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:83:5f:e4:18:dc:c3:45:bc:f6:ee:13:a0:
                    fb:a6:d1:6a:6f:8e:97:e5:6e:5c:eb:11:01:d3:05:
                    ca:2f:26:71:78:00:2d:6e:5b:1b:48:52:eb:63:55:
                    6f:75:0f:8b:4b:d8:94:f6:a2:45:34:6c:bf:ed:a1:
                    81:bc:48:c5:94:1c:65:5d:a1:60:4b:8f:b2:c7:cd:
                    c3:17:a6:9f:ea:1c:ca:0b:23:8a:6a:c6:d9:a2:08:
                    bb:42:1c:d8:98:fc:a1:d8:a0:6d:a0:80:47:3f:92:
                    20:4e:28:5c:96:05:2a:bb:b9:7e:2a:6b:96:73:e5:
                    ef:24:1f:56:8d:72:80:99:13:42:93:13:33:0c:b8:
                    99:de:fc:ed:4c:40:32:91:83:d7:48:70:dd:2e:dc:
                    9d:77:2b:bb:5f:58:7a:31:29:1d:b1:7a:29:54:e3:
                    2c:88:20:0e:3b:64:41:af:18:91:3a:72:43:7f:61:
                    ed:07:71:6d:7a:df:a2:3e:14:b6:4d:de:96:e8:9d:
                    a9:ee:7a:0f:ee:58:6c:b8:e0:99:de:d7:b9:ec:3f:
                    65:03:73:d6:e6:c7:12:32:3a:f3:d6:fc:27:f9:b2:
                    b7:81:15:1a:b7:d0:85:af:b7:1a:6d:74:07:f6:79:
                    5d:54:f0:38:15:71:24:82:bd:b3:fc:cd:93:79:97:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:21:8A:BC:82:58:EE:0F:37:93:31:10:AF:EC:C3:A1:D9:F6:6D:59
            X509v3 Authority Key Identifier:
                keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:30:b5:79:d9:e3:64:d8:6f:f2:9b:71:06:6e:10:a1:3d:75:
         5f:8f:d0:4e:46:2a:3d:fb:c8:e4:9c:e9:e1:72:bf:25:22:79:
         89:9d:ce:a6:76:04:a3:fe:70:ba:6d:f3:98:a9:5c:e4:a4:3b:
         ba:69:75:ac:04:30:d3:57:b2:9a:14:75:97:da:3a:76:3e:e0:
         ab:dc:a1:0c:02:4f:ab:bd:13:07:4a:52:af:b5:ed:40:2d:e5:
         34:f2:45:aa:fc:b5:1f:1b:bf:e0:38:22:aa:de:60:67:d2:c9:
         6a:1b:3b:e7:b3:b5:fd:20:35:ac:0f:34:5b:c8:ec:38:dc:7d:
         9e:4b:2e:23:fa:d2:f3:9d:7d:4e:d5:e6:57:ba:ff:ed:29:33:
         59:02:ab:8b:c6:e8:10:1f:b8:11:16:44:58:71:41:e4:da:53:
         ea:50:4d:15:24:ee:dd:66:d6:95:2f:af:17:bb:2b:a4:42:73:
         57:e9:30:94:55:f0:4c:67:03:f8:47:d2:e1:02:f4:d6:18:a0:
         05:69:9f:97:9f:14:b1:ca:d9:d1:9f:be:87:e8:a2:e8:08:a3:
         87:9a:b0:11:30:26:77:9a:b0:df:7b:d4:c5:5d:ff:95:a4:85:
         ff:b1:44:77:74:55:0a:f4:85:59:a9:46:c0:fd:b2:c7:db:41:
         2f:f2:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:30 2025 by rpki-client