Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
File:                     eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json)
Hash identifier:          ireV/K7Lnw6t82FkW+RtnUHZZ4mrglSUCeRpkDU0p34=
Subject key identifier:   B3:25:1A:0C:D6:51:91:BE:75:CB:A0:C0:F5:05:E9:2E:30:70:30:5C
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Certificate issuer:       /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial:       0197B6D7A4451A125CB0E2D8F8A0922292A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 14:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:14 +0000
Files and hashes:         1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: upKMRnAdC2BSmds/EvWvRE52lEFPaQmCc2T9skfBAB4=)
                          2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:a4:45:1a:12:5c:b0:e2:d8:f8:a0:92:22:92:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
        Validity
            Not Before: Jun 28 14:01:14 2025 GMT
            Not After : Jun 29 14:01:14 2025 GMT
        Subject: CN=b3251a0cd65191be75cba0c0f505e92e3070305c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:8d:6b:bd:9c:99:59:f6:2d:75:d2:c7:31:
                    db:d2:67:3e:8b:c5:63:7a:4b:c3:af:26:2a:33:97:
                    a7:ec:9d:12:16:a2:a4:95:62:60:e1:1e:cd:4e:fe:
                    0c:8c:98:85:54:63:42:79:8a:00:40:95:8b:a9:24:
                    ad:87:1a:87:89:fd:6e:8b:67:f5:ab:e3:b8:53:16:
                    10:b2:3b:d0:61:72:5e:f3:78:20:9c:c0:e9:ed:31:
                    5d:5b:4b:a3:fa:1e:1c:99:7e:67:dd:51:e4:a6:0f:
                    14:9b:ce:2b:99:7b:a8:ba:e7:6a:31:9c:5e:9f:3d:
                    7d:fa:f2:81:01:66:c4:bf:c3:09:1c:8e:ac:ce:d9:
                    b9:a1:3b:26:70:df:16:30:ac:b8:44:fd:b9:ed:92:
                    2e:56:ab:42:30:b8:49:f7:f0:28:97:10:4b:f0:76:
                    7d:7f:08:b8:f2:2e:0a:2f:7c:40:e1:25:66:61:48:
                    6d:8c:37:a2:8e:23:0d:e2:a7:37:ee:1e:fa:f4:0c:
                    65:79:86:69:49:f9:0b:d5:b2:56:e4:14:d2:1d:67:
                    48:36:b6:4e:06:ae:72:22:d4:5a:b9:c5:9e:e5:3b:
                    ef:e3:2a:e7:df:79:df:09:a5:a9:5e:41:f2:b4:4b:
                    f4:33:bb:f6:50:6d:ed:bb:09:6f:14:6d:5b:6b:ad:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:25:1A:0C:D6:51:91:BE:75:CB:A0:C0:F5:05:E9:2E:30:70:30:5C
            X509v3 Authority Key Identifier:
                keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:ef:8e:19:46:20:d6:b1:69:88:38:fa:d5:f4:17:5b:c8:aa:
         a7:fa:ac:3d:4a:cb:2d:17:e7:2c:3b:ae:68:b8:7b:89:d0:10:
         08:c1:14:d4:d6:71:cb:b5:04:05:be:65:88:4f:42:1d:f9:94:
         6f:e1:48:27:27:73:28:b4:16:60:4e:d1:93:1a:db:9e:3c:87:
         93:6d:bd:8f:0a:24:ff:d1:99:20:cb:0f:68:87:2e:bf:0b:07:
         19:6c:53:46:de:6e:15:f9:a1:30:27:35:92:f6:b9:90:a5:e3:
         0b:3f:be:10:a5:af:17:74:2f:38:54:c9:d0:f4:34:1f:32:02:
         ab:6b:a7:ab:d5:cc:3f:bb:e4:54:d6:bc:52:ea:51:42:1f:83:
         91:be:59:ba:a5:ae:e8:3b:a8:75:3f:57:1d:41:46:df:b6:45:
         0c:0b:55:6e:c7:07:75:aa:4a:72:cb:97:84:1c:98:64:e5:c3:
         a3:8c:19:ec:a5:c1:9c:57:af:7a:4b:5d:86:f5:dc:76:8b:b9:
         f5:e8:b0:fc:b0:0b:71:b7:88:f5:2c:07:26:8e:2b:67:50:58:
         f7:95:2f:8c:91:42:5e:e5:3f:05:58:d4:cc:71:b1:41:2c:4a:
         38:5c:61:db:94:af:9d:c8:b4:fb:32:14:1d:65:bc:01:0d:2e:
         e4:30:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:33 2025 by rpki-client