Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          +Qlz6OvdpltUGp+jKjiVYsiCOvqVzZgXN6bfp6cw260=
Subject key identifier:   99:75:32:AE:7E:77:70:DE:6E:E2:D4:AD:E5:82:19:02:15:5A:F4:19
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       0197B7455DF7241B1457BC33DF95E232514D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 16:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:05 +0000
Files and hashes:         1: 3yv-zmmgfXirN5akYyOZ225Erpo.roa (hash: K+9VHB7ShEik6QpuUx3J66d/K6RXrAo5ZliJg0jvNJw=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: PzNnAn0O2qZhEILpqdPiarlHWmkLB0L7mib/AOjJ8ec=)
                          3: PDj9CbhapwaiDPTHl4V_zSatG1U.roa (hash: y9pPTUUi0Tga4prSiUslZJiX9MosJ/c0ePSWJE6OCf4=)
                          4: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (hash: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:5d:f7:24:1b:14:57:bc:33:df:95:e2:32:51:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Jun 28 16:01:05 2025 GMT
            Not After : Jun 29 16:01:05 2025 GMT
        Subject: CN=997532ae7e7770de6ee2d4ade5821902155af419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:bb:7e:ee:fa:a3:ea:c1:eb:67:53:68:bd:
                    cf:35:b8:d0:a5:3b:af:a8:96:21:25:d0:13:1f:80:
                    d0:48:f4:62:a3:b0:4b:a5:b1:38:7e:4d:a8:51:58:
                    94:6c:44:d6:20:33:3f:66:03:26:d2:23:4b:b5:8e:
                    ff:c9:d1:a4:16:2d:a4:b0:05:92:df:69:1f:2f:f6:
                    39:de:ca:02:d4:c5:1b:09:3c:fb:29:f5:25:55:50:
                    b1:bd:ca:d6:f2:fd:dd:c2:35:1a:e5:b8:5d:b0:5d:
                    61:42:2b:6a:25:ff:0f:2c:54:f5:dc:d7:f4:5b:ad:
                    ab:2c:9a:0f:fe:20:b3:5d:cc:5e:d0:b7:38:dc:3d:
                    f3:a9:de:9a:f3:0c:24:b4:00:5c:5e:d3:19:9b:5f:
                    3d:13:33:28:29:5e:98:21:8b:2e:35:a5:fc:c2:75:
                    68:b2:56:5b:21:10:dd:79:e2:27:cc:15:c4:8c:3c:
                    4a:22:1c:e3:21:c3:88:f4:08:91:05:67:30:83:b6:
                    c1:2e:1c:79:53:cc:cb:c6:1c:ef:12:fe:9b:28:de:
                    12:af:4c:9f:bc:f6:12:97:d0:15:86:7d:d9:ee:56:
                    83:b8:e0:d5:0b:5d:22:b7:f0:08:ce:62:72:a5:f4:
                    93:be:47:38:1d:d8:a7:57:d1:80:c2:89:f8:cc:2e:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:75:32:AE:7E:77:70:DE:6E:E2:D4:AD:E5:82:19:02:15:5A:F4:19
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:24:9d:6e:42:a4:35:25:d4:46:c2:e5:d0:57:20:84:1d:
         c1:20:1f:bd:4b:1d:ce:7d:0b:2f:8b:a9:bc:f1:96:ac:45:db:
         67:5c:b9:90:7c:b0:80:06:58:ac:d1:18:29:ac:b9:a1:62:3a:
         7f:44:f3:26:b2:e0:fb:83:3e:70:dd:4a:cd:1f:7f:c3:a4:64:
         d0:1b:03:89:81:75:7e:28:24:77:7f:57:a0:1d:0f:9a:46:05:
         48:6c:3f:fe:e8:b8:a6:b5:8b:f4:2c:be:e0:a2:9d:05:04:54:
         e7:40:69:21:94:d0:b0:54:58:11:4d:6a:3c:aa:73:aa:f6:10:
         73:6b:c6:52:3b:e6:8b:6c:d6:95:30:9e:6c:c3:c4:ee:66:c4:
         1b:ed:fb:62:2c:fd:59:a8:e0:fb:31:46:be:5f:32:73:29:15:
         d3:41:04:f3:2f:fe:02:51:d0:73:35:31:e4:46:f1:62:bc:a2:
         17:77:8b:b2:2f:3e:25:7c:4a:35:9a:c5:d1:ad:31:98:23:93:
         e2:db:7c:5f:ae:1b:ad:84:3d:40:f9:eb:aa:ad:f5:b6:74:b2:
         46:ef:c9:f0:39:46:67:2f:e4:1e:6d:31:88:f3:30:96:86:76:
         5a:58:12:1b:29:7c:54:71:21:24:30:46:e1:7c:d7:5b:b8:f7:
         07:09:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:33 2025 by rpki-client