Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          2Wr/n5rO977GVaQXoxHqGUofXmYU0L664i23QiG+hOo=
Subject key identifier:   18:F5:26:43:DC:01:01:CE:70:6A:D1:FB:0E:0E:9F:85:A0:C2:9C:10
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       0197B6A17EECC12E149CC38DBA919C28056E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          15C7
Signing time:             Sat 28 Jun 2025 13:02:06 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:06 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:06 +0000
Files and hashes:         1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=)
                          2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=)
                          3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=)
                          4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=)
                          5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: zNu90DA8BmtDM7Y2P6riH3dEKqPMjnW4g72wR73bQqs=)
                          7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:7e:ec:c1:2e:14:9c:c3:8d:ba:91:9c:28:05:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Jun 28 13:02:06 2025 GMT
            Not After : Jun 29 13:02:06 2025 GMT
        Subject: CN=18f52643dc0101ce706ad1fb0e0e9f85a0c29c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:1c:38:3d:f5:e2:cb:28:59:a6:da:d8:95:
                    c0:3f:6c:74:39:e6:ae:29:69:6c:af:1c:30:69:83:
                    90:04:bc:b2:aa:a3:4e:03:19:89:c3:42:7a:d0:64:
                    6b:4a:d0:76:54:a7:2a:c1:60:d5:45:20:28:02:6b:
                    aa:00:dc:45:6a:99:3e:0f:a7:04:83:78:bd:36:5a:
                    74:d9:27:56:82:5e:22:7b:5c:79:7e:84:df:16:df:
                    8d:ba:de:10:69:b5:7e:ca:80:15:68:a3:e5:26:0a:
                    77:01:9b:a9:cc:3d:9c:5c:d7:e1:00:ba:9c:5f:5f:
                    f4:11:c4:9e:81:e3:33:99:a5:b0:04:f6:68:c8:bb:
                    db:f7:c1:d0:43:f6:fb:2e:ee:af:1c:7b:67:78:b6:
                    df:44:c5:0a:a0:3b:99:2b:9f:c1:03:ec:3c:ea:38:
                    c0:a2:d7:78:c1:17:82:ea:a3:c3:24:18:9f:33:01:
                    4d:cf:bf:cc:ab:7d:f5:ca:13:36:ed:a1:ad:6a:50:
                    61:6f:14:7b:67:c4:ae:27:e8:fa:e5:33:d9:9d:3d:
                    1e:a5:a7:93:bb:c1:ca:dc:96:9b:58:dd:42:28:c6:
                    c7:26:8c:50:56:2c:3f:0c:47:52:f0:4c:0d:e8:b4:
                    0d:c8:2c:96:18:14:e0:25:d1:f2:e2:fd:fd:3a:15:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F5:26:43:DC:01:01:CE:70:6A:D1:FB:0E:0E:9F:85:A0:C2:9C:10
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:3c:68:9e:40:ae:e7:50:a1:31:51:3a:b0:0d:9d:ad:00:
         80:f5:52:2c:5c:de:6c:65:d7:de:d0:82:f1:ac:9f:14:09:5e:
         a6:93:d2:95:c8:a4:a9:15:23:5c:dd:1f:2d:b1:0e:d2:7a:b6:
         e1:02:4e:b3:b3:85:0c:62:44:64:a4:f6:34:15:8c:8d:9b:d1:
         57:8e:dc:8e:db:f9:dc:79:20:9c:91:59:57:17:d4:1d:57:05:
         c1:60:a5:88:ed:96:7b:08:ed:81:e0:06:20:96:95:34:6f:64:
         8e:11:9c:7a:51:55:00:b9:80:de:29:e6:ed:86:37:48:97:88:
         1e:4f:d7:91:c8:ea:79:99:2c:28:2f:82:ed:2d:9d:69:d4:7e:
         39:8e:9b:c8:76:aa:07:25:e9:67:64:81:45:1c:4c:88:49:30:
         5b:18:79:58:83:5f:86:49:ed:0e:3a:71:f4:f1:86:0c:c5:6e:
         f7:58:98:77:14:3b:47:79:73:94:dd:5d:86:ef:61:34:3e:0d:
         c3:c5:ea:dd:e9:66:7e:2a:de:d1:93:9c:fc:b3:7a:4c:15:70:
         4b:72:3e:93:f5:3a:5e:af:02:25:96:4e:18:a5:7e:21:f6:7c:
         4a:74:4a:02:19:d0:31:db:45:58:1f:ff:1b:fb:5b:0b:64:f3:
         7f:ea:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:33 2025 by rpki-client