Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File:                     zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier:          +QUx+n8N7JuMYqQ8yQhzvXA1TRrOVi0SKwVvcLWTBW8=
Subject key identifier:   5E:C8:C7:0C:72:B4:6B:C0:44:25:63:1C:26:AF:20:6D:39:5E:C7:9F
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer:       /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial:       0197C8A6C003E3EF0DC51956D6CCB81EE809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number:          15C0
Signing time:             Wed 02 Jul 2025 01:01:00 +0000
Manifest this update:     Wed 02 Jul 2025 01:01:00 +0000
Manifest next update:     Thu 03 Jul 2025 01:01:00 +0000
Files and hashes:         1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
                          2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: WchQY4nTpOwElV/nw1oV9GLau0zJx9nTzpIxGLADdOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:a6:c0:03:e3:ef:0d:c5:19:56:d6:cc:b8:1e:e8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
        Validity
            Not Before: Jul  2 01:01:00 2025 GMT
            Not After : Jul  3 01:01:00 2025 GMT
        Subject: CN=5ec8c70c72b46bc04425631c26af206d395ec79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:c3:a0:71:8c:43:b5:54:4c:fd:de:bd:86:
                    d0:af:2e:76:e1:95:cb:16:2e:df:70:79:99:66:d4:
                    77:a5:8c:ef:ce:5a:b9:55:a9:57:76:c2:c3:b8:cc:
                    de:c6:32:64:77:3c:db:fa:8f:12:f5:bb:72:12:e3:
                    76:8b:9c:b1:a2:9b:94:2a:3e:0f:f4:3c:53:65:b8:
                    36:11:48:5a:71:04:fd:59:4e:8b:f1:95:6b:1f:73:
                    27:ae:ef:09:b9:9d:82:f2:dd:de:4a:32:76:0d:a4:
                    46:3b:7d:88:05:1d:6e:e4:13:2c:49:49:c1:ea:89:
                    d4:b5:8c:bb:4c:76:42:2c:5a:bf:c4:40:4c:fe:16:
                    c8:75:28:53:2b:30:26:ba:07:66:22:9a:91:44:e7:
                    59:4d:85:c6:f5:01:74:09:39:8a:1d:07:c4:e7:a7:
                    b8:b7:b8:88:6d:93:c3:c7:07:99:38:23:7f:3c:6f:
                    54:19:1c:97:36:94:19:4d:14:26:0a:5a:1b:e7:08:
                    00:97:8b:62:b8:d3:20:19:db:2a:9a:74:8f:fc:6d:
                    c5:3a:2e:97:77:94:7e:57:1f:d5:b5:00:34:5c:f0:
                    b6:77:37:94:7f:9c:16:7a:11:75:3d:6b:01:e9:79:
                    1b:e3:d3:9c:76:5b:d6:12:8a:1c:90:dd:04:53:40:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C8:C7:0C:72:B4:6B:C0:44:25:63:1C:26:AF:20:6D:39:5E:C7:9F
            X509v3 Authority Key Identifier:
                keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ef:42:07:c5:1a:ab:64:ac:8a:24:83:ad:09:ad:d0:48:ea:
         e9:66:b3:06:95:6e:90:25:42:11:c0:05:92:4d:0b:26:00:f7:
         37:9f:a3:ad:25:26:03:09:6e:df:54:29:59:ca:b4:ac:b6:4d:
         9d:69:ee:16:59:9d:0d:1c:b5:1f:dd:48:51:4f:8a:9c:09:10:
         41:14:c9:c4:4d:ae:9d:a6:0e:97:35:74:25:62:0a:9d:21:2c:
         2c:f8:7f:0e:15:44:3e:4a:61:b7:ca:71:76:ef:c6:dc:0a:89:
         d1:35:e5:9c:db:56:80:0a:7f:1b:79:52:fe:7b:2c:90:61:2d:
         31:63:0c:a6:2b:e2:02:f7:ba:05:f1:30:a7:e3:4a:ee:28:b2:
         72:76:e6:ae:b9:2d:b0:d2:3a:9d:ed:2b:c0:4a:91:b3:4b:c8:
         92:0a:62:86:85:63:79:b1:70:70:53:5a:2a:25:ed:42:86:8c:
         a0:19:7a:22:b4:c8:46:fe:5c:45:34:25:2c:06:81:48:3c:16:
         8d:47:a2:a7:5c:68:8c:5e:5e:de:5b:aa:c1:6b:e0:dc:4a:a5:
         3b:c9:49:80:bd:3d:75:5a:07:29:ba:eb:ea:90:d5:08:db:9b:
         a0:a8:83:05:6f:c6:ba:c2:3d:25:7b:fe:41:6a:47:7e:f4:42:
         e0:68:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:39 2025 by rpki-client