Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
File:                     RJsY4ylteV06nJWb4lxwqqs2UgA.mft (raw, json)
Hash identifier:          +trq7TF2sZO7wxa23qOU1WlZ44sG1vhTtedF7w2cMUs=
Subject key identifier:   E3:1F:E4:FF:02:EB:F2:57:87:47:BC:6B:8B:48:B4:52:68:14:D5:BF
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Certificate issuer:       /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial:       0197B5FC0FC4FE285F4E64F0746E3A509E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 10:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:24 +0000
Files and hashes:         1: J8QjZax-mkvPxfZhhHMPCwubpys.roa (hash: rmal6rcTiDBRBlMMyLquXrrXQpuz0JgUekU0ozpEKqs=)
                          2: RJsY4ylteV06nJWb4lxwqqs2UgA.crl (hash: Mb+BVrxFrNjD9Em2I8kTF9vvIPKQpIbQnkWmTEOUTYY=)
                          3: SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa (hash: OQVaFQPCwhrwCF+WYF+druX/sOmGI/9eo2Z2LvF9GLs=)
                          4: leAAH4rGishsnZoufTD0XzRz9UE.roa (hash: XYLINiTCGoUfisGhej9/jS2otE2Loul2nvXuv/CwfdM=)
                          5: x0AcTRasjy0qWZOIGUnT1Kbz4uk.roa (hash: zaM3VnNG9RVFofm3T8ZoNUTLDhK3X/kEUyA6UhvyMf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:0f:c4:fe:28:5f:4e:64:f0:74:6e:3a:50:9e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
        Validity
            Not Before: Jun 28 10:01:24 2025 GMT
            Not After : Jun 29 10:01:24 2025 GMT
        Subject: CN=e31fe4ff02ebf2578747bc6b8b48b4526814d5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:47:8d:bc:95:73:a8:49:84:fc:87:9f:0b:
                    da:da:7e:fa:79:fd:a5:07:2a:1c:20:df:aa:1c:d4:
                    ff:e8:e5:6f:ce:33:ca:83:e2:0e:e1:64:8a:3e:3c:
                    fb:73:71:eb:ec:fb:df:1c:76:05:fd:5d:59:8e:00:
                    05:82:46:9f:c3:2a:da:60:69:50:f4:92:cc:3a:4a:
                    52:d7:be:28:7f:0c:db:30:9d:24:a7:ed:b4:2e:4d:
                    d3:93:59:ee:88:9f:ca:64:47:ad:56:9c:1a:2c:15:
                    48:31:d8:02:3d:1b:76:01:f2:c0:b3:f3:6b:97:db:
                    3b:95:95:78:16:3c:1c:56:d7:09:b6:b9:bd:17:09:
                    1d:d6:36:9d:dc:c2:fd:6a:8f:c3:e1:69:81:0d:f6:
                    88:2b:84:f6:58:27:67:c0:66:b6:e5:cd:80:d2:b9:
                    72:e1:3b:f1:da:84:51:3d:a8:c8:a0:bc:8f:72:a6:
                    f2:fa:33:00:37:63:0f:21:8e:51:8c:84:2f:56:dc:
                    81:a6:b3:e2:f5:75:c8:42:ff:17:2c:7a:8b:fa:11:
                    3c:b9:6e:9c:ab:35:d4:cf:63:50:cc:1c:f5:d2:f3:
                    9e:d8:4d:a0:34:63:b0:ca:e8:e4:54:2f:c9:a6:10:
                    99:02:8d:ff:80:15:20:0f:da:44:4a:61:37:88:3d:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:E4:FF:02:EB:F2:57:87:47:BC:6B:8B:48:B4:52:68:14:D5:BF
            X509v3 Authority Key Identifier:
                keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:05:5f:f0:ea:56:34:7e:40:19:f4:1c:fd:20:eb:b6:b4:4a:
         52:d0:31:8f:19:06:3b:88:1e:7c:aa:b1:7b:27:54:2c:6c:56:
         31:9b:8a:a0:98:f5:2d:dc:71:bb:90:ca:93:3f:12:4f:c9:c5:
         0d:26:12:a3:52:63:19:59:66:f1:78:2b:e3:3e:40:7f:66:b7:
         5b:64:a2:35:59:b7:6f:ba:28:3d:fd:58:53:80:fb:ad:a7:2f:
         5f:b2:24:95:4d:af:f8:22:b2:cd:e4:89:42:a0:4e:a4:4a:b3:
         40:46:78:d1:03:53:ce:a9:20:57:13:ee:b7:0b:5f:b4:5b:50:
         1d:d3:5b:98:27:04:cc:92:3e:f0:71:74:98:f6:37:f8:1e:67:
         0f:39:83:ef:30:ef:47:ff:d0:c9:92:02:19:a1:7c:f1:f7:f7:
         60:10:de:47:9d:6b:f2:c6:44:f0:05:31:5c:ec:03:15:93:4a:
         35:1f:8b:f7:77:cd:60:03:dd:8f:ec:8d:ff:26:70:ce:12:6a:
         a2:76:fd:4d:02:e8:bf:c1:15:3f:84:a5:53:d3:36:b2:0b:f1:
         60:7b:57:fd:70:04:16:93:83:a8:9e:fc:4f:fe:27:64:15:0a:
         cc:02:03:87:de:56:45:9f:3c:95:c8:5f:d8:af:81:72:00:af:
         53:fa:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:21 2025 by rpki-client