Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          asPoT33EBEMcX36tBR9TIEEpo0z/R6I/c6sjUoNakmk=
Subject key identifier:   CB:3F:A7:CA:F2:54:BC:2B:79:45:4A:C3:8B:03:28:38:2B:85:6D:29
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       0197C75DA97BF1AD25FDF984B5ADBF7A6CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          15C2
Signing time:             Tue 01 Jul 2025 19:01:33 +0000
Manifest this update:     Tue 01 Jul 2025 19:01:33 +0000
Manifest next update:     Wed 02 Jul 2025 19:01:33 +0000
Files and hashes:         1: 480p7BIjIK-B7q3fhqVH-c9jWtM.roa (hash: Oq3bjkZh6ACA9+Ey6L0eW4PFiYEb6oJn3R3aG4qJpMs=)
                          2: 7MVokHTUjOR_Ula_qOVzOSXNEdU.roa (hash: iVCuhBUobzj667bcusQ2j4zXO5PCfzjmGuh6mK8Lkeo=)
                          3: GYuIoE-jlXSckwk_qSK_aV7UB4Q.roa (hash: sORKouCrelcQgpTPPPbZDvGrSxjdHNUzrheoRMHaMrw=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: Dv8L36vH9yB495HENZoIj6DTxAARu3CRxC+7PdgZGYA=)
                          5: aa2j5wVm0c-lQnZ_s16QHGRxbVU.roa (hash: 2qdz/uEuQTzsIMdeNOG9LQdnTQSy4fa2A5Rp2WG5LzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:5d:a9:7b:f1:ad:25:fd:f9:84:b5:ad:bf:7a:6c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: Jul  1 19:01:33 2025 GMT
            Not After : Jul  2 19:01:33 2025 GMT
        Subject: CN=cb3fa7caf254bc2b79454ac38b0328382b856d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:d6:eb:0c:02:98:33:a0:5f:6a:bc:3b:37:
                    1b:5a:95:3e:ab:83:6e:a0:f5:39:e0:16:b1:3d:9a:
                    0b:3e:65:65:fb:f0:3d:96:09:78:7e:ff:01:35:c0:
                    77:e2:fe:c0:8d:26:c7:82:e7:f4:81:9e:d6:27:b9:
                    38:48:25:bb:9b:a6:87:8e:42:16:f6:f9:87:b9:06:
                    0e:29:0b:ad:a5:67:32:b9:80:0e:86:51:14:2b:18:
                    b7:ef:42:88:ba:af:13:c2:ec:ac:4a:84:f9:61:1b:
                    3c:49:41:30:3a:83:68:9e:0f:28:0b:e5:36:ab:1b:
                    b0:21:f1:09:25:09:ba:05:a5:25:cf:36:97:63:3a:
                    67:4a:58:11:0a:a4:c1:d6:6f:d8:86:82:85:c7:83:
                    54:9d:63:78:fb:87:78:cf:d5:b2:f2:8b:93:8f:95:
                    00:75:b7:57:c4:36:cc:7c:c1:fa:60:06:26:7f:70:
                    7c:dc:5d:42:bb:e7:77:4d:a6:5f:75:ac:96:8d:fd:
                    f6:bf:40:fd:33:24:13:e4:ed:08:82:64:89:ca:84:
                    47:d8:35:1d:8f:97:97:b3:70:fe:cf:85:6b:be:ab:
                    17:05:38:3f:12:76:3a:12:7a:b2:b8:b0:8a:30:5a:
                    2b:0f:8c:75:e6:11:11:bf:ff:4f:59:a4:82:b6:ae:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3F:A7:CA:F2:54:BC:2B:79:45:4A:C3:8B:03:28:38:2B:85:6D:29
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:66:23:7c:90:c2:db:98:fb:64:4f:b9:a5:93:bd:5f:2f:
         5d:f5:ad:a9:0a:73:7b:0a:1f:cb:92:27:08:12:5a:ef:4f:22:
         39:9c:9d:30:61:c7:21:0e:8c:47:9b:4f:62:2b:17:ee:14:18:
         13:47:e0:0a:0f:a6:8d:8e:82:49:b3:2d:cd:a0:86:eb:9c:ae:
         f8:1a:f4:dd:29:b0:3f:71:ab:23:7c:60:19:8c:92:82:03:08:
         e3:58:0e:32:75:0d:dc:bd:e4:4f:f4:86:e4:35:00:64:ba:ea:
         7b:24:f9:c5:21:0e:a5:ce:6e:f7:1c:29:25:dc:85:fa:83:b0:
         c8:49:db:ce:e5:55:35:06:51:ef:9d:fb:27:9e:4b:06:00:ac:
         db:68:23:2a:bd:9d:95:ec:1b:8d:33:6c:d6:66:ce:20:c5:1c:
         2a:5f:74:6a:aa:cd:48:9b:50:b9:e8:3a:be:9a:97:b2:fd:7f:
         08:d2:cb:da:db:00:d7:e9:48:fa:6d:21:a3:38:2d:98:65:97:
         03:20:6f:57:57:b0:46:cb:b7:7e:93:70:7e:b1:63:d9:74:54:
         ad:63:bf:75:6e:34:fd:f2:d0:10:93:c4:e3:c4:72:36:42:5b:
         4f:ce:ff:d2:39:8a:e7:6a:c5:90:1e:01:db:73:b0:b3:b4:3c:
         b9:6a:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:31:01 2025 by rpki-client