Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          iTYkEiSbpzN0Osi0QPeNVK3MYVIZHf9MZOP10Vucm7E=
Subject key identifier:   CD:FD:C1:71:08:52:80:6F:0B:1D:73:C8:98:DA:5D:01:9E:CB:51:90
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       0197B77C7F133138CEF7773CFA2C10F67EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 17:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:18 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: 7ypXKUokpm87ha8HFIQAryxYM/9uUgEzYQibSAfU4GA=)
                          2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:7f:13:31:38:ce:f7:77:3c:fa:2c:10:f6:7e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: Jun 28 17:01:18 2025 GMT
            Not After : Jun 29 17:01:18 2025 GMT
        Subject: CN=cdfdc1710852806f0b1d73c898da5d019ecb5190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:ef:3d:bb:e2:0d:a6:a8:64:81:d9:c4:92:
                    14:69:c8:40:94:e6:8b:ba:3a:02:64:3b:d5:9c:fa:
                    39:86:3b:2a:93:8c:7d:f9:66:74:9a:05:aa:00:dd:
                    58:df:72:d7:88:e3:0d:a2:9f:af:42:ca:3a:c6:fb:
                    47:e9:0d:e7:a4:69:c3:e7:37:df:5d:45:92:cf:3a:
                    6a:e6:e0:57:7f:47:57:e5:d0:88:d7:53:11:b3:e5:
                    e0:fb:f3:5b:73:aa:da:64:f0:dc:b0:ef:98:b4:30:
                    7a:9f:f9:26:cc:ae:65:e1:fa:03:b6:85:f7:9f:17:
                    ad:91:a4:e9:49:5a:9b:9a:6c:4b:53:06:ea:1e:92:
                    d0:c9:4b:f0:c4:e2:24:1f:5f:42:8d:a2:da:f9:76:
                    d9:85:64:87:4f:0a:ce:46:4e:60:bd:35:f0:67:be:
                    9b:ef:a8:e5:ff:27:45:e2:1c:a7:b1:09:12:f3:98:
                    7d:73:ab:bd:7c:a6:4d:bf:fa:5c:34:e8:5e:51:82:
                    d1:83:34:fa:05:7e:f3:71:a5:bd:6c:aa:f6:e9:bd:
                    a1:61:36:e2:ae:2b:5a:10:bd:73:18:94:99:af:d7:
                    2f:ab:c7:ee:9d:99:95:f4:2b:f1:3b:41:61:51:60:
                    05:e2:4e:47:a2:df:d7:d9:83:a8:fd:41:f0:79:f2:
                    67:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FD:C1:71:08:52:80:6F:0B:1D:73:C8:98:DA:5D:01:9E:CB:51:90
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:58:65:82:f5:2d:22:f0:bb:c7:5d:a0:6a:df:a3:77:82:40:
         b1:cf:5a:b4:f9:84:17:83:db:91:3b:33:71:d1:78:ab:45:f3:
         cf:3b:d3:d0:5a:2e:72:d9:d3:e3:fc:d5:81:df:8e:b2:fb:06:
         14:bd:5e:35:b9:04:cc:e1:34:36:f9:ba:79:7f:81:bc:92:7b:
         fb:d0:6a:4d:78:96:cf:d7:bd:8b:47:16:b3:d2:62:e9:bf:9c:
         11:c7:8d:64:39:fe:57:87:8a:19:12:7a:39:56:a7:28:95:71:
         45:fe:d9:a0:c3:34:c6:64:42:2c:ac:22:d5:36:4f:98:69:8b:
         73:3f:4a:df:b1:bc:bf:7a:f8:da:ac:d0:05:e6:78:e7:d5:54:
         0d:fd:fc:e9:8f:14:46:14:0d:ca:a0:94:22:9d:1a:11:ef:92:
         2e:45:d7:d9:44:f9:6e:0b:d5:40:78:82:d1:8a:95:b1:87:22:
         5b:80:c9:09:5b:0b:c9:10:40:a0:4a:17:e6:33:7a:20:33:38:
         f8:e8:11:1a:8f:52:21:00:0c:d5:a0:32:3f:5c:3f:6d:8f:6b:
         0c:3d:e6:92:73:28:ee:7f:1d:51:23:b0:ae:b6:3b:66:ed:a8:
         33:1d:48:2d:19:75:fc:7f:54:81:1a:38:a0:26:45:7a:7b:67:
         6f:f1:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:41 2025 by rpki-client