Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File:                     3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier:          WK2uKrso60OqAbDT7V2ow9jVaFtKcaMl4VUp7zgU4O4=
Subject key identifier:   D7:63:51:56:C0:E2:B6:31:AB:FB:6E:8C:7C:06:1E:0E:3D:F5:B8:87
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer:       /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial:       0197B820F227637B358C22ABF9CCFD633E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 20:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:56 +0000
Files and hashes:         1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: //mV/hhYH1imjX/7riDmLvqEE74UDxg8PgiZi3pVdsc=)
                          2: 5gG_Zi7UzMpPtarM4YgRPE41P0Y.roa (hash: h4U+fDKpUfUkNJ413pa9utTlvK0hGY5RmFrs2JwFVFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:f2:27:63:7b:35:8c:22:ab:f9:cc:fd:63:3e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
        Validity
            Not Before: Jun 28 20:00:56 2025 GMT
            Not After : Jun 29 20:00:56 2025 GMT
        Subject: CN=d7635156c0e2b631abfb6e8c7c061e0e3df5b887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:3c:b4:53:d6:2c:dc:a4:44:7d:f0:0d:33:
                    ae:4f:ce:84:8e:17:cb:c1:9d:0b:66:b5:da:0b:64:
                    e0:04:62:dc:2e:4d:9b:54:87:a9:cb:e0:a2:4a:fa:
                    4f:20:4c:52:f3:cc:53:3c:88:53:64:8f:25:a4:68:
                    83:9c:fb:d6:9d:e8:fa:9c:52:77:ff:ed:5c:ed:e9:
                    9f:01:2f:3a:a8:11:d4:1b:51:d3:8e:4e:8c:a3:d3:
                    9f:aa:64:62:73:ed:2f:b1:c6:68:f7:a9:af:7f:d9:
                    08:a4:99:47:e2:e0:d1:97:37:80:05:d6:0a:5b:f6:
                    46:56:74:56:0b:0d:03:cf:67:c2:14:b1:0e:1c:85:
                    4d:fd:03:ae:40:16:23:49:9f:58:7c:30:ad:4a:f0:
                    8b:af:38:a2:da:50:8e:da:c5:c2:4e:8c:9a:b2:f3:
                    8e:52:55:a9:5f:e0:b5:1c:5c:c2:a6:3b:cd:2e:77:
                    8c:c9:26:69:48:5d:13:73:ed:80:d8:f6:8d:b0:5a:
                    c6:0e:c6:e9:d5:82:61:16:54:8f:03:ea:04:6b:9b:
                    af:5f:53:b2:7c:c8:bb:ee:e1:3c:b3:e6:87:23:4e:
                    be:3d:8d:c8:17:70:2c:a2:3a:5a:8b:e7:01:fa:d1:
                    9d:2e:ca:26:ff:0d:3a:fe:c3:f4:9e:3b:f6:b5:74:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:63:51:56:C0:E2:B6:31:AB:FB:6E:8C:7C:06:1E:0E:3D:F5:B8:87
            X509v3 Authority Key Identifier:
                keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e5:ac:36:50:d3:82:ec:1b:3f:9b:e4:1f:aa:b8:7b:fb:dd:
         78:0c:a8:eb:6a:9c:82:96:67:98:8a:52:49:4a:48:4d:bb:96:
         19:c4:78:e1:3e:79:a0:ce:fe:b4:3a:08:85:45:ee:99:48:f4:
         89:e6:17:21:3d:30:ac:7c:a0:f0:bf:c8:d6:9d:89:e1:90:91:
         78:07:9a:81:a2:11:5e:68:bd:ce:a8:c6:d6:13:a7:6b:bf:2b:
         72:4f:5c:80:6f:d8:15:19:f3:84:f1:d3:8d:a0:c9:98:f9:62:
         51:3c:40:1b:8f:b3:f4:f8:95:17:22:c9:51:e3:cd:4c:00:8c:
         74:75:d5:83:88:44:3e:52:11:00:35:d9:a2:72:60:4c:6d:9e:
         f3:84:ac:24:db:c9:2b:e8:19:2c:e2:3c:bc:30:89:0e:43:07:
         99:d9:56:03:0a:cf:b9:bf:da:bb:81:de:fd:4e:11:a4:a4:16:
         f3:7a:2a:f0:1d:99:7d:3a:f8:ec:31:9d:04:65:4c:8b:2c:93:
         fc:a2:e7:aa:a6:d2:26:99:f1:7f:96:74:12:9f:28:f2:b0:d8:
         15:a2:5d:f5:6a:6e:8a:1e:7e:f7:ba:35:9c:5c:a9:8a:8b:60:
         13:96:ff:84:a8:d9:e8:57:5f:61:ae:90:6f:dc:f2:1f:e7:ee:
         9a:e6:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:23 2025 by rpki-client