Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
File:                     RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json)
Hash identifier:          XufWzzvPIH8C8GlyoNyoKd+kDRxPlY2SGlKVOt5zcl8=
Subject key identifier:   A1:C6:67:F8:34:DA:E5:80:C5:27:A2:32:F9:2E:B6:07:5B:31:03:2D
Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
Certificate issuer:       /CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Certificate serial:       0197B6A126A414867E65758C18CE15ABD86A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 13:01:43 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:43 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:43 +0000
Files and hashes:         1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: H81/Yj7Oq2ZzdEsRNeECLDpvv0MV9aewxn60ISvjv7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:26:a4:14:86:7e:65:75:8c:18:ce:15:ab:d8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48
        Validity
            Not Before: Jun 28 13:01:43 2025 GMT
            Not After : Jun 29 13:01:43 2025 GMT
        Subject: CN=a1c667f834dae580c527a232f92eb6075b31032d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:07:78:34:f8:ad:95:72:ee:70:f3:c7:ed:
                    24:4e:b8:6c:ca:bf:2c:2d:c8:2a:c8:c2:49:7e:01:
                    1a:86:7a:a3:a7:32:dd:2a:85:29:16:4f:76:21:14:
                    f2:0a:04:af:7d:12:85:a7:1f:d4:74:1c:82:4c:bc:
                    d9:ef:ac:1c:3f:49:84:8c:8c:04:43:0a:cf:e8:1c:
                    84:b3:29:31:aa:60:59:4c:b1:a1:12:a7:62:50:5f:
                    c3:dc:65:4d:88:30:58:4d:68:77:96:16:45:00:fb:
                    3d:fb:0f:a6:e7:cd:ee:be:b8:1c:89:40:eb:4d:e2:
                    74:55:ba:f2:ff:85:cf:ef:80:5d:65:91:34:2e:14:
                    2a:2e:85:00:8e:26:29:02:33:39:1f:9b:8c:cf:36:
                    a2:30:b4:fe:86:54:d1:6d:5b:c2:50:b3:a5:4c:14:
                    b0:47:c0:fe:b5:31:bb:9d:e1:b2:bf:b2:73:23:d8:
                    11:2d:74:e0:10:19:23:5a:b1:a2:f0:de:dd:7f:3e:
                    41:60:84:b5:81:70:a8:dc:3e:65:4d:5e:e6:0e:4a:
                    01:6c:e6:88:be:ec:e8:df:3c:76:90:1b:02:68:9d:
                    5d:7f:b7:34:79:4b:07:ef:2d:af:2c:bf:8c:ec:ff:
                    03:8a:cb:d4:7c:1d:fa:f3:9e:0d:65:6f:37:ba:85:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:67:F8:34:DA:E5:80:C5:27:A2:32:F9:2E:B6:07:5B:31:03:2D
            X509v3 Authority Key Identifier:
                keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ff:f1:55:9b:43:9a:9e:a5:b4:14:e1:29:f7:56:6f:ca:4c:
         b9:05:52:fc:88:2d:b8:2f:45:27:1a:6e:53:65:1b:97:be:65:
         cc:63:52:18:da:3d:ea:17:2a:37:3f:ad:3d:0c:ee:98:c9:83:
         76:36:3b:cd:9e:66:0f:74:ec:99:26:7c:b7:88:a7:2d:d2:80:
         95:45:ad:96:dd:43:eb:0f:a5:0b:35:5c:8d:ba:cf:a4:f3:1d:
         4f:3c:63:f4:92:17:80:ae:ed:5d:44:84:06:74:f2:7e:be:c3:
         1b:f6:5a:86:4b:1e:0b:c5:00:fd:97:86:51:c4:93:c7:48:e9:
         d2:db:46:69:28:90:3a:db:4f:63:04:dc:20:8e:9e:0e:56:84:
         f4:59:74:6e:21:b1:df:9e:6c:55:6c:64:92:43:7c:68:4c:18:
         4b:5a:93:ae:4f:c2:8c:68:4c:0d:e0:e1:77:de:65:95:bc:21:
         2c:37:11:a1:1d:ee:7d:a2:0a:cf:fb:66:ab:2c:b9:e8:c0:42:
         97:2c:2d:b0:7c:0f:d0:12:90:c0:4a:06:d2:3e:b8:08:67:42:
         1c:bd:d4:32:5c:69:b3:61:2b:f9:c1:b8:8e:db:6d:e9:33:87:
         33:f0:5e:37:1c:cc:16:b1:6f:94:cb:51:e4:43:09:cd:02:23:
         33:de:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:48 2025 by rpki-client