Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
File:                     KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft (raw, json)
Hash identifier:          4YleULAGD435lQ6WVrLdOq1HzXpOnNIF85lSOeDUnL4=
Subject key identifier:   C0:C5:D5:DB:36:5B:8E:76:57:B1:F4:0A:E0:60:A7:50:BD:2B:7C:E1
Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Certificate issuer:       /CN=285feec87d1959340872f8f79831202f24c80c9e
Certificate serial:       0197B5FBAD2643873E872DC0C7B418AC30E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 10:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 10:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 10:00:59 +0000
Files and hashes:         1: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl (hash: UA1i2MjUKR1Fz9LJ5M5TwIiqCsM0qXziwDaarsDj4Os=)
                          2: dufDt0AmSEl5MX84gmoizwQiTsk.roa (hash: aXEbp58hPoSuyC6IS1AxqUQLOo+BHH3jFCGl+xNSnf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:ad:26:43:87:3e:87:2d:c0:c7:b4:18:ac:30:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e
        Validity
            Not Before: Jun 28 10:00:59 2025 GMT
            Not After : Jun 29 10:00:59 2025 GMT
        Subject: CN=c0c5d5db365b8e7657b1f40ae060a750bd2b7ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:5d:d0:9c:9b:48:dc:36:6e:6f:fa:c7:18:
                    8a:f0:1d:92:13:35:73:0e:38:5d:7a:04:3d:71:b2:
                    37:52:7c:78:da:90:de:ce:c2:13:3f:a2:17:59:dc:
                    18:7d:68:b0:80:d8:4e:8e:82:fb:b8:2b:28:c3:c5:
                    24:eb:91:15:70:02:b7:0a:5c:5f:24:91:16:32:1e:
                    b0:38:95:fe:33:22:e9:4f:62:94:1d:ec:4b:de:74:
                    59:3b:e6:45:a6:8a:16:b4:a7:80:96:5b:b2:2d:1a:
                    f7:f6:2c:fd:ab:7f:42:da:ee:e6:3a:65:c2:06:a9:
                    6e:3f:87:35:33:90:64:bc:45:5b:62:d4:5c:3f:00:
                    32:d4:8d:e6:e8:7f:ab:8e:6d:d6:0a:b3:15:01:b1:
                    7c:aa:60:88:31:1a:7f:09:23:7f:fc:b5:c0:c3:f8:
                    ce:38:43:5c:43:36:da:44:43:13:dd:0c:05:8f:29:
                    4f:8c:43:f0:b4:bb:be:42:9c:d3:84:c9:08:0e:3b:
                    83:8b:fd:f4:56:54:84:b4:93:b7:52:db:c6:d7:e5:
                    77:5e:ff:e0:1f:6d:dc:ea:85:06:93:32:21:47:e3:
                    61:d3:49:65:60:f3:65:61:47:e8:fc:35:b6:9b:fd:
                    af:cf:36:1f:ce:44:8a:db:43:74:85:04:df:2d:6c:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C5:D5:DB:36:5B:8E:76:57:B1:F4:0A:E0:60:A7:50:BD:2B:7C:E1
            X509v3 Authority Key Identifier:
                keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:41:4e:fb:55:06:db:80:14:81:13:11:3a:b0:3d:e4:ae:
         56:1b:3c:a7:8c:d3:af:7d:99:54:b8:5a:8d:87:fb:12:8a:8a:
         97:1b:3f:0e:91:c7:e2:75:20:8d:79:6f:16:a0:37:b4:29:49:
         af:cf:24:8a:26:9e:0c:4b:0a:3d:62:61:b9:e9:f3:4e:42:ed:
         d3:b3:7e:59:07:74:8c:04:f5:5d:c3:ae:d4:0a:ee:2d:7c:8e:
         5f:f9:26:e9:97:ef:a1:63:75:ba:3b:f9:ae:8a:47:01:29:61:
         d6:da:ac:f2:3c:80:b0:38:87:61:ba:09:2c:b4:fc:24:af:22:
         ce:39:89:e9:23:d3:1c:4d:80:22:57:40:8d:d9:74:6a:c3:92:
         ad:00:7e:77:8f:de:5f:25:73:5c:f8:2f:34:e5:37:f5:d3:74:
         5e:31:d2:c4:db:b4:cb:5c:1c:37:d8:5e:5d:c2:a8:b7:02:45:
         a4:02:56:a8:cf:05:67:52:ea:75:d7:60:7c:78:32:58:d2:74:
         84:2e:3b:5c:0d:e8:62:4c:2c:80:ff:a9:57:27:a1:98:e9:4b:
         0b:73:47:0b:7e:52:8d:5f:49:f7:fb:2f:75:11:4c:d7:5c:57:
         5d:8d:2e:e3:10:57:7a:40:a2:af:9b:ff:13:0d:00:c3:7f:2a:
         d0:a2:8f:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+60mQ4c+hy3Ax7QYrDDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NWZlZWM4N2QxOTU5MzQwODcyZjhmNzk4MzEyMDJmMjRj
ODBjOWUwHhcNMjUwNjI4MTAwMDU5WhcNMjUwNjI5MTAwMDU5WjAzMTEwLwYDVQQD
EyhjMGM1ZDVkYjM2NWI4ZTc2NTdiMWY0MGFlMDYwYTc1MGJkMmI3Y2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxld0JybSNw2bm/6xxiK8B2SEzVz
DjhdegQ9cbI3Unx42pDezsITP6IXWdwYfWiwgNhOjoL7uCsow8Uk65EVcAK3Clxf
JJEWMh6wOJX+MyLpT2KUHexL3nRZO+ZFpooWtKeAlluyLRr39iz9q39C2u7mOmXC
BqluP4c1M5BkvEVbYtRcPwAy1I3m6H+rjm3WCrMVAbF8qmCIMRp/CSN//LXAw/jO
OENcQzbaREMT3QwFjylPjEPwtLu+QpzThMkIDjuDi/30VlSEtJO3UtvG1+V3Xv/g
H23c6oUGkzIhR+Nh00llYPNlYUfo/DW2m/2vzzYfzkSK20N0hQTfLWyQjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDF1ds2W452V7H0CuBgp1C9K3zhMB8GA1UdIwQY
MBaAFChf7sh9GVk0CHL495gxIC8kyAyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNmVmZGItMzE2NS00NTM1LThhYjQt
ZmQzY2ZlNjAxMjQ1LzEvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jNmVmZGItMzE2NS00NTM1LThhYjQtZmQzY2ZlNjAxMjQ1
LzEvS0ZfdXlIMFpXVFFJY3ZqM21ERWdMeVRJREo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ41BTvtV
BtuAFIETETqwPeSuVhs8p4zTr32ZVLhajYf7EoqKlxs/DpHH4nUgjXlvFqA3tClJ
r88kiiaeDEsKPWJhuenzTkLt07N+WQd0jAT1XcOu1AruLXyOX/km6ZfvoWN1ujv5
ropHASlh1tqs8jyAsDiHYboJLLT8JK8izjmJ6SPTHE2AIldAjdl0asOSrQB+d4/e
XyVzXPgvNOU39dN0XjHSxNu0y1wcN9heXcKotwJFpAJWqM8FZ1LqdddgfHgyWNJ0
hC47XA3oYkwsgP+pVyehmOlLC3NHC35SjV9J9/svdRFM11xXXY0u4xBXekCir5v/
Ew0Aw38q0KKPJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:08 2025 by rpki-client