Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          kV3W5lknkDMr48UI13aaiTvUAF+xuZtH1wX5ysszHxM=
Subject key identifier:   4E:8A:3E:5B:A1:E8:73:AD:D1:80:FA:4D:BC:BD:58:3E:9C:A9:7C:81
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       0197B9D8EDE53424937CCDF21EF555115561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          15B6
Signing time:             Sun 29 Jun 2025 04:01:30 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:30 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:30 +0000
Files and hashes:         1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: 0lBfxTgkR3pkrxKJcJGj2RjjG+xnOaBsxC+AT33fpKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:ed:e5:34:24:93:7c:cd:f2:1e:f5:55:11:55:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: Jun 29 04:01:30 2025 GMT
            Not After : Jun 30 04:01:30 2025 GMT
        Subject: CN=4e8a3e5ba1e873add180fa4dbcbd583e9ca97c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:c0:98:ae:0a:03:29:fe:08:bf:e8:6b:8d:
                    7b:3f:aa:0a:18:28:86:09:2a:b6:e8:9b:02:57:ec:
                    5e:50:1c:b5:02:71:98:78:94:6f:7a:fc:9a:9e:43:
                    d0:77:66:02:16:f3:bf:c1:9a:43:84:eb:6f:28:ef:
                    fa:46:3f:71:51:fe:76:e2:68:fc:81:ab:78:47:d9:
                    29:59:e0:a3:6b:b4:0d:5a:5c:dd:b3:d6:61:e4:0c:
                    a4:62:2d:51:10:02:6d:47:a5:d0:c8:06:d5:7f:63:
                    6c:d6:b6:e6:7c:84:2d:6f:65:b8:75:53:5d:a7:15:
                    35:62:9b:aa:ab:19:1b:fb:3a:f5:35:7a:41:cd:5f:
                    02:eb:eb:99:cc:39:89:ba:3c:9c:ee:15:17:11:e9:
                    32:99:1a:89:35:b3:02:fc:d9:f6:aa:6e:ee:6b:7e:
                    4e:58:87:a3:b3:ce:93:a1:d2:2e:c1:4b:c1:a4:24:
                    68:1e:62:5b:8f:a7:52:7b:2d:4f:3e:9f:78:10:e2:
                    63:1b:c0:cb:1f:0e:d8:d2:18:7e:39:b1:d4:8d:1e:
                    12:95:a4:59:58:3c:4c:e0:07:2e:0f:92:6b:c1:6e:
                    7b:c7:96:85:90:78:e4:1c:16:34:34:1d:74:63:cd:
                    b2:72:12:59:73:7d:0e:db:d5:8a:de:bd:17:46:b8:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8A:3E:5B:A1:E8:73:AD:D1:80:FA:4D:BC:BD:58:3E:9C:A9:7C:81
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2f:ab:0b:8b:2c:c3:9a:a1:d9:1a:19:b8:73:b3:a0:e0:87:
         c9:8d:ee:b5:a7:a0:9e:b5:03:55:9b:b8:5c:9e:e5:e5:79:7a:
         7d:36:e4:54:34:8f:cd:d2:07:98:64:77:a7:b8:8f:f1:cc:cb:
         98:51:81:cc:df:cb:d8:97:8a:c1:dc:6a:5a:50:25:dc:07:7a:
         3c:a5:e8:ce:46:d4:65:87:8b:fd:bc:03:85:de:fc:74:10:67:
         a8:4f:51:de:62:85:4e:4d:56:06:a4:2a:f8:0a:b3:d7:ed:93:
         ee:95:f3:a9:84:10:3c:6b:8b:0e:a4:8a:29:5d:63:69:d5:0b:
         b9:fd:3f:cd:74:b1:03:1f:24:c5:b7:bc:8a:3f:f1:79:21:a2:
         d7:bd:cc:ac:56:31:1a:df:da:89:40:d2:81:91:6a:14:96:2f:
         a8:2d:69:f9:0d:53:97:ad:39:57:05:fe:38:39:50:95:b6:44:
         6f:e9:36:fc:27:2c:db:94:2b:60:bd:79:97:50:dc:d8:28:60:
         a0:95:90:4a:7e:7c:7d:c8:23:f9:64:9b:ce:8e:54:98:e9:61:
         1f:d1:af:da:dd:6b:21:36:04:23:07:b8:7c:b2:29:16:77:7d:
         a7:cc:46:90:23:44:91:78:73:b3:e7:01:d8:d4:90:73:46:01:
         09:b9:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:19:11 2025 by rpki-client