Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File:                     eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier:          WNOYd5i9sP2TZBa8Osre6hjlMseYl3NqpG+uvoYKsK4=
Subject key identifier:   95:1C:41:67:7F:C9:F9:5D:6F:79:7C:E0:00:14:83:B3:36:14:8B:24
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer:       /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial:       0197CFF260F9D799BD07E89BE43DB1CD82BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number:          15C4
Signing time:             Thu 03 Jul 2025 11:00:57 +0000
Manifest this update:     Thu 03 Jul 2025 11:00:57 +0000
Manifest next update:     Fri 04 Jul 2025 11:00:57 +0000
Files and hashes:         1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
                          2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
                          3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: OnN5MCHPxnHpNA0pYKIlZYgr863j03zNCMoqyY4NWaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cf:f2:60:f9:d7:99:bd:07:e8:9b:e4:3d:b1:cd:82:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
        Validity
            Not Before: Jul  3 11:00:57 2025 GMT
            Not After : Jul  4 11:00:57 2025 GMT
        Subject: CN=951c41677fc9f95d6f797ce0001483b336148b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:f9:dd:f6:89:41:d1:ed:7e:e4:ed:ea:19:
                    d7:36:71:91:85:f7:56:f6:fb:27:c4:3d:81:3a:a3:
                    7b:22:69:c9:fd:97:dd:9a:4b:2e:1d:2e:54:de:f9:
                    11:f9:f9:2a:9d:f4:be:8f:29:52:96:71:fb:1b:2a:
                    38:54:d0:99:4f:8e:f3:6a:09:58:a1:b4:f5:e9:92:
                    4b:3d:93:c1:7f:88:fd:5a:3a:e0:20:b9:00:9e:4d:
                    60:b7:79:e5:1f:8e:09:ed:09:0e:60:20:a3:13:38:
                    8f:6f:2a:59:fb:e0:49:4b:ec:b8:79:cc:ff:3e:c2:
                    1e:ce:5b:55:64:02:8a:55:2f:3a:c0:e4:61:49:d8:
                    89:b0:1f:b5:16:ef:fb:cb:6b:37:ac:d3:56:fc:74:
                    e0:79:fe:93:ff:e9:dd:42:4c:4a:81:8e:47:ab:b2:
                    9a:ae:7a:ef:ae:16:3a:44:1c:a2:0a:fa:c9:70:ec:
                    32:7f:66:ce:11:83:8a:24:0b:c8:2d:45:de:46:f0:
                    90:94:80:5b:bf:67:df:6a:d0:5a:97:83:6f:04:61:
                    2b:a5:05:03:72:8a:d3:74:64:4f:26:14:23:d0:cb:
                    4f:db:62:77:d3:e1:39:f9:b0:ac:41:e1:45:df:ff:
                    98:40:ee:64:8c:e6:fd:fa:87:80:7a:59:8a:50:04:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1C:41:67:7F:C9:F9:5D:6F:79:7C:E0:00:14:83:B3:36:14:8B:24
            X509v3 Authority Key Identifier:
                keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:72:3e:eb:a4:d9:66:81:c4:d2:3f:73:c0:55:da:a1:04:3a:
         f6:db:1e:8e:42:76:95:ee:79:e9:7e:20:61:fd:fa:f0:65:e1:
         d1:49:61:0d:b8:70:3b:d1:24:7c:ef:64:26:ed:f4:be:2f:58:
         4c:f5:18:60:98:51:0a:f0:14:87:84:85:d2:1d:4c:ff:2e:9b:
         b9:81:93:6c:f0:95:ba:f0:d5:3d:6f:91:e1:7e:b3:11:3d:15:
         bf:33:3b:a5:db:4e:38:8e:dd:f6:97:eb:c9:a4:ae:b7:66:01:
         d7:25:c2:70:83:34:e4:ca:29:5b:3d:41:f7:c6:d4:6c:96:27:
         b2:22:bb:93:10:32:84:bc:64:22:3c:c0:01:40:12:b9:07:83:
         14:7d:c2:36:a5:eb:a4:d3:bd:04:a7:c4:4b:a3:d6:e9:b7:bc:
         a6:8f:85:06:9d:45:f9:30:d1:f5:3c:8e:90:23:06:17:f2:04:
         d5:2f:42:a9:1f:df:78:5e:e7:0d:93:17:8e:5a:db:c3:4e:0e:
         16:0c:02:2a:01:ea:b5:ff:ca:70:3d:21:6a:80:cb:10:e8:7f:
         a5:25:c3:fc:50:be:d4:08:51:e6:92:02:51:e1:ff:a6:f9:49:
         df:5e:d5:35:da:74:a5:9a:27:67:8d:9f:70:4b:f7:18:d5:58:
         2a:93:9e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:20:16 2025 by rpki-client