Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File:                     ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier:          WZSKvgdvfISIycvhLnX+z09H5xlAwmgxUs7Z/iE2tJQ=
Subject key identifier:   4A:9B:64:1B:70:84:15:3B:8D:80:96:D3:0E:35:9F:B3:5A:E7:21:93
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer:       /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial:       0197B6D777AFDA9FD327BB862DCA9E2EC2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 14:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:03 +0000
Files and hashes:         1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
                          2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: pxIHvvPLKL5kPBiKejuVJPQwdkC3RIX3anO6qnj7FKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:77:af:da:9f:d3:27:bb:86:2d:ca:9e:2e:c2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
        Validity
            Not Before: Jun 28 14:01:03 2025 GMT
            Not After : Jun 29 14:01:03 2025 GMT
        Subject: CN=4a9b641b7084153b8d8096d30e359fb35ae72193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:1f:6c:96:0a:c7:d1:46:26:1c:2b:5b:01:
                    37:5f:51:23:9b:2a:20:7b:19:d3:e3:6b:34:f8:29:
                    32:31:39:7c:34:c8:5a:96:93:68:1c:8e:e4:b1:f7:
                    32:7b:70:e1:e7:ab:5d:4a:1e:37:b3:d4:fe:3c:25:
                    a9:e1:74:34:3c:6d:64:86:4b:94:6d:e3:c3:f6:ed:
                    ba:d6:e3:93:9e:59:3b:76:e9:f0:b0:51:56:78:d8:
                    93:e5:c4:52:0e:d7:ca:9f:95:d0:63:95:7c:db:99:
                    9a:5b:2e:11:cf:fc:52:1c:53:1b:59:f1:19:51:1c:
                    ea:5e:c0:e1:8e:df:0b:ae:92:f3:f3:44:b7:79:85:
                    1f:34:4e:af:de:d5:f9:7c:8c:1f:d7:9a:3d:f9:5d:
                    3a:ef:e9:d6:c9:5d:d1:70:57:20:e8:ee:c9:95:08:
                    72:9d:9f:fb:ef:89:bf:40:a6:30:b4:b3:e1:18:ce:
                    c1:5a:80:ef:70:7f:cf:38:b4:22:76:1b:52:ce:da:
                    4b:a4:45:31:cb:b5:c6:13:c9:3f:d1:21:bc:73:99:
                    3c:2c:4e:bc:61:dd:9b:6f:c9:68:81:22:fa:34:0a:
                    1c:04:b3:bc:7e:9f:a2:34:69:7c:7b:f2:b0:8f:56:
                    8e:8d:e0:9f:4c:08:d4:49:79:ed:3a:fa:f9:4e:73:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9B:64:1B:70:84:15:3B:8D:80:96:D3:0E:35:9F:B3:5A:E7:21:93
            X509v3 Authority Key Identifier:
                keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:57:3c:1d:d1:09:04:f8:fa:54:a1:32:0b:a1:09:be:ea:
         ca:7c:02:01:84:11:14:f0:37:38:02:35:1c:57:d0:ee:69:2f:
         d5:19:c0:27:29:0b:7e:b8:a2:cd:9b:0a:26:2a:7a:10:dd:47:
         0c:e8:86:45:75:b4:88:88:42:49:b7:b8:1d:73:ea:65:0e:4f:
         0f:ee:fc:0c:73:d9:14:60:37:45:85:af:cd:cb:eb:e1:31:ec:
         86:f4:8e:d4:14:e6:43:b1:91:4f:00:21:f9:58:a1:9c:1e:14:
         92:71:a8:df:be:49:b9:76:ca:e4:e9:5e:bb:cc:e9:b0:ba:0c:
         b9:21:0a:a6:3f:b4:1e:24:0e:3e:30:ff:f4:cf:1a:ad:a9:58:
         ff:1e:ab:ad:75:94:96:b5:77:50:4b:97:df:aa:c6:fb:0a:e2:
         66:4d:de:89:04:84:d9:a3:56:1c:02:e1:fa:c1:79:b8:19:bf:
         89:23:f0:6c:66:d4:e0:cd:dc:bb:4c:cd:29:58:10:99:8f:71:
         18:fd:5b:b3:6e:8a:be:06:70:53:12:a4:cb:62:fa:51:61:8d:
         1b:d9:1b:8f:e5:e9:e4:cc:98:74:c2:1d:89:68:37:8b:4d:e0:
         70:11:2d:3f:b7:51:b8:0c:70:45:9a:5a:e9:65:ee:57:1d:f9:
         d1:6f:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:01 2025 by rpki-client