Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          DsvynyoAaFaVU9p8qTQJUML28nEeYL+TZvHfb6NnLE4=
Subject key identifier:   20:13:95:38:74:EF:3E:E5:C9:F6:C4:4C:B3:AE:E5:37:3C:01:19:C1
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       0197B77CD94FA184330BD29AD9691516CE9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 17:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:41 +0000
Files and hashes:         1: 5EXO9UiepL6Zq1llBjLLIrL5oUg.roa (hash: f7qlXZI97BeR4x4m6/QuC0gLJcnSYhH/2MDokTxi6Pw=)
                          2: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: 66Df5gywvc/0IXBxebC+bVpmlgU6ZqmnhE21G7SFhk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:d9:4f:a1:84:33:0b:d2:9a:d9:69:15:16:ce:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Jun 28 17:01:41 2025 GMT
            Not After : Jun 29 17:01:41 2025 GMT
        Subject: CN=2013953874ef3ee5c9f6c44cb3aee5373c0119c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:32:e2:9e:7f:13:90:26:33:02:d5:7b:e5:
                    d6:65:c2:ae:31:52:51:5c:7e:7b:3d:a3:dc:a6:8c:
                    40:67:34:6c:ff:2d:cb:ee:ff:b5:6e:57:01:db:d6:
                    68:d6:7e:55:65:55:ff:6b:73:46:5d:80:a6:25:b3:
                    c2:fb:29:67:61:f1:eb:95:47:6d:fc:ef:df:24:ac:
                    41:eb:94:2a:37:60:e3:b4:11:ae:b4:f1:b6:66:4d:
                    b9:4e:c1:fd:68:d1:e9:10:c2:fe:d7:5f:e4:c6:68:
                    72:0c:28:10:8a:8b:f0:26:5a:39:1e:b9:d0:f6:98:
                    da:6b:0e:dc:37:fe:75:43:7e:a9:61:46:12:c3:e9:
                    fd:61:dd:13:11:e4:3d:cd:20:0a:c5:c8:30:85:6a:
                    01:23:3d:5f:17:fa:a5:34:ef:05:91:d9:76:b4:34:
                    d0:c4:43:f8:89:b6:f2:3c:09:23:e4:75:82:ff:05:
                    7e:61:82:7f:ae:ed:11:65:14:71:45:87:c0:9b:c6:
                    31:7a:cc:0a:e2:91:56:8d:9f:38:e7:23:fc:f7:b6:
                    ee:04:37:dd:7e:f5:97:0d:77:9b:6a:16:46:9c:b7:
                    a4:bc:a1:81:ca:ca:ed:61:a9:f2:61:27:56:f0:62:
                    89:75:f2:1b:d7:67:65:c4:83:fe:68:51:78:b9:b9:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:95:38:74:EF:3E:E5:C9:F6:C4:4C:B3:AE:E5:37:3C:01:19:C1
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:31:a9:33:77:6a:db:59:af:a3:43:11:34:6c:48:7b:cf:
         a5:c8:b1:84:19:c9:d2:4a:93:52:69:64:65:86:ef:28:3a:d4:
         6e:83:bd:4a:12:28:9b:8f:78:31:29:a9:c1:36:c0:27:f7:33:
         6d:94:e3:89:ea:c1:3e:47:9a:95:f1:6d:d5:98:59:a4:5b:77:
         e9:0e:40:4b:48:65:7b:f3:46:a9:9c:87:07:ac:e8:3c:b8:29:
         20:43:3b:76:6a:44:bd:e2:f0:66:53:5e:2d:93:d4:a7:31:39:
         7e:ee:f7:89:a5:cc:df:20:2c:58:4d:c9:81:8a:33:66:20:ff:
         a2:4a:8c:d9:45:09:3e:89:77:36:6f:98:b1:c9:e1:7a:56:7d:
         a1:8c:43:9a:04:19:7d:50:09:ea:00:18:d9:64:dc:8b:16:24:
         a7:1b:41:70:69:ce:ec:f1:2e:17:9b:64:af:85:8c:76:18:1d:
         e1:bb:7f:37:3b:2d:c8:f4:6b:89:ed:43:72:28:15:4d:9a:73:
         d0:83:cb:61:fb:44:c1:40:8d:0b:8b:ae:fa:fe:b3:4e:0e:36:
         2a:89:23:72:b5:b5:e7:e8:3a:ee:68:c5:a6:18:45:51:2c:fd:
         b7:b5:cf:26:ad:58:f2:66:59:4c:b9:89:85:a6:2e:36:97:75:
         01:ce:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:47 2025 by rpki-client