Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
File:                     ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json)
Hash identifier:          RCgcEBSGNFL+q3xLiBgpmEaECzSDO/KDjxSaCAtSFgE=
Subject key identifier:   37:EB:B1:19:74:E3:6C:4D:92:C1:86:92:3B:F6:1D:ED:AB:0C:7A:D0
Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
Certificate issuer:       /CN=22689d0f913d29cc63d6c926cb462cb27f184408
Certificate serial:       0197B6A16F2408F55D5DA4CE1C39FDD4D7F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:02:02 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:02 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:02 +0000
Files and hashes:         1: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: 4fCBRm311iVmcQ/eV/wiokgOHFc6Y27uEIdF+VWYOvM=)
                          2: PnGxbbyenKRUkbRi2afvxfE-S9E.roa (hash: JW3Jf++XQ8LN1xPVRRNLBe2ZMK/kXqbkLdynsPQmUsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:6f:24:08:f5:5d:5d:a4:ce:1c:39:fd:d4:d7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408
        Validity
            Not Before: Jun 28 13:02:02 2025 GMT
            Not After : Jun 29 13:02:02 2025 GMT
        Subject: CN=37ebb11974e36c4d92c186923bf61dedab0c7ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:a9:71:6b:11:de:d9:65:00:c0:25:68:e2:
                    0c:83:fc:a3:d1:a1:d0:e3:d4:2b:db:a7:00:e6:c0:
                    f4:90:10:24:84:24:03:c1:a2:45:4b:f1:ee:5b:72:
                    ff:cf:77:dd:82:7f:5d:4d:38:d5:62:b2:f7:31:a9:
                    fc:00:e4:97:ed:86:8a:01:5c:b0:61:18:59:42:ef:
                    20:08:68:c9:f0:6e:3b:a6:b3:e2:bd:89:3f:74:73:
                    c4:01:fc:96:4f:21:74:69:da:b9:ab:d3:f3:71:8a:
                    4d:51:31:65:33:c3:22:3e:34:fe:75:c2:ab:c5:0c:
                    42:32:d7:fb:3f:bb:2e:f5:d7:14:65:d8:20:c0:9f:
                    11:fd:b8:1a:b5:79:c7:dd:2e:e6:cc:b8:7c:20:ef:
                    ea:a7:b7:77:af:84:f0:80:f3:f5:7e:00:95:e3:62:
                    b3:27:43:0e:4c:a4:58:4e:c7:98:ca:0c:dd:5a:ae:
                    15:86:06:f0:e7:37:f0:e4:01:3f:3f:39:e9:57:ab:
                    85:ee:b6:80:d6:1b:03:53:50:69:b2:16:b6:df:ad:
                    de:f3:f0:bf:4f:1d:45:2c:3b:a2:0a:6d:ba:5f:1d:
                    c1:98:cf:42:3a:ff:a4:7d:4e:e2:1e:0e:ee:b7:d8:
                    f9:1f:d8:11:4a:91:db:2c:76:c8:2b:fd:ce:54:12:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EB:B1:19:74:E3:6C:4D:92:C1:86:92:3B:F6:1D:ED:AB:0C:7A:D0
            X509v3 Authority Key Identifier:
                keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c3:d8:62:c1:a8:18:55:98:00:67:6c:3b:26:3f:e6:2e:5c:
         e0:46:0f:91:d5:71:ee:1f:19:97:fb:50:d8:cf:3a:d7:af:09:
         c5:87:6a:cc:db:cb:3f:bd:67:d5:85:e8:07:39:a4:0e:85:f6:
         d7:1c:ee:85:a0:17:c7:67:af:79:76:f3:89:a1:77:13:49:2e:
         5b:2c:19:16:70:6f:78:34:da:8b:d5:ac:0e:f8:ab:58:9e:72:
         29:2b:de:51:79:0b:95:74:63:c6:69:29:70:eb:0f:02:7f:09:
         b9:3c:fc:d3:c0:f8:82:c3:57:c6:ba:aa:f9:0e:63:0b:1b:22:
         92:19:fd:9d:bf:30:54:ad:ee:1a:15:89:d2:7d:f5:58:33:c9:
         d5:0e:ac:f2:aa:c9:62:9c:c8:8c:f9:45:37:a8:9f:4e:ad:2d:
         ee:47:ee:22:35:56:a7:59:dc:89:cd:52:84:89:ea:03:c0:26:
         ed:fe:5b:45:32:6e:57:95:68:e4:f1:f3:7e:4f:e5:6b:1f:1a:
         a5:89:3f:f1:36:1e:47:09:16:60:91:1c:74:eb:30:5a:30:b5:
         0c:af:97:8c:a4:40:7e:bf:a4:1b:3d:44:07:80:13:85:f3:9a:
         f6:49:26:2a:c2:e2:aa:16:b5:ea:ad:27:77:70:fa:32:a3:b2:
         12:73:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:56 2025 by rpki-client