Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
File:                     H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json)
Hash identifier:          +E7L0LFq1Wq+FmBMB02J8N5XZhQWSAVNu9S9ootp8Ek=
Subject key identifier:   D8:0A:7B:4F:73:6E:5A:9F:38:EE:32:77:74:83:1B:46:A4:E7:66:F3
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Certificate issuer:       /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial:       0197B6328FEC839220DAA3B9F5E3193D0979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
Manifest number:          15BC
Signing time:             Sat 28 Jun 2025 11:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:56 +0000
Files and hashes:         1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: GfrY1Ka6GYfthBMrr0GLUzBb6gD0CRjOrV+EXVVDKL8=)
                          2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:8f:ec:83:92:20:da:a3:b9:f5:e3:19:3d:09:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
        Validity
            Not Before: Jun 28 11:00:56 2025 GMT
            Not After : Jun 29 11:00:56 2025 GMT
        Subject: CN=d80a7b4f736e5a9f38ee327774831b46a4e766f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:09:c2:c3:78:76:c7:53:7e:8a:24:40:ff:
                    2b:77:d7:c8:2a:c1:4e:88:9f:8e:ee:f4:66:77:39:
                    67:6d:24:09:35:a5:54:bc:57:97:71:5c:64:34:98:
                    17:da:97:74:f9:f6:0c:9a:fe:61:ab:2b:62:a6:4b:
                    da:a2:8e:a6:de:52:86:ad:ce:29:9f:64:70:10:81:
                    fc:76:2f:ac:e0:53:a3:44:3a:8c:1d:a1:be:50:58:
                    b9:cd:12:62:b7:cd:eb:f0:5d:ef:7e:ff:bb:c3:5b:
                    1e:f9:d7:01:e7:20:10:17:a8:0e:2d:9f:66:56:a5:
                    cf:9c:b2:35:23:de:92:a9:c5:3e:c4:08:3f:71:ba:
                    84:46:41:71:9f:21:bc:26:b2:10:1e:06:69:23:96:
                    b1:65:16:bd:59:c4:dd:fc:97:18:91:5c:33:93:af:
                    21:7e:fc:29:af:85:f0:e1:a4:99:35:aa:5e:e1:53:
                    a1:8f:44:c1:55:38:7c:20:77:46:88:25:49:38:39:
                    d0:96:6a:e1:ed:ea:fc:08:95:ab:98:2b:64:b4:e5:
                    03:cd:0b:49:c6:17:de:50:7f:de:2b:bd:65:40:8d:
                    35:82:e1:72:fe:ea:0b:e4:22:a7:3d:0d:84:7f:20:
                    8f:17:1d:18:8a:10:50:bd:b9:a4:68:cc:2b:e5:a7:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:7B:4F:73:6E:5A:9F:38:EE:32:77:74:83:1B:46:A4:E7:66:F3
            X509v3 Authority Key Identifier:
                keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fe:6e:1c:32:82:e5:82:e8:cf:62:6f:71:87:7c:4a:55:8c:
         9e:56:57:18:0e:bf:a8:af:37:d8:10:5d:b7:6f:da:2f:fb:39:
         bd:5b:f3:42:39:c6:1f:69:23:86:30:30:51:5d:c7:35:39:72:
         a6:ac:8e:9f:03:35:3d:9a:ac:89:92:d0:08:97:e6:e3:03:84:
         fe:9a:20:a4:2d:79:6f:0c:4f:30:2d:78:e3:56:55:3a:48:54:
         63:71:0e:03:12:56:d3:48:a1:aa:1e:4d:72:ea:d0:02:cb:ac:
         b0:ae:6a:14:62:21:c2:94:d7:b6:23:23:13:ea:e2:ed:71:87:
         b1:d8:ac:c0:97:ad:df:fc:c7:b3:71:45:9a:d0:7a:62:3a:09:
         08:8f:b5:f5:a7:dc:88:fb:a4:5c:fa:15:d0:a4:9b:a1:f2:ac:
         c1:e6:68:07:bc:4e:1e:5c:cb:f2:e2:82:60:fc:06:67:8c:f0:
         28:8e:e0:38:87:5c:73:0d:1b:d7:03:42:c4:5c:b0:cd:09:d1:
         65:94:7f:b5:df:88:a1:bf:28:b4:95:34:11:2a:5d:2f:53:9b:
         94:b5:b4:f5:6e:ef:56:f2:0e:6c:99:a5:30:47:88:ef:7d:10:
         d4:9e:68:b2:61:88:18:34:67:f7:8f:ab:c3:e1:4d:40:ab:d2:
         69:a1:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:45 2025 by rpki-client