Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          VB5z0RPewec0Dt+aRO6Pr0KcKr2AP6texkiMZIQfkMQ=
Subject key identifier:   59:CF:AB:97:45:EF:B8:D5:E3:E0:9F:75:11:5F:15:1E:BB:98:4C:F7
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       0197B8FD14626F7D9ED2048657A927032247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          15B5
Signing time:             Sun 29 Jun 2025 00:01:22 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:22 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:22 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: Xm6jufQrc4VrCS1VSHvHjBZ+HQq8oEfExXChFiw5UAw=)
                          2: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (hash: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:14:62:6f:7d:9e:d2:04:86:57:a9:27:03:22:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: Jun 29 00:01:22 2025 GMT
            Not After : Jun 30 00:01:22 2025 GMT
        Subject: CN=59cfab9745efb8d5e3e09f75115f151ebb984cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:ae:37:b0:1c:0f:63:94:b5:3f:1d:7b:f5:
                    99:40:f5:21:4a:09:4e:0d:3f:40:b8:46:a7:09:8f:
                    d0:91:4c:37:bf:27:d5:51:d8:50:3e:aa:9c:5b:2c:
                    3d:17:0d:a8:b4:a5:29:5e:45:46:5d:ef:65:ee:9c:
                    83:da:18:15:9c:72:e0:c7:1e:0c:7b:2d:66:c7:0f:
                    2a:bb:79:2e:b2:b4:56:b8:15:57:e0:ee:5e:c2:c7:
                    fc:bb:73:4d:76:74:7d:45:a4:0f:b9:ab:ec:65:16:
                    61:2f:64:23:d7:32:f3:40:ba:90:86:2a:6f:cd:9f:
                    2d:96:63:47:c2:2b:e8:76:4a:74:4e:0c:7e:de:cc:
                    7e:77:11:5e:7b:96:3d:eb:9f:ec:cc:f0:a8:77:12:
                    20:ee:47:3b:58:e0:f6:74:d2:51:24:f6:0a:e1:67:
                    df:d9:ce:45:0f:3f:bb:77:b5:73:a3:5f:ab:f6:74:
                    ba:e6:77:89:58:b8:de:6e:82:24:62:42:60:72:c5:
                    d9:cd:14:07:23:bc:a8:63:9b:5d:d9:e8:44:67:b5:
                    a7:5a:fd:c9:a2:5b:a3:c1:80:2b:40:fc:c7:67:08:
                    7f:2c:c8:fb:0e:8c:ad:a3:a1:fc:fd:0b:df:28:cf:
                    15:76:85:c0:90:af:97:62:0a:06:1f:e1:6f:67:b4:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CF:AB:97:45:EF:B8:D5:E3:E0:9F:75:11:5F:15:1E:BB:98:4C:F7
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:86:d4:d7:e0:72:91:bb:49:d4:90:f5:45:0d:5b:50:7b:67:
         4e:42:fd:76:1f:0e:4d:7e:77:d3:67:59:54:a9:e5:32:43:ea:
         de:a9:d6:29:e5:1e:ae:68:88:d6:61:07:4c:d9:5c:7a:ad:53:
         3f:9e:56:d7:a7:92:24:ca:79:70:39:b9:a3:47:91:04:6b:69:
         be:2f:0e:36:ef:4e:77:83:d7:43:c3:3c:ee:39:b0:92:74:67:
         30:dd:df:c1:35:a1:63:16:9d:db:65:e6:8f:71:51:1a:d8:4d:
         40:8c:62:d3:08:f9:73:ae:55:8c:52:44:44:eb:6b:bb:ef:23:
         27:d4:3d:a9:fa:a9:34:81:31:a1:f7:34:31:a0:68:5e:ca:bf:
         fc:87:da:42:15:ff:06:5d:43:be:79:36:b4:17:dc:4a:f5:2a:
         97:96:4c:9c:5e:83:6c:1d:29:d6:20:05:c1:62:26:a0:bf:fe:
         e9:c1:01:3a:5c:c1:1c:cc:44:d7:71:7a:ab:05:7e:26:08:9a:
         6c:28:42:66:4f:c2:6a:30:c9:72:7a:2f:48:31:28:5f:95:f5:
         ef:61:16:22:8c:5f:b0:ff:3f:1f:32:78:9e:31:90:e1:86:40:
         61:05:b7:62:18:65:86:35:ef:8b:b3:fa:d5:bc:4c:b7:4e:00:
         59:60:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:33 2025 by rpki-client