Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File:                     kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier:          R8xvOuDMGoEQD1vhqYojBBmt30zNz6IhUpangvHgY7U=
Subject key identifier:   F6:8E:86:3A:E6:3C:FC:6C:46:2A:73:EC:FB:FE:C0:86:59:00:E4:9E
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer:       /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial:       0197B7EA2F38B3BEC5A262E905D22A208E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 19:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:07 +0000
Files and hashes:         1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
                          2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: IRL30K1+bQ/qeAOZNFt9BLcg/GzF4wsW2CW4/K+areE=)
                          3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:2f:38:b3:be:c5:a2:62:e9:05:d2:2a:20:8e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
        Validity
            Not Before: Jun 28 19:01:07 2025 GMT
            Not After : Jun 29 19:01:07 2025 GMT
        Subject: CN=f68e863ae63cfc6c462a73ecfbfec0865900e49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:43:c8:2d:b4:85:89:ed:92:68:44:50:04:ee:
                    6b:1d:77:a6:a5:8f:b7:72:c0:f9:8e:4c:3b:32:5f:
                    16:c5:83:cf:f7:8b:6e:da:66:0f:46:98:aa:fd:7b:
                    28:57:0c:b8:24:16:41:11:87:0a:a4:57:5c:a8:79:
                    69:47:94:65:26:2a:59:59:06:67:f8:df:4c:33:c9:
                    54:fb:e1:de:e9:de:71:fa:78:0a:8a:26:38:f7:0a:
                    6e:bb:ed:65:1f:8c:bb:28:34:ef:8f:fa:b6:87:6e:
                    8e:84:9f:29:81:3b:74:21:d6:98:f8:7d:39:cc:1f:
                    5b:a1:76:ec:c2:33:90:d3:70:f1:ae:10:86:95:5d:
                    c5:b5:11:39:fa:8e:9c:63:f7:58:81:be:b4:f7:7e:
                    67:83:df:0a:11:a4:2d:49:d7:75:54:71:cc:0d:26:
                    1b:fd:05:bd:d1:1e:c4:0b:48:e4:fd:1c:c2:6c:b1:
                    4e:03:c1:ba:fb:e8:5a:57:ac:c8:c5:0b:d6:3b:c9:
                    4e:71:20:b1:2a:8b:be:90:0d:dc:d5:2f:f0:e2:4a:
                    84:cc:4b:f5:de:fa:40:12:88:92:53:30:d6:17:a9:
                    f9:ad:65:34:cd:b7:78:00:c6:73:7b:c0:e3:7b:e5:
                    af:c3:a4:49:75:97:59:d8:a5:ad:38:b3:da:66:af:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8E:86:3A:E6:3C:FC:6C:46:2A:73:EC:FB:FE:C0:86:59:00:E4:9E
            X509v3 Authority Key Identifier:
                keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e1:2d:4d:92:af:2c:46:aa:b6:e9:cb:06:ee:75:e0:1c:0e:
         3b:40:f3:37:cd:92:07:29:cb:c6:53:10:ac:1d:a8:eb:41:ef:
         5c:0f:ef:60:8b:3e:86:7f:bc:58:92:c7:33:29:de:4d:fb:64:
         32:66:aa:af:f2:15:dd:10:b4:2e:2a:85:19:ef:67:73:93:d8:
         b4:03:1e:40:82:b3:68:0d:f4:5e:8b:68:fe:8a:66:7b:48:be:
         20:b2:6a:f9:57:2a:56:61:a9:f0:f7:2b:b0:19:f3:55:1b:49:
         57:3b:ef:38:cc:72:56:f5:17:8e:a3:fa:70:c3:2f:c5:0c:ce:
         1b:5c:d7:0a:36:0d:3a:a2:cd:72:49:3e:8e:23:bb:d3:04:9d:
         30:45:9f:94:a0:13:e8:ca:3f:9c:07:6c:7b:ce:67:d8:b1:97:
         b7:97:7d:cf:eb:d5:a4:8e:a9:e6:de:a6:dd:1d:ed:4f:36:9a:
         6e:7e:3c:9e:01:41:66:88:d3:8e:7c:c8:8b:05:cd:f4:9e:de:
         bc:88:8e:bb:dc:64:f6:64:c5:32:f6:c2:93:d9:11:d2:e9:77:
         69:cb:2b:40:40:e7:eb:f2:b4:a8:ba:0b:94:e4:b7:09:bd:fb:
         7b:b6:81:9c:d3:9a:3f:49:51:1e:bb:f4:08:8c:a8:7a:33:89:
         43:ad:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:39 2025 by rpki-client