Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File:                     Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier:          JFS3D0846qvg7zWWe1rl74tl71Ja7zqL/MlXy8dppkY=
Subject key identifier:   21:CE:15:6B:B2:BA:C1:CF:9E:52:7C:0A:24:06:07:FC:D6:DD:D1:10
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       0197CBDE9E4D133E4A499E5200A21E8D0BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number:          15C7
Signing time:             Wed 02 Jul 2025 16:00:53 +0000
Manifest this update:     Wed 02 Jul 2025 16:00:53 +0000
Manifest next update:     Thu 03 Jul 2025 16:00:53 +0000
Files and hashes:         1: 03R0VF3AsIUztN8h2zD8N2flDJY.roa (hash: 1xiwS0dYiDHRwMXNwpfOsM1AyiKMBufOaNLQPQKn/9E=)
                          2: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: Gz44Gvl3aduCX5nZ7TJOXf13Tl24jW/0JMfcJLdhIUs=)
                          3: Es9DToahcsj0ahEtb--Fy2u42F4.roa (hash: nfMwvWvI1T9eF9JsdtFDjnCaRTVkyNEeCBV5LJRL/I0=)
                          4: Kk55CxMuRoABHPQT4nyNv0rGWGc.roa (hash: lvAnBMqzmoB6sfauO06Jjpq1kAnKY/291ymOUVXS2fc=)
                          5: Qa5zEwk763K1EispcaZSdgxy5B4.roa (hash: 1hv3iMS5WTQuyU34tHM2fX7wAkcRaS7Ns9UFZhwEs8w=)
                          6: ls30qglQhlzT6rdumlShksLULN4.roa (hash: QEAqfnuTNOFE0+L1NYjaIvQVrbFOKL5GAQ0VuflmL9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:de:9e:4d:13:3e:4a:49:9e:52:00:a2:1e:8d:0b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Jul  2 16:00:53 2025 GMT
            Not After : Jul  3 16:00:53 2025 GMT
        Subject: CN=21ce156bb2bac1cf9e527c0a240607fcd6ddd110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:4c:5c:c8:58:e0:29:40:86:83:52:77:70:
                    d2:70:b3:11:65:3c:8a:d0:79:37:cf:6b:0e:dc:45:
                    60:87:78:99:a8:fd:0c:06:d3:30:7d:a4:be:a9:4a:
                    41:7d:48:b9:1a:7a:cb:f2:cc:4f:07:96:9a:29:af:
                    6e:59:5d:49:af:a6:2e:bf:8a:91:c8:45:f1:2d:eb:
                    89:7c:f6:22:2e:8a:57:7e:1d:ae:ef:f1:83:13:df:
                    fd:7c:9d:33:54:b6:f7:2b:22:64:87:e9:da:f7:c7:
                    7a:db:f2:c5:d3:1b:df:ca:aa:b9:8c:35:8f:be:60:
                    53:0e:81:f8:71:e8:3f:d8:e0:64:2b:9f:6a:92:98:
                    e2:e4:bd:3d:75:ac:7e:12:e3:f5:29:f9:40:7a:f2:
                    b4:db:48:79:ee:a2:81:6f:91:71:44:9f:bb:a5:8b:
                    66:b6:f3:91:c3:d5:31:c1:f0:3b:6f:66:87:62:64:
                    1c:3e:22:99:7e:f8:61:6d:29:da:17:17:67:ed:01:
                    fc:3f:6c:c8:ad:41:96:6a:e2:da:dd:b1:8f:67:ae:
                    6f:cc:23:f1:9f:21:3b:f6:2b:23:a8:f2:2e:d0:f2:
                    b4:c7:80:56:ac:80:93:92:1a:5a:5e:9e:22:ee:91:
                    e9:af:01:7b:89:23:f3:f2:1d:ff:af:19:f8:5d:a2:
                    4d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CE:15:6B:B2:BA:C1:CF:9E:52:7C:0A:24:06:07:FC:D6:DD:D1:10
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:01:cb:9e:50:08:e3:98:81:35:cc:11:d4:ec:eb:2f:7a:c4:
         29:df:58:fa:a0:ae:49:85:21:c6:0c:30:ef:aa:df:cb:dd:87:
         c9:78:3d:a4:76:74:03:bb:82:c2:4b:7c:c2:68:8e:e3:df:ce:
         af:5d:2d:40:64:f9:b5:dd:83:93:f5:95:52:7e:36:a3:1f:d2:
         50:23:65:06:04:46:e1:cb:01:23:2e:64:54:1a:45:33:f2:45:
         da:c2:c5:49:83:b4:75:0b:ae:61:8c:8a:53:9f:5e:06:8e:6c:
         5b:00:8a:52:01:0e:38:72:d8:a4:d1:d5:37:75:d9:ec:49:1e:
         2b:ee:67:cf:14:61:5b:86:84:22:c8:37:2f:b0:c9:45:32:b5:
         43:14:d9:37:01:1c:10:de:51:e1:f3:d5:c8:98:88:9b:25:a4:
         e2:16:58:df:ca:b0:c0:2c:c9:ae:ce:2f:34:aa:14:ac:77:92:
         96:95:61:50:2c:aa:b8:54:4f:97:b6:3c:cd:f9:b3:21:bc:88:
         3b:4d:c8:4d:4d:ef:7a:17:1e:ee:bf:df:a5:66:1b:25:cf:6f:
         40:c5:5e:3b:c1:fb:c2:a3:45:ce:aa:c4:10:1b:08:98:ac:81:
         ef:3b:70:2a:52:06:c1:ef:76:43:01:ff:87:39:36:f7:23:69:
         25:02:ca:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:27:35 2025 by rpki-client