Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
File:                     a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json)
Hash identifier:          SMpORlUhMluuV0JNGjCkhDkfraisBPqyv+nEKk5SuT4=
Subject key identifier:   B7:B8:6B:97:82:4F:A4:A5:04:EE:EF:D6:67:47:2C:AA:1A:73:75:A7
Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
Certificate issuer:       /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Certificate serial:       0197B6D77AE84284587E94A7C0C2E2D2E0D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 14:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:03 +0000
Files and hashes:         1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=)
                          2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: UXaKVOz8dH9vTOX4Cg9q/I4TDyywEauvlvuX9Mhnvmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:7a:e8:42:84:58:7e:94:a7:c0:c2:e2:d2:e0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
        Validity
            Not Before: Jun 28 14:01:03 2025 GMT
            Not After : Jun 29 14:01:03 2025 GMT
        Subject: CN=b7b86b97824fa4a504eeefd667472caa1a7375a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:35:f4:ae:47:3a:06:28:ee:bc:0c:ea:3f:
                    4b:71:56:94:d7:e7:64:bc:c6:81:aa:24:d1:98:4f:
                    28:0e:b6:5d:cb:b8:19:19:04:11:3a:a3:87:b0:2e:
                    b2:1c:be:9a:94:fa:e1:0f:b2:83:75:9d:5b:04:10:
                    f6:77:50:25:60:e8:a3:fa:1d:6d:06:f4:54:cd:30:
                    ca:c9:4f:a7:a6:e1:2e:ee:f2:10:34:e0:c9:d0:ae:
                    01:14:24:d1:4b:ce:10:09:43:11:2c:f8:c8:e5:49:
                    b0:ad:48:d4:da:7c:c4:ab:8a:4a:9f:e2:82:ad:98:
                    f0:00:bf:2f:b5:a0:e5:d6:64:3a:3b:a0:e9:3e:de:
                    76:f5:5a:ab:a2:36:e3:f9:38:c9:dd:c5:ac:26:a5:
                    05:40:9a:d9:7a:a3:f7:3c:0e:f2:e8:4d:9e:4d:e9:
                    06:5c:8d:c3:d1:31:87:e2:78:d8:c5:30:a1:4c:e2:
                    b0:79:c8:88:a7:59:40:d9:87:f4:42:8a:57:39:0d:
                    6d:61:5e:33:9b:40:31:c4:aa:d1:05:47:6e:84:32:
                    13:eb:23:2b:58:9a:98:fa:57:f9:e4:09:9e:38:ea:
                    3c:fb:ad:6e:43:00:e1:8d:1e:41:fc:49:82:0c:4b:
                    68:8c:13:54:3c:a2:eb:b2:87:7e:87:1a:bd:39:e8:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B8:6B:97:82:4F:A4:A5:04:EE:EF:D6:67:47:2C:AA:1A:73:75:A7
            X509v3 Authority Key Identifier:
                keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:85:10:e2:ee:0e:b1:2a:8b:95:a5:76:9c:d2:86:f2:40:20:
         fa:ec:30:7a:85:80:b0:5f:c6:b9:da:e8:45:d8:22:93:91:a1:
         a1:a0:f2:5c:c0:78:97:cb:6d:cf:00:4d:8a:24:21:7c:0f:98:
         03:2e:cd:35:21:cd:28:d1:6c:2a:e3:8c:7d:19:63:dc:d5:98:
         95:cf:26:fb:15:53:d7:7d:88:e9:e0:46:35:bd:de:61:5d:ca:
         45:f3:56:69:f2:f6:d8:11:ff:36:10:80:07:07:70:39:59:c3:
         12:cf:9f:fe:f1:c3:7a:4f:2c:64:a8:1a:7d:91:b3:90:4b:1c:
         62:1b:8b:df:cd:9b:99:09:ec:0f:94:0f:69:39:b6:d9:8f:71:
         45:6b:82:2f:ba:f2:6a:e6:72:80:51:21:61:b9:72:cf:99:53:
         8c:cd:3f:3b:f3:2e:35:41:2d:a9:3c:9f:b3:e2:d1:46:15:2a:
         bd:5a:38:d2:67:7e:17:c8:5b:a9:ea:e4:b5:c3:e6:fb:05:3a:
         73:e5:85:11:32:13:ee:11:40:61:e1:af:ae:85:d7:50:05:4f:
         7c:93:7b:34:af:e9:66:7b:e2:82:87:40:71:55:11:e0:6a:c2:
         68:a2:6d:af:33:3d:c5:e6:ad:18:a5:4c:f9:78:2a:c5:b5:03:
         f1:0f:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:09 2025 by rpki-client