Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File:                     hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier:          mncgNVEoQAoMZeYghkOCojB9js3mLSsnwcgP+qEBFPA=
Subject key identifier:   96:B2:00:58:B9:B7:10:38:2F:47:4C:82:30:E4:6C:08:9F:45:F3:AE
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer:       /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial:       0197B88FE7CF08B50466EE5F0C14D954BF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:02:08 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:08 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:08 +0000
Files and hashes:         1: P7kra4ub5VF3YEJjz3ym8CwbAXA.roa (hash: AJEYR0xnzVy6utllNh8R4LIoanjGY6stnMXm+hMmUEo=)
                          2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: FdrIy3zKAMnVVJQzrYW8IUb4zNQCMmfxgBrPGRINOGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:e7:cf:08:b5:04:66:ee:5f:0c:14:d9:54:bf:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
        Validity
            Not Before: Jun 28 22:02:08 2025 GMT
            Not After : Jun 29 22:02:08 2025 GMT
        Subject: CN=96b20058b9b710382f474c8230e46c089f45f3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:41:01:2f:00:40:29:38:91:b0:f2:26:c8:
                    7c:c9:b6:f2:68:ca:6d:12:a1:18:90:77:89:92:45:
                    6b:5f:49:82:cd:67:be:b2:64:b3:27:80:c7:19:53:
                    8c:1f:54:46:86:9f:20:a1:50:b0:3d:dc:ab:57:8e:
                    66:ce:c4:c2:7b:7f:be:de:05:3c:49:db:fe:cd:be:
                    de:e2:d2:86:ca:e1:f3:11:8e:a4:1f:e9:b2:6b:cc:
                    98:e4:a8:b0:11:8b:8f:fe:84:7f:bf:ff:0e:ee:8b:
                    75:0c:94:9d:34:15:6e:be:a1:7f:60:cd:a3:9b:5e:
                    82:00:7e:a6:e9:bf:e9:56:46:26:e5:ef:7e:a0:f8:
                    ea:e3:0d:30:90:59:8c:97:ee:d8:f5:de:d8:3a:95:
                    78:1b:ca:b4:e9:35:b7:c2:ff:34:34:23:81:1d:91:
                    ad:ad:9e:68:32:68:aa:82:db:56:13:21:b0:be:e2:
                    ef:41:f1:41:eb:c2:29:f5:3e:f6:e8:27:e6:23:6d:
                    74:86:c9:d5:79:8e:53:46:fb:a3:f9:22:2d:a7:47:
                    19:cf:26:75:cc:6e:90:6b:c7:aa:f5:a7:48:fa:d2:
                    44:9a:1d:4a:fe:1f:3e:a6:b2:57:55:57:6b:61:07:
                    ac:ff:64:f6:d4:c1:d7:85:16:48:3c:44:3d:20:78:
                    ff:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B2:00:58:B9:B7:10:38:2F:47:4C:82:30:E4:6C:08:9F:45:F3:AE
            X509v3 Authority Key Identifier:
                keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:64:98:ca:91:2d:0b:18:60:12:bc:a1:b2:66:ed:a9:f9:61:
         bc:bc:d6:37:0e:6e:6c:48:1d:c3:8e:32:61:04:34:9a:3e:4f:
         dd:cf:6b:e4:e4:59:9f:7c:17:fd:60:0e:48:7f:b2:46:3a:47:
         e2:2d:ac:7b:6c:c6:38:05:7d:91:2d:3a:56:34:20:18:b3:19:
         cf:8f:e5:a3:f7:5f:d1:08:a0:17:54:65:22:cd:9a:94:2f:0f:
         ef:cf:a7:df:ea:e1:d4:52:10:cb:22:f2:09:a9:58:a5:d5:f6:
         5f:01:e1:55:75:82:9d:96:3a:76:97:68:3d:15:c3:f4:ae:67:
         e8:09:bb:80:82:54:b5:73:6b:b8:b4:36:61:bb:51:a5:e5:c3:
         87:4b:07:94:1a:ae:73:21:6c:39:95:a7:f3:38:82:fe:b9:52:
         8c:93:13:7a:9d:5a:5b:61:8c:70:9f:0f:fa:f6:f7:ed:2a:67:
         72:33:47:6f:27:f3:8c:cb:a7:58:a7:5a:88:47:cc:6b:99:4c:
         0e:a0:47:66:03:e9:74:49:28:22:21:e7:88:25:a4:67:05:92:
         62:24:5f:5e:5c:48:7d:5f:a6:43:5b:72:8d:e4:b8:47:65:50:
         19:15:2b:2c:e5:2d:9f:13:da:92:42:8f:1d:43:aa:13:7c:14:
         24:54:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:00 2025 by rpki-client