Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
File:                     6T86Qea-UkEVxsK1WLwoAEOgIk4.mft (raw, json)
Hash identifier:          AR2mSLO0hlrAvBqKoJyNGCXsFm2Q+S1zF+hUc2SkquA=
Subject key identifier:   97:E1:9A:9D:81:FE:F2:EC:CB:25:D6:56:22:62:C5:25:32:3E:BF:48
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Certificate issuer:       /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial:       0197C8DDA76BD187EC96C5E71DEB823AA523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
Manifest number:          15C2
Signing time:             Wed 02 Jul 2025 02:00:58 +0000
Manifest this update:     Wed 02 Jul 2025 02:00:58 +0000
Manifest next update:     Thu 03 Jul 2025 02:00:58 +0000
Files and hashes:         1: 2NXfzQOX2yzR_1PZmnB4_Blj3Qs.roa (hash: Ak/GG6l8wter3UNq3QplQdRhCDB/vDLztI0yd4qCSKk=)
                          2: 53KqbajJkABxQADjbHVlPygTcKc.roa (hash: kwajHsXo697+03N+LHzWo8d+aEKRsJl5vDuyUDMyntE=)
                          3: 5UkoSBgwT2Qf3aFassiPq3Vf9Jg.roa (hash: t3qUJPhi+Poc2aWmH2JZX3lQ8LuDxwy2KrfiHtXlPiA=)
                          4: 6T86Qea-UkEVxsK1WLwoAEOgIk4.crl (hash: 7CXSmY+lJaSjD87K7E5JVOgVuBDLvN/tOHoxQ/0MmxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:dd:a7:6b:d1:87:ec:96:c5:e7:1d:eb:82:3a:a5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
        Validity
            Not Before: Jul  2 02:00:58 2025 GMT
            Not After : Jul  3 02:00:58 2025 GMT
        Subject: CN=97e19a9d81fef2eccb25d6562262c525323ebf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:36:2f:2f:19:77:46:73:f9:e4:71:b2:5b:
                    58:57:b2:9d:4d:87:25:d5:02:b7:bd:3b:ed:0a:1e:
                    e5:2b:be:83:50:a5:19:b7:59:3f:12:aa:26:30:a4:
                    35:2e:02:ff:94:e9:c7:df:e8:7d:d5:14:d7:30:44:
                    00:70:3f:d2:7e:da:9f:31:80:02:df:cd:54:f3:70:
                    25:56:ec:7a:c7:24:a5:ac:cf:f8:9a:b9:4c:8f:69:
                    0c:27:22:80:f4:1a:99:00:30:ff:4e:e6:29:59:88:
                    48:b5:2e:00:40:e7:0d:56:f8:6c:c9:10:e4:27:a5:
                    92:64:f4:47:18:d5:ce:f8:43:f3:31:96:0d:f6:24:
                    4f:85:51:34:f2:52:27:ca:79:ae:1a:84:d0:8c:6d:
                    6f:c8:fc:63:7c:2c:26:e6:ec:fc:26:e9:1b:76:7e:
                    1b:8b:9f:91:c0:9f:eb:1a:43:2d:6f:6d:66:eb:29:
                    6a:69:e3:19:8e:8e:0f:6b:ea:37:e0:dc:2b:6f:d7:
                    ae:78:15:c2:61:fd:09:cd:62:7b:5b:bd:f9:3a:b9:
                    41:e8:71:0b:cf:37:59:32:c3:23:45:66:d4:26:a3:
                    b8:f7:58:bc:ef:25:ca:6a:23:8b:ec:88:f0:3c:ca:
                    a8:d3:d8:06:f3:24:7e:3e:53:d8:42:c2:36:6f:83:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E1:9A:9D:81:FE:F2:EC:CB:25:D6:56:22:62:C5:25:32:3E:BF:48
            X509v3 Authority Key Identifier:
                keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:a7:46:70:a5:76:6a:70:29:d9:c7:81:f7:00:14:93:12:
         6a:7a:ef:79:f5:7d:3b:ee:3d:16:b5:87:e7:7e:f0:eb:f3:d0:
         bb:24:f2:63:bf:86:92:dd:c7:fc:3d:74:81:b8:68:15:cd:c4:
         dc:04:76:83:2b:e5:88:bd:ce:9b:a5:bd:de:7b:a5:76:5a:79:
         09:1d:32:f4:78:0b:1a:e0:0c:d2:8c:90:82:8f:41:a3:27:3e:
         b6:f6:5e:1f:3a:13:2a:a8:21:f8:b0:c8:22:7c:96:d2:b2:87:
         3b:08:9b:03:59:2d:88:dd:4b:09:48:d5:6a:a0:0f:95:b5:9e:
         44:73:05:11:8c:1e:90:aa:98:c4:56:4e:22:3c:a3:e8:1d:aa:
         34:98:0e:fe:a7:94:37:d8:34:4a:c0:06:56:01:25:91:8f:8f:
         c1:ba:b5:22:10:98:5e:41:80:43:97:7e:d9:eb:61:21:0f:d2:
         66:68:b1:86:3c:a8:8b:2b:47:22:a6:43:5d:d4:87:b2:2e:f2:
         36:db:7d:9e:60:bf:30:df:45:d3:e6:98:e6:4d:0f:44:fa:74:
         48:a5:a0:e7:57:de:f3:eb:29:70:97:4f:16:40:41:fb:66:41:
         13:a7:df:e7:bd:7a:a0:cf:05:7d:8a:c4:7f:61:f7:0a:0f:45:
         40:ba:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:28:35 2025 by rpki-client