Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File:                     758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier:          z08pGdRXukNor4//2cYasiSjIK5AJieNrqgf8nnmZW0=
Subject key identifier:   5F:62:FE:FC:92:E4:39:E3:A3:F8:D0:CF:65:11:2A:BB:98:9E:EC:5F
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer:       /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial:       0197B632DA48B5CFC7BDC7C328DA93918E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 11:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:15 +0000
Files and hashes:         1: 1bEC89myvydEqo_ZPjw-OQX0Qi0.roa (hash: ZmacESfVCLkopUwGADnqjPbJ5MKyVKen61NApT+t8VM=)
                          2: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: 4ZYpugCtCei9RNtATtLthb0B6gllFxsPyaCUmjeLy0k=)
                          3: iZ1aijGSpYaJ5lT694iv07s9IFw.roa (hash: epj7jnXUcZqcIR0Iu/H9+s0OqjsBdFMaftQUUMbM+4c=)
                          4: ksWoUId71Ta6zaKYKbekW8SN22U.roa (hash: tv73AIHBejtA7MQn113/2vhoh+psXUpDGtwp+NxnLcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:da:48:b5:cf:c7:bd:c7:c3:28:da:93:91:8e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
        Validity
            Not Before: Jun 28 11:01:15 2025 GMT
            Not After : Jun 29 11:01:15 2025 GMT
        Subject: CN=5f62fefc92e439e3a3f8d0cf65112abb989eec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:4f:cd:73:2e:25:ab:fe:d8:0b:a1:e4:9a:
                    5d:b2:52:51:a1:31:20:81:e9:ac:07:df:fb:14:6a:
                    8f:95:fd:60:db:57:8f:73:f9:a4:e8:04:03:e6:c7:
                    36:46:16:e4:36:c3:a4:e5:72:00:00:d6:44:a9:20:
                    c3:dd:80:17:a7:2c:7e:0b:95:25:77:70:bb:5f:a8:
                    33:8d:00:9f:c8:60:68:db:32:d5:85:33:41:b3:c5:
                    25:12:15:34:59:49:cf:5b:16:c3:57:ee:67:aa:03:
                    ec:89:df:0f:08:b5:2a:96:5a:8a:11:75:2e:a9:f8:
                    95:20:d9:4b:d4:1a:80:33:ec:63:fc:f1:32:34:09:
                    fb:b3:66:60:62:20:5c:00:83:31:a8:67:9a:ee:88:
                    4f:3f:44:65:38:65:ba:65:52:76:18:14:fb:e0:16:
                    9a:b6:88:93:b8:f0:8c:9c:eb:98:38:a5:76:12:06:
                    1a:64:c6:a1:87:df:b0:ce:45:fe:e5:92:0b:9c:2c:
                    f1:3e:8b:5e:d9:a8:c3:8e:d0:5f:c3:e7:57:57:36:
                    45:e2:98:20:31:5a:bc:fa:12:4e:c6:8b:4f:d8:cf:
                    66:05:07:13:83:58:85:c8:fb:6a:50:12:4f:82:91:
                    bc:e0:de:51:90:52:60:3f:95:d4:1c:71:a9:f2:9f:
                    62:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:62:FE:FC:92:E4:39:E3:A3:F8:D0:CF:65:11:2A:BB:98:9E:EC:5F
            X509v3 Authority Key Identifier:
                keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:d5:52:71:70:01:9b:e5:8b:1e:2b:f4:4d:de:a8:fa:cc:
         a8:24:f7:96:7f:ab:f0:45:89:40:a8:c4:84:94:8a:f5:ea:b0:
         4d:5b:89:01:5e:99:2b:a1:a2:c8:ff:bd:24:d3:e7:2a:45:14:
         77:41:09:73:e3:0b:9f:ac:31:b7:89:b7:ec:29:a3:1f:92:c0:
         c1:ae:1b:a9:b1:c2:5d:96:b0:15:2b:97:c2:fd:a1:80:94:18:
         ed:df:ba:af:99:ae:de:7a:0e:49:7c:56:fc:c5:c6:47:c3:bf:
         e3:75:d8:d3:8c:41:04:2a:f6:d2:80:3f:23:fe:94:dd:a7:f6:
         f8:50:65:36:23:00:ce:2b:d4:6b:18:ce:41:17:fc:cf:23:21:
         c0:ff:ff:56:01:3a:a8:89:ce:23:f8:0a:03:1e:ca:68:36:2a:
         70:78:62:ab:58:74:85:10:1a:a1:f4:55:8a:c4:02:b5:e6:24:
         a2:48:a4:01:d1:58:da:64:f1:f5:43:30:d4:1d:92:e0:8f:77:
         86:80:a1:ef:99:a2:67:6c:de:b1:0c:6c:9b:63:ef:58:7a:ed:
         a0:23:1c:8d:4f:8a:44:69:53:f2:91:47:d3:98:92:2c:e1:c9:
         2c:1d:d5:24:12:fe:ab:30:be:e4:e0:16:ee:78:24:de:e1:f0:
         91:ba:f1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:07 2025 by rpki-client