Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File:                     No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier:          SI1GFD5TqmWUnlGkRyZxkE7yXaF2YTMJSDi3yT5sRZw=
Subject key identifier:   91:33:84:01:CC:34:6A:B2:88:FF:EC:FA:A5:9D:93:F5:41:06:0E:21
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer:       /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial:       019873E33F86EA2FA75DBAF56E17F7016EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 07:02:09 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:09 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:09 +0000
Files and hashes:         1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
                          2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: s3xS39sEd5qP2/4YLkRJlQAjGnmeStC+V+doCZZfrgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:3f:86:ea:2f:a7:5d:ba:f5:6e:17:f7:01:6e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
        Validity
            Not Before: Aug  4 07:02:09 2025 GMT
            Not After : Aug  5 07:02:09 2025 GMT
        Subject: CN=91338401cc346ab288ffecfaa59d93f541060e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:fe:bd:a2:a1:f5:23:bd:96:3e:30:2d:f9:
                    08:87:24:26:96:f5:6e:a3:e5:ab:a3:48:86:67:31:
                    38:51:11:40:10:30:e3:d7:ce:f1:3d:5b:2a:36:1b:
                    7c:13:3c:7c:be:45:85:da:52:97:ec:c5:84:aa:db:
                    19:f0:76:1a:5f:52:57:e7:b1:18:8e:57:07:b4:40:
                    21:7f:b6:7b:82:de:8a:52:b2:12:f7:2c:32:ac:4d:
                    97:1b:57:62:a4:87:cd:61:f7:14:4e:07:7c:16:ae:
                    05:d3:ac:ef:f1:81:e8:62:f6:24:14:68:1a:8b:76:
                    85:19:36:e6:32:88:03:d5:6b:37:e0:fc:a9:ff:08:
                    8d:80:6a:89:4d:c4:e3:54:9f:c8:04:4a:76:e3:da:
                    f0:f6:70:8b:d0:53:40:c9:56:dd:23:84:73:e5:0e:
                    12:a5:b5:fa:70:59:20:d9:17:3b:1d:04:0e:57:b1:
                    60:88:e3:9b:91:40:e4:d7:50:51:84:45:62:b4:16:
                    08:97:0d:65:2e:d0:3c:66:4b:1d:4d:95:6a:7e:8e:
                    a7:09:5e:42:66:1f:95:e7:78:01:5f:97:e3:4d:b4:
                    87:48:2a:4c:03:a3:aa:e5:95:8c:c6:7d:77:f1:6a:
                    35:3a:1b:c5:48:9c:63:6b:bc:6b:e6:bf:6c:2b:62:
                    ee:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:33:84:01:CC:34:6A:B2:88:FF:EC:FA:A5:9D:93:F5:41:06:0E:21
            X509v3 Authority Key Identifier:
                keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:25:eb:9d:44:69:a3:e6:83:02:bc:bc:3c:35:a9:b5:df:4c:
         52:ea:e8:52:c6:3f:a2:82:af:81:dd:f5:11:52:d5:65:13:31:
         bc:2f:79:ae:1d:11:88:dc:53:bb:c0:28:96:9d:a0:17:fd:cc:
         65:65:c1:5e:c9:c1:70:03:9b:1e:e8:9d:39:bf:11:3a:e3:ec:
         a0:b1:7c:ed:42:47:7d:f6:ba:ca:1f:a7:c2:d7:dc:8c:3e:f2:
         29:8a:a0:10:57:a5:2d:81:e2:68:54:ca:f7:a1:5f:da:94:d6:
         c8:1c:67:af:18:c7:e7:35:c2:9a:ae:32:5e:86:2a:09:9c:cb:
         5c:7f:6c:01:91:e0:c8:3d:e6:d4:bb:81:7f:13:33:a4:06:f6:
         17:65:8b:72:1a:31:72:ac:0c:f5:17:50:d5:4a:95:4e:fc:2d:
         36:9c:37:2d:95:5d:37:ac:2f:58:76:95:55:b5:bd:8e:5b:5d:
         98:9a:fc:cf:e6:6d:f8:07:bd:21:7c:14:36:95:79:a0:b7:15:
         7f:b1:0c:58:bb:6f:44:c2:d5:02:8b:69:e9:6b:cd:a9:70:9b:
         5f:08:f8:a7:9c:39:a7:df:a6:38:f7:46:f1:ce:d5:cd:61:76:
         c3:f5:c9:a8:4f:08:37:06:97:b3:14:53:86:ff:0e:63:9a:84:
         cb:7c:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:23 2025 by rpki-client