Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft
File:                     K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft (raw, json)
Hash identifier:          327LUc7x3/biIpKBtJdUmljZ4bQOamD4rxIlavlqxOY=
Subject key identifier:   B7:DC:C2:0E:5C:40:5F:46:C5:15:DF:DA:4D:82:C0:A7:EA:BD:08:DC
Authority key identifier: 2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A
Certificate issuer:       /CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
Certificate serial:       019777F856AD06854970643876F69FA172D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft
Manifest number:          07F8
Signing time:             Mon 16 Jun 2025 09:00:53 +0000
Manifest this update:     Mon 16 Jun 2025 09:00:53 +0000
Manifest next update:     Tue 17 Jun 2025 09:00:53 +0000
Files and hashes:         1: K6TqrKQTB9Lj0-2Tvob_6uvnWZo.crl (hash: iBJ+UBEcQB/gqA2/f1qNymPn9BYFCyQK21rlmv0Q/t4=)
                          2: Txker3NSt5jKhqHvbELRIg2COKU.roa (hash: HX2FmurfgaKXvW1pCzW3tE/3+GkeiYpJ/3qR0KzQKR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:f8:56:ad:06:85:49:70:64:38:76:f6:9f:a1:72:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
        Validity
            Not Before: Jun 16 09:00:53 2025 GMT
            Not After : Jun 17 09:00:53 2025 GMT
        Subject: CN=b7dcc20e5c405f46c515dfda4d82c0a7eabd08dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:9e:67:3c:5a:34:45:4a:63:b5:a9:49:eb:
                    1d:7e:6a:cc:ff:ab:04:fb:9a:17:2d:7b:07:0f:55:
                    60:d3:7c:32:d4:10:0e:2e:25:c4:14:8c:a2:2c:f0:
                    cc:76:4c:b7:43:a8:18:55:f8:d1:97:a4:ee:ab:04:
                    8f:64:f3:00:6b:6c:6b:70:10:c3:5f:88:b2:05:d8:
                    1b:70:17:96:4d:62:7a:de:d0:59:23:05:52:78:f9:
                    06:52:a0:18:c5:de:49:f3:92:d8:5f:41:71:e9:cb:
                    8d:83:43:4e:b4:47:3e:c5:2c:19:b8:5a:1d:6d:ef:
                    21:3a:74:e8:48:83:89:35:04:7c:89:ad:0e:11:4f:
                    b2:47:e6:67:4b:c8:2b:58:b5:31:4c:0d:63:3f:7c:
                    04:26:5b:a0:1a:15:92:16:56:0f:6d:ce:59:94:f0:
                    bd:35:c6:d6:94:61:15:38:30:5e:93:fa:15:0e:d2:
                    35:35:d5:34:0f:24:1a:c6:52:74:38:17:b9:95:b0:
                    b0:f3:c3:58:8e:02:bf:10:b2:98:7f:38:ad:de:01:
                    86:06:08:4d:18:2c:93:e6:da:e4:f0:60:35:a5:95:
                    04:2f:9f:4f:de:13:e7:2a:99:11:e3:78:26:aa:b2:
                    4b:99:3f:3f:c8:e0:11:cd:04:a2:15:42:92:5d:bb:
                    65:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DC:C2:0E:5C:40:5F:46:C5:15:DF:DA:4D:82:C0:A7:EA:BD:08:DC
            X509v3 Authority Key Identifier:
                keyid:2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5a:91:b1:fc:05:8c:62:71:9c:ff:69:97:6a:1f:74:38:c2:
         ff:34:38:e7:62:dc:41:b7:b6:4d:e9:3d:d0:66:d7:66:fd:d4:
         0a:40:61:ad:a0:e5:4f:48:cc:fc:75:2d:ea:a9:14:93:e7:dd:
         14:a6:00:05:26:3e:8a:5a:f7:a9:54:0a:9d:56:c1:fb:cb:54:
         29:3c:b8:1b:1d:f2:36:f6:ab:be:07:cb:15:91:16:6d:6e:9b:
         1c:54:43:b3:31:9c:e5:00:1e:ce:bf:b9:16:99:4f:33:8c:c3:
         bc:88:d4:5a:96:08:77:5f:d7:5b:a5:ec:58:6d:6b:07:1c:f0:
         a7:29:ea:10:3e:89:a8:0f:a9:16:7a:c2:62:98:95:37:1b:29:
         b7:86:02:d6:9b:d3:a4:90:53:b5:a9:6e:86:17:1c:38:f4:ad:
         ba:d3:c3:96:1c:ac:e4:ad:dd:d1:e1:c8:c4:5b:9e:d3:18:22:
         43:93:47:9b:c5:33:a9:89:1f:e5:d7:d5:14:12:72:36:2e:0f:
         14:89:86:5e:01:5a:6e:e6:74:ab:c3:08:1c:25:b8:df:5d:ba:
         e0:a3:ff:d5:1f:b8:21:27:f0:21:08:c1:04:ea:9a:eb:13:a7:
         d6:a8:bb:2a:5b:65:f0:fa:b4:40:11:e7:22:97:12:19:94:cf:
         ef:5c:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:10:14 2025 by rpki-client