Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File:                     rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier:          pUig1+9EIfqpQygoEW176VFUUK+oK339I//rtVI79ic=
Subject key identifier:   BE:77:1E:C1:CE:6B:F0:F9:05:D8:56:87:7C:A5:6C:27:55:E3:32:E1
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer:       /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial:       01976E8752973C9D5A26B0EB877864153723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number:          15A7
Signing time:             Sat 14 Jun 2025 13:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:51 +0000
Files and hashes:         1: A6WXTZEzXmIQ_NgfUonzU2PUwgA.roa (hash: woiA9rRwDxAjmj0pEa4K5XOpCIKapMbaEdUIwATG6G0=)
                          2: nna5EA2g1qX6KviopTAzfZKYgqM.roa (hash: +1+cT+lcsXs8CMprSc3uLnHvYXXY0ACjWW6HRhv0N78=)
                          3: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: gjxpLDWk5THFsixKGl3OJ8T3dOBNipKApMyUVDjk0ks=)
                          4: tteeEx_UHwSzotofaQO5wxZ_ugA.roa (hash: 6J8PWS09Iv6b8y8k1LDtC9qNTp2Y/khQlLJjRszf4aQ=)
                          5: xNEUjA7ITLvBkxdzmbme9661TlQ.roa (hash: 1h+l7pX24LlIz83Xj6rt/K305QYrLmEd1uwS9wbn8l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:52:97:3c:9d:5a:26:b0:eb:87:78:64:15:37:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
        Validity
            Not Before: Jun 14 13:00:51 2025 GMT
            Not After : Jun 15 13:00:51 2025 GMT
        Subject: CN=be771ec1ce6bf0f905d856877ca56c2755e332e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:d7:b8:7c:73:1b:57:c0:f1:ea:b1:8c:ef:
                    b7:a7:ed:cb:98:2e:1d:c7:cf:f8:07:b0:cd:cd:a3:
                    44:5c:dd:a5:6d:84:31:fc:5f:d0:dc:6d:54:95:16:
                    1e:87:3b:c9:56:8d:eb:16:00:a3:a1:53:f1:72:40:
                    47:15:b1:d7:34:18:c4:80:8d:a8:f1:1c:6a:8b:41:
                    e5:f9:43:f2:42:0c:6f:7d:d4:c2:28:fe:d3:db:b0:
                    0c:7d:fa:9f:6e:f7:6c:4e:b7:29:44:7b:2e:b1:1a:
                    5e:a7:39:0f:a1:27:a5:55:57:14:c6:c6:90:6e:32:
                    51:10:5b:1d:f1:56:86:08:bb:54:06:50:18:7b:6e:
                    19:96:c2:aa:5e:1b:b4:d7:a5:05:1a:4e:6c:bf:a6:
                    27:6d:87:76:51:f6:69:22:20:a3:c0:b9:71:bc:f6:
                    04:3f:93:a3:99:bb:23:3e:b6:9c:67:17:e0:69:a9:
                    0b:01:d8:52:ee:35:42:4c:76:bb:6e:a0:6e:87:e4:
                    50:48:ba:02:b8:a1:ad:44:2f:9e:94:e9:77:89:5e:
                    51:17:93:d9:df:65:37:ba:49:b4:9c:fb:6d:16:e3:
                    61:b0:bf:fb:18:63:54:f7:53:04:3d:8c:a2:d9:c8:
                    94:a4:b0:07:09:af:6e:59:1c:2b:ce:28:2b:65:08:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:77:1E:C1:CE:6B:F0:F9:05:D8:56:87:7C:A5:6C:27:55:E3:32:E1
            X509v3 Authority Key Identifier:
                keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:44:b5:f1:b3:53:07:ea:48:c3:52:43:f6:1b:de:8c:3d:77:
         76:7e:fa:57:54:dd:c9:05:51:53:3c:33:d5:82:ba:0c:28:28:
         d0:90:dd:a5:e2:51:d7:94:f4:75:9d:cb:2d:56:4f:97:20:49:
         d5:b5:e4:83:42:da:fb:77:eb:2c:1c:19:d6:75:92:ea:1c:79:
         01:34:94:61:e2:10:78:08:b7:d9:2f:41:f7:f9:10:00:45:2f:
         d3:c0:78:18:01:86:b3:ce:68:b1:18:12:9e:bb:b0:94:8b:1c:
         69:7a:e3:7c:81:5f:d3:32:65:98:37:dd:6c:a5:23:b8:4e:76:
         21:e3:1d:d5:eb:e0:eb:ed:74:84:a2:fa:e1:42:fa:4f:b4:51:
         70:34:36:a6:d2:32:2d:12:d2:87:8a:a6:c8:4b:27:2a:af:c6:
         29:1e:f9:5e:77:db:7e:d2:aa:e2:3c:be:d3:15:ac:30:d6:94:
         e9:53:3c:e8:b7:29:17:d4:57:c9:37:62:0d:87:c2:56:37:5e:
         de:ec:14:0f:2a:6e:0f:d8:9f:cd:e9:b9:46:78:5a:2b:94:f1:
         18:72:e2:e4:a1:f5:01:d6:d2:2e:83:01:57:fc:f4:2f:c5:7d:
         d1:0d:f8:13:c3:74:89:fd:d3:c6:23:ba:4e:fc:92:81:74:14:
         5b:00:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:45:11 2025 by rpki-client