Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          x61/0jYyFzRv7YU4ODNXWDjU/vIHycwVHKNOR2+GELk=
Subject key identifier:   ED:94:F2:FA:B7:18:17:81:CF:D3:96:B1:1E:27:FC:ED:2E:C3:17:34
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       01976F2CF6ADAA0C16F9A9D8CE349B9C0983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          15A9
Signing time:             Sat 14 Jun 2025 16:01:47 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:47 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:47 +0000
Files and hashes:         1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
                          2: IqJ3eC22ti_hCfC22ZrM8rRTtzM.roa (hash: aJf0pzqxrkhhPFt7HEGF+gQN8TPi2v4BsqZ0KQ3SArc=)
                          3: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          4: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          5: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          6: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          7: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: WlP8XaN43xpV/qozc3WOBVG9FZ2uobysHZPDDfp6uAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:f6:ad:aa:0c:16:f9:a9:d8:ce:34:9b:9c:09:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Jun 14 16:01:47 2025 GMT
            Not After : Jun 15 16:01:47 2025 GMT
        Subject: CN=ed94f2fab7181781cfd396b11e27fced2ec31734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:2f:81:6e:65:f2:d6:d3:37:a3:a8:06:bd:
                    88:ad:cd:ca:21:02:92:f5:6d:ff:de:ab:58:2c:cd:
                    9c:cf:8b:e4:7d:78:4a:3f:48:ab:7b:e3:48:dc:16:
                    bc:af:52:b8:91:e4:e1:c4:75:19:15:aa:6a:bf:4a:
                    3d:00:8c:b9:13:e9:dd:1f:9c:c0:85:67:0b:f9:81:
                    6b:db:a8:d8:ea:8a:4a:ef:f4:ea:c2:3a:86:dd:20:
                    a7:0e:90:ff:4f:2a:dd:ae:18:9b:5a:13:75:e2:ce:
                    db:9b:48:35:2e:6b:2f:b0:cf:87:8e:08:3a:f2:23:
                    15:ef:78:57:9a:02:7f:2e:ab:d2:ec:e2:f8:38:50:
                    64:30:63:00:e5:b1:12:19:de:be:61:f5:9d:b3:75:
                    5f:18:e2:e8:cc:c2:3c:3b:bd:e6:f1:4c:2d:ac:82:
                    b7:07:1a:e5:51:ea:00:3e:c3:98:9a:27:b3:3e:8a:
                    50:65:90:f1:97:f7:74:76:b3:f7:c0:94:fc:7e:ea:
                    4e:82:36:a4:c2:5f:2a:b2:77:1b:f7:d6:d4:90:88:
                    28:c0:dc:68:2a:e0:96:c4:78:29:43:e1:ac:d7:88:
                    6a:cb:96:41:9f:bc:12:14:80:91:ee:57:0f:5e:87:
                    d1:b3:d1:83:a7:59:a4:60:79:86:64:28:e1:58:fb:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:94:F2:FA:B7:18:17:81:CF:D3:96:B1:1E:27:FC:ED:2E:C3:17:34
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:77:9d:b4:bd:e7:7e:7a:82:4a:6c:b1:24:77:cf:50:18:8f:
         68:da:27:b1:91:38:1f:d5:10:5b:45:28:65:5b:7d:ae:69:fe:
         6b:f0:4b:f9:4a:25:17:f6:0c:f4:36:f0:42:0e:e7:de:5e:ee:
         10:94:b8:a3:39:84:13:01:0f:da:b1:14:68:6d:4a:bd:53:bd:
         75:2a:a9:a7:70:da:cd:fe:c8:4a:60:27:97:00:07:ef:7a:15:
         ee:95:6a:61:a1:84:79:95:0d:bd:f6:26:9d:b9:e4:2a:7f:88:
         83:49:dd:44:dc:0c:52:f8:23:31:d3:ce:8b:e2:a4:ea:ab:c0:
         bf:1f:c6:8f:07:24:2e:af:2e:63:27:b7:5e:13:fe:7a:ca:d0:
         aa:a1:17:72:fe:cf:f5:ef:b3:a8:36:22:e0:ce:81:a4:24:4c:
         f1:b0:b4:68:29:6f:75:0f:eb:e5:96:53:29:c8:d9:c4:5a:ff:
         ef:c6:e5:9a:3f:0f:74:06:36:86:90:fd:4f:b6:ce:ba:9c:a2:
         fb:e9:23:16:15:13:cd:cd:65:e7:aa:80:48:e9:2a:25:6e:2d:
         f2:6b:ff:c9:6d:ed:18:64:52:30:1c:f7:98:43:e1:87:32:6a:
         55:59:bd:e1:7e:a1:32:cb:41:26:f4:b1:be:0b:f7:e1:a4:c4:
         b7:e8:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:06 2025 by rpki-client