Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
File:                     CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json)
Hash identifier:          hgSpq6UXzToixbJMPVBVYF6RHplP2zzT4sbHTQnKxyM=
Subject key identifier:   98:D5:B5:00:71:2C:C1:4F:EE:C2:F0:94:C4:65:2A:46:48:EE:A9:C4
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       01977BD4AC41E1B0EDDBF9900D637AE8CB67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
Manifest number:          15A3
Signing time:             Tue 17 Jun 2025 03:00:24 +0000
Manifest this update:     Tue 17 Jun 2025 03:00:24 +0000
Manifest next update:     Wed 18 Jun 2025 03:00:24 +0000
Files and hashes:         1: 43hLg4tOOv7SoGn-XftXhK9a-NE.roa (hash: fTCV6jJu7vHlfoEQtZwLz0NW5RubKgDanJcVlL86nkI=)
                          2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: eazF5NKihANTpS56pAxi39xkymCueW3Rk02es/X5y0c=)
                          3: RservbDL-BVcPWiT5GY7GGmaqNg.roa (hash: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=)
                          4: SpbFu7cu1hyzijH4Dcq1zO1wfcw.roa (hash: s7llN+uwGj/YltcQ4pU6jWvPZRuwP/LeuHpZEDrxXAg=)
                          5: X_Rtsxh8a-tRwYEIISqdxYeVheI.roa (hash: Xix6PIF+hRiDX1wXAP04l3u77j1tQfJifz6hRdA+cvE=)
                          6: nvYcptlp0PUhINL8di32N1PMAlE.roa (hash: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=)
                          7: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (hash: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:d4:ac:41:e1:b0:ed:db:f9:90:0d:63:7a:e8:cb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Jun 17 03:00:24 2025 GMT
            Not After : Jun 18 03:00:24 2025 GMT
        Subject: CN=98d5b500712cc14feec2f094c4652a4648eea9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:f8:0c:3f:b0:11:95:f4:52:9b:43:c5:1f:
                    25:3b:b9:e3:59:9c:ab:da:2e:ad:fa:d6:de:f7:91:
                    bb:90:dd:3c:de:1d:fe:36:ab:43:2e:04:1f:94:30:
                    45:43:7f:e2:6d:09:bd:e6:d2:1b:69:9b:79:69:53:
                    e9:87:90:f0:63:a2:59:fd:50:f1:80:56:46:fa:c9:
                    e9:e3:1c:64:c8:76:1f:67:42:65:76:90:d2:f6:1e:
                    85:01:05:48:48:50:d9:82:0b:7f:19:e2:23:57:32:
                    e3:60:c7:b7:d4:e8:37:5e:c1:99:27:a7:ed:cf:ca:
                    1a:9b:88:b1:97:de:c1:6f:39:48:14:2d:bc:b0:76:
                    07:f4:48:5f:64:c5:28:97:e7:4c:7a:eb:69:60:89:
                    cc:6a:54:97:eb:12:79:2b:28:0c:49:e9:dd:06:7e:
                    eb:99:9e:90:ac:6f:ad:8e:b7:08:8d:e9:3f:07:f1:
                    23:f2:72:8e:99:d3:aa:e2:1f:7f:de:45:6b:c9:b5:
                    16:5d:b8:e8:86:4a:61:49:42:74:dd:0f:18:de:70:
                    1e:bf:12:b9:15:99:96:22:74:e3:d8:62:e3:9c:72:
                    03:87:fa:1c:2a:97:11:c4:e8:34:5a:83:82:55:24:
                    6e:fb:12:c0:62:98:49:df:a0:66:73:f7:44:af:4f:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:B5:00:71:2C:C1:4F:EE:C2:F0:94:C4:65:2A:46:48:EE:A9:C4
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ef:95:fd:66:e8:53:7c:f7:ab:64:d8:0f:64:ce:01:28:af:
         22:89:24:91:08:41:7a:5c:6a:3c:c0:7c:75:ae:a8:8b:57:ff:
         61:db:99:1d:56:85:77:25:29:36:c8:ab:97:86:8f:87:1c:82:
         8b:b5:4b:77:6b:00:1b:4a:9a:75:97:10:05:9f:bd:8e:77:05:
         7c:df:9a:49:21:7d:be:c4:56:7a:f7:72:e6:0d:d8:42:a8:25:
         ce:ce:27:5b:c1:dd:26:5b:12:ea:9d:90:a7:fe:0d:8d:05:84:
         7e:36:ed:46:a7:b2:9e:d4:0f:22:66:a6:19:7a:ec:d8:49:02:
         08:f6:57:bd:6f:43:dd:80:b1:35:62:26:ec:b0:84:3b:55:41:
         9f:80:b4:6e:5a:bf:c0:93:67:f8:2e:43:cb:a0:30:a7:54:f8:
         a4:05:de:eb:c3:8b:cd:60:2c:a3:85:80:f0:36:36:44:42:af:
         bd:94:b7:29:57:7c:02:01:a4:26:16:26:1e:14:7f:11:a2:6d:
         29:47:dd:bf:5a:b0:1b:d8:3d:ea:9b:71:1a:03:61:1a:16:f7:
         f3:36:9c:7b:66:c1:d0:e9:24:6c:0d:dc:4f:1e:fc:f0:37:ce:
         cc:c6:42:d0:99:7e:54:c4:0b:c6:4e:70:5d:c3:9c:e7:29:dd:
         d9:3b:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:47:39 2025 by rpki-client