Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
File:                     15dPQ3RodlWDV_H7kcOFKlg6FFM.mft (raw, json)
Hash identifier:          9O/yXXamRMYmTkTvdEyTxtnOiPGQoKwPVzjda94DJUI=
Subject key identifier:   7B:4A:97:70:0D:AA:A6:E9:C6:EF:C9:A9:7A:5B:8B:07:09:5A:18:6A
Authority key identifier: D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
Certificate issuer:       /CN=d7974f43746876558357f1fb91c3852a583a1453
Certificate serial:       01987E66700956C703449032E72D0BCC18E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
Manifest number:          09D2
Signing time:             Wed 06 Aug 2025 08:01:39 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:39 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:39 +0000
Files and hashes:         1: 15dPQ3RodlWDV_H7kcOFKlg6FFM.crl (hash: 2d4RMch/rG4sBT/9W0eE0mOOnhO1TT+KfkxBoKwwdDc=)
                          2: eTKtoFWz_Mx4YanJDAi3s36ZTD0.roa (hash: /F4jtOytXs7E/d+FweZOPefzhGOW8m0ae7Vd5vmb9SU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:70:09:56:c7:03:44:90:32:e7:2d:0b:cc:18:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7974f43746876558357f1fb91c3852a583a1453
        Validity
            Not Before: Aug  6 08:01:39 2025 GMT
            Not After : Aug  7 08:01:39 2025 GMT
        Subject: CN=7b4a97700daaa6e9c6efc9a97a5b8b07095a186a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:c0:94:5e:8d:5b:bc:09:a3:4e:b3:8d:16:
                    e9:1c:e5:6c:91:5d:40:41:d0:9f:21:43:a9:ed:18:
                    21:d0:ea:35:f9:02:b9:c0:1e:fe:7f:34:b7:78:4a:
                    d0:e3:b3:6f:a4:e8:c5:b2:df:f0:77:48:7c:32:fa:
                    e7:d2:0d:8a:18:82:6b:27:16:30:b0:67:9f:50:8d:
                    d5:79:e5:27:00:1a:e3:51:f7:66:86:de:d6:6f:c1:
                    1b:95:38:10:bf:6b:1c:4f:3f:e3:59:92:4e:e4:e9:
                    84:4f:c1:32:d3:fc:3e:d0:0f:76:42:c3:ec:06:0b:
                    28:54:d8:a7:10:49:a3:4f:6a:ef:82:4e:b8:d4:e4:
                    98:ee:d7:b4:bd:21:c2:89:8a:13:7a:d2:63:87:7f:
                    60:5a:15:38:b2:21:57:7a:a8:7c:41:2f:fd:a0:e7:
                    db:0b:91:ac:71:bc:f2:94:d3:e7:ef:7f:80:56:c3:
                    bb:3d:4f:ff:05:36:36:41:f6:c0:80:17:5f:16:b4:
                    d4:c8:88:11:b0:6b:8b:e1:c7:51:ed:b3:ca:58:e1:
                    82:85:42:8c:bb:c5:7d:cc:36:6e:5a:15:b9:ea:04:
                    97:f1:d7:89:42:23:fb:ae:94:77:a6:98:f7:18:e8:
                    fd:42:09:54:59:a5:bb:a4:d7:8b:28:7a:17:b6:97:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4A:97:70:0D:AA:A6:E9:C6:EF:C9:A9:7A:5B:8B:07:09:5A:18:6A
            X509v3 Authority Key Identifier:
                keyid:D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:34:e3:53:90:6d:4f:c2:e8:09:e9:1b:ab:ae:10:53:19:1c:
         86:49:ea:58:73:09:e1:a2:2e:f1:91:aa:a7:f5:a4:e1:1a:8f:
         bc:65:3d:f8:fd:dc:62:fa:12:18:46:89:19:51:21:39:b2:84:
         cb:0a:f8:a4:b9:ca:16:03:9c:80:8d:b3:73:44:f6:07:2d:fb:
         12:d7:8f:16:31:8f:2b:4d:39:69:2e:1b:61:67:95:1f:b7:bb:
         91:39:37:c6:93:9e:4c:62:fa:50:80:2d:62:20:4a:79:cc:18:
         0c:6a:04:7d:6c:51:e1:4b:a0:18:51:51:f3:40:0e:00:64:f8:
         9a:9c:2c:6e:98:cf:59:a7:1a:2f:c0:af:72:96:7d:35:93:a5:
         95:de:f2:35:dc:3f:f3:b4:0e:a2:2a:67:42:bf:0f:87:76:40:
         63:15:aa:61:30:8c:cc:26:ba:98:bd:a4:8a:18:e8:71:8a:c9:
         db:6d:26:a7:68:75:ed:8b:49:47:3e:ba:4f:69:b6:b6:a7:df:
         d8:4b:37:34:6c:86:e3:c4:eb:48:5c:86:0d:a2:4b:06:ae:c2:
         85:2e:e9:67:b3:a6:9f:65:c5:e6:33:e9:49:05:ae:e8:03:66:
         19:42:f8:26:df:a6:7d:a1:4e:56:42:06:0d:60:20:c5:7d:81:
         05:ae:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:05 2025 by rpki-client