Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File:                     f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier:          wjFll/6CaWlA2ci02YUDekOBIOxk/lFhGChKNqCOp+s=
Subject key identifier:   65:AB:E0:FE:DA:E8:A2:7F:E7:6C:C1:D7:E1:F4:BD:09:60:69:CC:0C
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer:       /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial:       01977B3039C4B1A284B65CA6389B42FBBC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number:          15AB
Signing time:             Tue 17 Jun 2025 00:00:47 +0000
Manifest this update:     Tue 17 Jun 2025 00:00:47 +0000
Manifest next update:     Wed 18 Jun 2025 00:00:47 +0000
Files and hashes:         1: BxL_klgWwjdTzU-YHnpZdiQv8ro.roa (hash: tk2wGej5IrtzW95WdrtoXzZ9Z9AtMFL8/c/Zb2mjax4=)
                          2: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
                          3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
                          4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: xFqXKsnYI8C6GwXLp0T7H0Gv5Zro8cPJ4tD3H19YQeU=)
                          5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:30:39:c4:b1:a2:84:b6:5c:a6:38:9b:42:fb:bc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
        Validity
            Not Before: Jun 17 00:00:47 2025 GMT
            Not After : Jun 18 00:00:47 2025 GMT
        Subject: CN=65abe0fedae8a27fe76cc1d7e1f4bd096069cc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:1d:0e:ea:33:73:04:89:45:eb:0a:54:c2:
                    67:f1:64:0a:13:fc:72:40:0a:c2:e1:d0:9b:50:aa:
                    ff:aa:f0:28:ee:d5:d7:ab:17:7d:20:76:a8:79:61:
                    49:38:a0:42:d6:cf:97:85:bf:af:2b:4c:17:d9:4a:
                    01:45:87:a4:09:e9:f0:2a:48:49:b7:03:f6:9c:c1:
                    a2:19:96:30:89:76:41:b6:d7:2a:a1:02:8f:44:33:
                    16:43:d4:66:1f:65:93:f9:6d:33:b1:b8:98:52:e4:
                    4f:4a:96:11:14:3a:6c:73:af:24:a6:54:bf:34:a2:
                    85:18:58:a0:4e:1f:bb:0a:bb:50:a0:15:8b:89:ff:
                    a9:75:82:2b:ca:55:62:ba:2d:22:b9:6b:c4:ee:9f:
                    3d:61:fa:3c:75:bd:20:92:2e:77:01:88:43:6d:36:
                    8d:87:a6:88:c2:63:4f:98:3b:ab:b3:8d:c8:69:fa:
                    59:c5:61:93:83:90:57:76:64:aa:30:64:71:7b:86:
                    dc:58:dc:c4:9c:74:fd:1d:86:e6:e3:53:a5:3b:9e:
                    43:fd:bd:02:78:6a:87:0f:35:a7:a6:62:3c:fa:4a:
                    ff:47:3d:a7:ba:9d:c6:e9:66:02:67:08:ff:85:e5:
                    35:07:ed:38:a6:da:ec:28:08:38:5b:0a:d1:e1:2c:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:E0:FE:DA:E8:A2:7F:E7:6C:C1:D7:E1:F4:BD:09:60:69:CC:0C
            X509v3 Authority Key Identifier:
                keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4e:68:56:e4:9b:d9:5c:d9:63:16:0d:89:e3:ba:ac:f2:60:
         d9:be:6b:7d:08:3b:30:5d:9a:ff:8a:94:b9:6e:88:08:ab:1e:
         6a:34:7a:b9:82:cf:a9:14:73:95:10:31:21:3f:41:ae:7b:b1:
         84:73:fa:8d:32:b4:59:e2:6a:bb:c8:5e:88:7c:c4:79:b2:25:
         be:df:96:94:43:fb:dd:df:1b:5e:bd:72:05:86:17:8b:b8:65:
         da:d0:a2:20:ab:b5:47:76:c7:b5:83:6a:ce:de:94:58:ea:da:
         49:fb:e9:4d:d0:7b:8a:ca:0b:e9:d4:04:fe:2e:15:10:7a:23:
         1e:8b:a6:3f:c3:5d:09:0b:f7:aa:8a:b1:7c:a9:9b:07:c2:6b:
         e0:da:a5:6a:15:ab:b7:0e:0e:31:7b:e9:81:c5:ca:98:b4:88:
         d4:f1:bc:6b:ad:02:4a:d7:20:57:2f:09:dc:fa:fb:a4:a1:0d:
         db:fe:05:85:ee:40:ec:fc:46:cc:10:3f:16:a9:0c:03:1a:7a:
         de:9f:78:d5:d6:e1:10:b8:71:23:31:71:d4:c2:22:16:ef:57:
         4c:f8:98:51:99:d8:8d:91:86:2a:42:b8:6a:6f:bd:79:53:f5:
         39:29:7a:34:dc:94:17:c5:ff:06:b1:76:18:00:60:18:99:9d:
         80:d7:5a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:03:21 2025 by rpki-client