Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
File:                     _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json)
Hash identifier:          M3wAljueukrZROpa0UihLVEXNaKyG52p8pY+FOKzzWk=
Subject key identifier:   6D:62:45:0F:EA:A1:AD:B6:1E:2B:00:92:3C:9A:1C:DC:F9:92:0D:4D
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Certificate issuer:       /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial:       01976CCF6574ECAD32735F09C1DD6CEB8203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
Manifest number:          15A8
Signing time:             Sat 14 Jun 2025 05:00:20 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:20 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:20 +0000
Files and hashes:         1: 1P2Zej4pxQtuIhEVIdzvWNHoMjM.roa (hash: 1V31P+tFYcgF/AzLiAsVDYFl2+asLT680sp7HqmRmh0=)
                          2: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=)
                          3: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=)
                          4: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=)
                          5: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=)
                          6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=)
                          7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=)
                          8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: LZP1v+q61+2XZrOjXPFv5t91YyhNKNev+nSo0Gwz8pI=)
                          9: iP8ql6ZvDkSsBTs1J-PrJpdHpKo.roa (hash: tXTXKqH5Aew+pK21GPBswq4NS3nwUUaBaQxJqd2WYgg=)
                          10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=)
                          11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=)
                          12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:65:74:ec:ad:32:73:5f:09:c1:dd:6c:eb:82:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
        Validity
            Not Before: Jun 14 05:00:20 2025 GMT
            Not After : Jun 15 05:00:20 2025 GMT
        Subject: CN=6d62450feaa1adb61e2b00923c9a1cdcf9920d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:5e:3d:52:a4:4e:b8:5d:95:f2:1d:f8:c8:
                    b8:94:13:df:ad:d5:0c:07:09:27:49:d1:cd:c5:20:
                    bd:ee:cf:61:c2:a6:a3:c2:8f:00:cd:94:4a:7d:80:
                    e8:75:64:01:6e:c1:d2:12:7b:69:06:4d:df:72:0a:
                    33:cd:f8:90:5a:65:4e:f1:98:c6:a9:6b:dd:c3:ab:
                    e3:48:c4:03:a4:f8:73:6b:92:b1:b6:97:df:fb:3b:
                    d2:3d:55:eb:d1:04:88:a7:a3:93:5f:6d:53:e8:26:
                    64:dd:b9:81:24:e8:ea:34:4a:b9:41:5d:f3:b7:4b:
                    3d:0f:60:13:43:a5:59:7c:ed:3c:bd:d7:b8:93:f8:
                    20:04:95:c2:67:db:69:43:12:db:f2:f3:7c:5c:bb:
                    61:30:af:88:d0:a3:fc:c2:78:f8:c9:07:18:7d:ff:
                    43:e9:3b:3b:ed:86:2e:68:93:ec:46:1c:58:fd:93:
                    5f:5e:96:63:65:0e:9e:2d:6b:09:33:38:5a:e1:ef:
                    68:4e:7c:2f:ad:cf:72:29:14:7b:24:fc:58:1f:5b:
                    34:d7:fd:cc:d4:09:b0:29:ea:8c:ae:26:5e:31:be:
                    7c:d1:ee:56:84:af:e2:45:48:44:53:f8:73:3d:3f:
                    b7:ec:6f:47:40:7a:a3:8e:7f:60:7c:d5:2d:62:0a:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:45:0F:EA:A1:AD:B6:1E:2B:00:92:3C:9A:1C:DC:F9:92:0D:4D
            X509v3 Authority Key Identifier:
                keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b8:70:02:41:a0:a6:3f:96:53:d8:4b:0a:df:63:7e:f5:a4:
         e7:a0:4c:ba:c7:d4:ac:4b:00:91:9e:ba:4e:7a:ff:ab:ed:7f:
         da:77:3d:1c:8c:93:74:aa:50:46:6f:ec:5e:e0:02:45:70:ee:
         45:31:6e:a7:52:a6:29:4c:00:56:c3:8f:67:bb:d9:b7:b2:e1:
         70:91:4f:1f:65:e1:c1:2e:14:f8:6a:7a:f9:fd:75:cb:77:eb:
         09:c3:1d:2e:71:a3:dc:9d:c8:24:f0:5d:d0:2d:ef:bd:42:e4:
         a3:c5:06:cf:8e:2b:5e:fc:4e:b9:f3:18:ed:13:eb:ad:2c:f8:
         7d:c6:6e:e0:ab:76:91:ca:dd:a8:3b:e5:04:84:a6:69:0b:01:
         e4:0d:74:a9:69:9f:8d:90:95:e2:85:da:70:92:5b:9f:6b:dc:
         71:25:ae:6e:e3:57:9e:82:9c:b4:b9:8b:3a:4d:6f:f2:5b:38:
         89:28:13:26:9c:bb:c5:60:d5:45:a8:04:e5:aa:60:3e:6c:5b:
         64:bf:6d:fe:ff:f4:cf:b3:3b:b4:3b:32:91:84:70:1a:c8:75:
         2e:e8:85:c7:40:2b:4e:d8:fd:21:90:a8:19:05:f2:d1:25:7c:
         5f:3b:f7:ac:25:89:a2:ec:f0:24:e6:34:f6:48:3b:d4:d5:b8:
         1f:d1:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:52:53 2025 by rpki-client