Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File:                     CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier:          zgmU/6LcjgL3/MemsKazPJH8/7xFsMd+P0txrmqMgBA=
Subject key identifier:   E1:2C:E1:FB:AD:7F:2D:CB:8A:C9:6E:39:05:37:32:09:82:18:8E:C9
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer:       /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial:       01988EEC42DF457506FC79B73F76F6C15AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number:          15C2
Signing time:             Sat 09 Aug 2025 13:01:44 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:44 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:44 +0000
Files and hashes:         1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
                          2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: JTJGYqiTeTjVNeLjgeAaKsd/UYulJr971qx/2KTdYA8=)
                          3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
                          4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:42:df:45:75:06:fc:79:b7:3f:76:f6:c1:5a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
        Validity
            Not Before: Aug  9 13:01:44 2025 GMT
            Not After : Aug 10 13:01:44 2025 GMT
        Subject: CN=e12ce1fbad7f2dcb8ac96e390537320982188ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:2c:4e:f3:a5:92:c7:f2:df:5e:bb:af:24:
                    81:6a:11:72:0f:1f:90:3c:7e:c6:90:61:c6:28:50:
                    f3:4c:8a:35:1a:33:01:dc:5f:d2:77:0a:d0:97:2e:
                    b4:d9:ce:e6:f2:ce:93:e6:96:b6:82:b2:cf:ab:38:
                    48:df:6b:92:8e:c1:c3:1a:d3:e3:78:13:67:88:63:
                    59:35:ce:00:40:13:3e:f1:bd:e9:b3:9f:02:16:b0:
                    8c:4a:3f:1a:0e:fc:7c:1f:d8:dc:b2:80:52:d2:5f:
                    67:82:44:60:66:84:37:ff:58:56:e8:8c:76:54:8e:
                    d9:96:2b:9e:46:75:84:43:b2:30:7b:8d:43:f4:95:
                    37:11:5e:fe:8d:d3:f3:17:2c:68:2f:56:f3:6f:94:
                    63:15:3b:22:e1:31:47:e7:6d:ce:6a:32:ba:21:32:
                    73:f5:60:96:c3:5a:b5:79:c5:51:e0:c2:f6:7e:dd:
                    06:29:e7:22:c4:70:4f:20:27:3e:19:d7:82:c7:57:
                    b7:ec:4f:27:5b:1e:8d:33:78:b4:98:ba:8a:b7:01:
                    8f:7d:3f:3b:d2:3d:e8:ed:2b:fe:2c:8c:4c:83:dd:
                    8c:60:9e:00:0b:0a:e8:57:30:32:2f:c3:b6:bd:d6:
                    22:43:14:b8:93:15:7f:eb:77:a2:26:a0:5e:b1:2f:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2C:E1:FB:AD:7F:2D:CB:8A:C9:6E:39:05:37:32:09:82:18:8E:C9
            X509v3 Authority Key Identifier:
                keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2d:c9:45:b4:a8:d0:08:26:ab:87:76:57:22:08:18:d3:7e:
         fd:22:c9:55:77:62:f5:60:14:3b:25:89:94:f8:11:1a:bf:7d:
         2d:de:f3:77:84:ec:20:01:85:24:e9:d3:4a:bb:0c:bd:af:96:
         a5:74:ca:ed:c4:56:99:64:ff:5a:98:a1:66:c6:68:83:f2:79:
         c3:9d:22:eb:b2:e9:25:06:63:8b:84:2a:aa:05:36:29:9f:b8:
         21:2e:68:aa:97:62:27:e1:f1:40:51:00:3d:38:9a:4d:8d:1e:
         3c:3c:13:b8:86:41:47:87:13:17:59:87:73:97:ba:19:7e:aa:
         4b:87:82:55:3b:55:60:8a:3e:64:06:33:e8:e8:0b:42:fc:d4:
         8f:17:fd:bb:98:18:b2:2c:09:1d:98:e9:7e:ea:fb:44:6f:ab:
         29:04:71:81:12:45:26:f6:f2:a8:3b:15:0d:5a:cf:fd:77:ec:
         72:63:09:49:61:1e:1b:3d:32:44:4b:13:c0:83:34:62:24:ba:
         b4:94:f0:b3:98:71:53:c7:bc:24:0d:28:7e:c5:db:ab:65:96:
         f0:9a:51:9c:18:2d:a9:3b:a0:69:3c:a3:d2:83:15:7b:17:3e:
         19:99:b2:bc:a9:73:be:ae:02:22:c9:50:75:09:51:99:ab:45:
         ef:f7:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:25:59 2025 by rpki-client