Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File:                     lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier:          vRkgrfATSpC/Bnrx4rWn/wI7dLiUeyCucim1Zw+0L0Y=
Subject key identifier:   D1:4A:63:CF:78:56:52:9A:55:09:6C:7B:3E:2A:12:0D:30:69:20:2B
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer:       /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial:       019853E8EC3C807962665C87A7493F4F9DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number:          15C1
Signing time:             Tue 29 Jul 2025 02:00:30 +0000
Manifest this update:     Tue 29 Jul 2025 02:00:30 +0000
Manifest next update:     Wed 30 Jul 2025 02:00:30 +0000
Files and hashes:         1: G39ME0xFxZesqQwqos2EdI8n7qo.roa (hash: 8k5VE0uXEGXbMB9ED4RCnZSTVNYbIG3+AEXwxhVpiyI=)
                          2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: ML9rw932KFZlGqp95pHWYLlCMicds0Xdyqrr50r4Xg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:e8:ec:3c:80:79:62:66:5c:87:a7:49:3f:4f:9d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
        Validity
            Not Before: Jul 29 02:00:30 2025 GMT
            Not After : Jul 30 02:00:30 2025 GMT
        Subject: CN=d14a63cf7856529a55096c7b3e2a120d3069202b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:28:6c:66:2c:67:f7:ea:09:5a:8d:a0:5c:
                    56:37:29:7f:67:21:30:87:d3:7e:11:b7:bd:11:41:
                    0a:05:9b:a5:41:2d:9d:73:4c:fa:1c:f4:9f:bd:96:
                    5e:29:43:a7:aa:b3:61:83:4c:da:34:7d:67:de:d0:
                    62:e7:7f:45:25:47:2f:0a:ef:b2:a2:3d:ca:a9:42:
                    66:66:7e:59:46:a4:20:a0:9f:7d:d4:03:04:33:f4:
                    9b:92:24:95:f8:ce:69:9a:19:dd:56:a6:b5:7f:1a:
                    b7:39:d6:45:98:db:0d:78:e0:e6:ee:40:13:3a:ad:
                    ce:df:0b:a1:45:bc:0b:aa:d3:1e:f6:43:1c:3b:52:
                    71:a5:35:90:51:4b:a2:fd:8b:ea:32:d6:49:f5:d8:
                    1e:59:82:0d:86:39:0f:65:cd:a6:10:42:ce:1e:59:
                    e4:af:ff:1d:ad:37:14:59:d7:a7:db:02:f1:2c:35:
                    df:0f:5c:48:c1:9f:ee:95:13:56:79:50:43:65:ac:
                    e1:31:7d:5a:e3:5e:7b:d1:61:6a:d0:24:f0:a0:6c:
                    34:9a:68:08:77:64:f3:1b:a6:33:f9:ec:70:4d:8e:
                    3d:68:40:5c:32:cc:5a:0f:51:61:35:30:3d:49:b9:
                    02:18:c3:01:30:ee:71:73:e8:ba:88:08:46:bc:29:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4A:63:CF:78:56:52:9A:55:09:6C:7B:3E:2A:12:0D:30:69:20:2B
            X509v3 Authority Key Identifier:
                keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:0c:12:94:28:e8:d2:3c:be:15:ef:5b:18:ed:5d:d2:8e:81:
         b4:07:d8:2a:eb:a7:3d:01:27:fb:6d:e6:b2:7c:a9:9b:36:38:
         17:61:64:f8:94:a5:9e:fa:17:56:66:ac:3c:c9:19:c7:27:87:
         b8:f2:86:24:a1:8b:a2:94:14:ed:4a:af:e9:fd:36:6d:e5:05:
         5c:67:f6:48:11:5b:3d:93:66:7d:08:de:74:92:50:5a:f3:99:
         e1:09:02:0d:81:90:0b:50:e0:d4:da:af:ed:0a:80:44:2e:40:
         f7:ee:9d:aa:ce:33:67:45:f4:c2:9a:e0:65:3d:51:b0:fa:d9:
         27:82:21:b3:0f:3c:a5:91:2a:38:26:4c:6c:9a:20:70:2f:75:
         19:ca:c5:a8:46:e7:c1:90:5a:e0:9a:95:45:ba:74:de:72:ff:
         3d:5f:5a:72:6e:ba:d0:32:77:ba:10:8b:66:4b:ba:e0:09:99:
         69:f4:5c:01:7d:b6:a4:49:fc:eb:4e:9a:78:39:f0:67:9e:44:
         55:4f:6d:bf:82:3f:99:d4:a8:2d:41:b1:8a:f6:f6:90:8e:a2:
         c8:93:83:74:89:23:5a:ce:0b:e5:5c:0a:be:5f:75:4a:f9:fe:
         d4:dc:11:fd:95:a9:fe:bf:51:5b:d0:7b:ca:3e:b3:74:1e:17:
         66:01:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:02 2025 by rpki-client