Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
File:                     btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json)
Hash identifier:          bfoEv3QTpu+UKAphD8Q/7L0TRPqymWthJzlSDSA89ms=
Subject key identifier:   9B:1B:47:63:37:16:A8:F8:58:E1:55:9F:11:2C:88:B5:4B:3A:C3:6F
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Certificate issuer:       /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial:       01982F38498574B7B73D7A0C8ED6F4FEF7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
Manifest number:          15F6
Signing time:             Mon 21 Jul 2025 23:01:14 +0000
Manifest this update:     Mon 21 Jul 2025 23:01:14 +0000
Manifest next update:     Tue 22 Jul 2025 23:01:14 +0000
Files and hashes:         1: 9pVSMCdjQealzLgQcmqOThUhNyY.roa (hash: Za3wBMJoYZ7WrjJeJ4YGgLkdE+KKnUd40rRwXB4f/WU=)
                          2: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (hash: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=)
                          3: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (hash: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=)
                          4: bSRwpXF4daZ64mmbWkichNXlbKQ.roa (hash: UI3xu+IDrHLUWFrOWnEgl/cse2lLBjv83Y/Ok1oQevo=)
                          5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: jPcfrKz3R54ibCyqR90Gmv4hBVC+Ntp7CF2PWvp/qig=)
                          6: c7okVFaHlAlUexayvfgBOKFlFAQ.roa (hash: hGEyBzgSKXCjptMSFi5MLoApkRoSwE9UaM8SMZ+2CFo=)
                          7: nJiYZEpB1EgK05RNyHLNlPAVIA8.roa (hash: AlaLFQmqj+Z/cHGEWv8PdyAv4LrvAlOopVYBnZcKqZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2f:38:49:85:74:b7:b7:3d:7a:0c:8e:d6:f4:fe:f7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
        Validity
            Not Before: Jul 21 23:01:14 2025 GMT
            Not After : Jul 22 23:01:14 2025 GMT
        Subject: CN=9b1b47633716a8f858e1559f112c88b54b3ac36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:63:92:8a:58:bf:0d:49:9f:6e:a4:f7:29:
                    7d:c7:c1:57:3a:96:bf:7a:2c:71:8a:86:e0:a9:51:
                    46:0b:3b:c3:04:45:cc:2f:f9:90:29:4b:7d:26:37:
                    a2:bc:9e:72:07:aa:91:9d:04:3a:dd:fc:08:4a:2d:
                    15:5c:68:8c:23:1b:55:83:27:59:aa:70:77:59:a5:
                    d2:7c:51:cd:49:24:f1:3e:fa:14:31:51:77:d2:f9:
                    42:3a:a6:86:a1:39:6e:b4:11:4c:c6:91:0a:af:29:
                    e5:2a:4e:f4:c7:cf:1d:33:bf:32:28:bc:15:5a:39:
                    f0:42:96:37:1f:de:73:c5:a4:5d:a3:2c:06:d4:e7:
                    40:a4:81:bd:77:02:7e:bf:f5:a2:82:55:0b:f8:6f:
                    84:bd:7e:4e:73:84:e8:a4:d1:72:d6:92:a8:e1:aa:
                    e0:c4:24:61:0e:4e:b8:30:89:6d:82:3b:e2:b4:8d:
                    c6:fe:4a:2a:f8:43:7f:ac:55:b5:10:b2:8b:9c:87:
                    ec:ca:9e:91:fa:8d:bc:55:41:ad:5a:1a:26:b3:ed:
                    76:ac:6e:e5:53:7b:9a:99:5d:e0:14:13:b9:69:34:
                    da:d1:c4:60:85:49:eb:79:77:1f:65:3f:28:6b:bd:
                    58:03:15:07:c7:03:94:6a:e3:66:e7:43:ec:3a:b8:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:47:63:37:16:A8:F8:58:E1:55:9F:11:2C:88:B5:4B:3A:C3:6F
            X509v3 Authority Key Identifier:
                keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:fa:6c:31:d4:fa:dd:44:25:e5:a3:46:96:79:00:f0:4e:
         ff:3d:7b:fd:b9:3c:5b:4c:39:af:cb:0f:c8:2d:e3:77:aa:71:
         9b:2c:4f:3d:45:20:31:fd:55:e4:bf:af:e8:bb:05:03:ff:dc:
         f3:f8:a6:d4:78:e0:79:46:9b:bc:b1:ab:30:c4:5e:c9:7a:0c:
         3d:08:7a:fd:60:a0:c9:cc:34:2e:d3:0e:5e:8b:0a:a1:b5:4a:
         c5:7d:d5:98:ac:d1:e6:93:dc:c2:19:3f:36:96:c9:aa:bc:80:
         d0:f4:19:cb:3a:4a:0a:6d:ec:7a:cd:6d:ed:ca:62:f8:14:af:
         6f:a0:aa:c8:f6:d4:58:63:55:d9:19:0c:f4:df:ed:a9:e6:4c:
         3f:c6:40:68:c5:dc:81:ea:7d:db:fd:20:7e:31:2a:24:3e:68:
         ca:bf:e2:ab:5c:16:8c:6d:ec:60:82:5b:f3:f9:d7:13:26:d3:
         78:57:43:28:b5:d6:19:fa:77:f4:c9:99:5e:1d:be:75:42:44:
         63:ac:5b:8b:58:44:da:1a:ee:1d:a9:36:ee:d8:27:4c:7e:62:
         26:08:cc:b1:89:89:db:2a:80:dd:1e:c3:64:4e:f1:f3:c1:40:
         8b:dd:c1:bc:bd:3f:bc:6a:f0:20:0b:e4:46:81:29:dc:b1:97:
         83:58:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:29:38 2025 by rpki-client