Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File:                     15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier:          qpNa+r2Sd2Kl2KbGl3LwaGSBVJiRYbYBRP3gbGYFBXs=
Subject key identifier:   CC:A5:AC:35:F3:8F:8D:05:36:07:30:BC:A9:3C:BA:C7:C9:45:EC:A6
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer:       /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial:       0198496650E085D31AA42DD7D7BE949D141F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number:          0683
Signing time:             Sun 27 Jul 2025 01:01:38 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:38 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:38 +0000
Files and hashes:         1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: WpRjeCtN3O5YWeW9Xh/vX4wTXuIeBLT6Mhz4s1spkmg=)
                          2: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (hash: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=)
                          3: ygl5P_7lTFnzJgirLplRNSI58XI.roa (hash: cR+NYAbF+5iFZxCdzFXgCBDiu3chwIso0AL6/JnYtEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:50:e0:85:d3:1a:a4:2d:d7:d7:be:94:9d:14:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
        Validity
            Not Before: Jul 27 01:01:38 2025 GMT
            Not After : Jul 28 01:01:38 2025 GMT
        Subject: CN=cca5ac35f38f8d05360730bca93cbac7c945eca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:77:9b:c6:27:b7:b3:ee:88:d4:fa:3d:33:25:
                    07:2a:4b:5c:00:5c:fe:4a:f3:17:5f:35:fb:64:17:
                    74:c2:47:a1:69:8f:ec:11:c6:b9:fb:52:60:cb:9d:
                    97:ee:45:5a:6e:d2:bc:f6:3d:39:ba:b7:7f:96:ad:
                    b3:21:54:eb:53:c6:b2:8b:8c:00:57:c0:38:41:49:
                    01:84:c9:c3:bb:dd:6b:b9:c3:cb:e8:84:0d:85:bf:
                    0d:45:d1:da:fe:7a:e8:96:57:61:15:18:6c:23:e1:
                    f8:fc:c0:92:b6:ff:0a:8f:e9:f2:b6:2c:8b:62:ba:
                    a3:87:ac:0c:46:74:93:a8:aa:27:79:f7:24:5c:08:
                    60:c2:48:a1:66:65:bf:c1:50:15:67:ff:b2:9e:31:
                    06:89:19:fa:ce:ca:69:9a:94:e1:0c:a4:4b:6a:c6:
                    e0:ba:c6:e4:5b:94:58:95:e1:81:72:58:2f:35:2b:
                    9a:f1:a4:4f:21:a3:a0:4d:1d:78:49:fc:49:06:64:
                    6a:19:65:1b:ba:69:5c:9a:70:2f:d5:1d:c7:18:eb:
                    dd:69:e5:fd:9b:2f:58:ce:1f:bf:9e:86:c4:dd:e2:
                    24:86:9c:a8:6d:38:2c:cf:3d:38:b2:1d:c2:28:19:
                    2c:16:81:b6:df:56:ab:96:68:c2:1c:ce:b7:c1:bf:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A5:AC:35:F3:8F:8D:05:36:07:30:BC:A9:3C:BA:C7:C9:45:EC:A6
            X509v3 Authority Key Identifier:
                keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:2f:2a:81:08:38:1b:a1:2e:0f:1d:17:3f:a2:49:62:b9:
         10:87:02:19:f1:4d:5a:fb:82:a6:83:65:92:5b:7f:4d:0a:d1:
         25:3f:8b:ab:b4:ee:5f:96:d7:11:20:a3:d3:69:39:ea:c6:58:
         33:37:08:2e:99:03:de:0d:0b:21:0d:91:07:35:ce:4b:ca:79:
         95:a1:54:f8:fe:64:93:56:44:e2:2a:14:85:e8:3c:f4:c7:c4:
         ef:8b:11:12:ab:65:f0:16:16:59:9f:19:e6:f0:80:a4:c1:b7:
         a8:f4:64:cc:0e:0f:1e:d0:94:60:f7:08:fc:43:77:9c:d0:1b:
         0a:7a:1c:be:ea:a1:4e:86:71:f3:56:20:3c:d7:df:f8:6f:c3:
         e3:76:4a:da:24:07:ab:16:99:fe:3b:bc:48:fb:19:ef:c9:3f:
         66:30:3f:33:37:a7:99:b5:4c:44:7c:da:a9:f6:80:89:39:e6:
         cc:23:03:a4:1b:fa:a4:50:4a:6c:3d:0b:8f:69:70:d1:27:80:
         05:1c:79:5c:b3:95:7f:32:b3:1b:12:d4:3c:dd:cc:bc:1a:3a:
         b0:60:64:52:09:94:4e:13:bb:b0:63:4e:93:50:b7:60:54:ce:
         d5:44:9c:f1:92:53:ce:c9:6b:2a:78:9e:0c:24:c6:8e:ad:24:
         89:02:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:29 2025 by rpki-client