Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
File:                     CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json)
Hash identifier:          tjlrmvNEa7NIn6WIYGc9rArz4ERhoYuKGj6hXr8cYBA=
Subject key identifier:   FA:A7:72:F8:3A:36:C0:11:D7:30:88:49:63:02:35:F7:62:57:E5:32
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       019827B5655E032407C33A844BB75833F5B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
Manifest number:          15FC
Signing time:             Sun 20 Jul 2025 12:00:55 +0000
Manifest this update:     Sun 20 Jul 2025 12:00:55 +0000
Manifest next update:     Mon 21 Jul 2025 12:00:55 +0000
Files and hashes:         1: 43hLg4tOOv7SoGn-XftXhK9a-NE.roa (hash: fTCV6jJu7vHlfoEQtZwLz0NW5RubKgDanJcVlL86nkI=)
                          2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: LKGgE3fY0qSzD+EqNUxPsk9Fz/yjlHQFpg5GDguAWhw=)
                          3: RservbDL-BVcPWiT5GY7GGmaqNg.roa (hash: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=)
                          4: SpbFu7cu1hyzijH4Dcq1zO1wfcw.roa (hash: s7llN+uwGj/YltcQ4pU6jWvPZRuwP/LeuHpZEDrxXAg=)
                          5: X_Rtsxh8a-tRwYEIISqdxYeVheI.roa (hash: Xix6PIF+hRiDX1wXAP04l3u77j1tQfJifz6hRdA+cvE=)
                          6: nvYcptlp0PUhINL8di32N1PMAlE.roa (hash: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=)
                          7: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (hash: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:b5:65:5e:03:24:07:c3:3a:84:4b:b7:58:33:f5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Jul 20 12:00:55 2025 GMT
            Not After : Jul 21 12:00:55 2025 GMT
        Subject: CN=faa772f83a36c011d7308849630235f76257e532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:69:65:7d:b5:4e:65:d6:49:14:f1:11:a3:
                    12:52:43:02:a0:bb:ac:1b:e9:98:c1:c7:6a:d1:1c:
                    1d:d0:60:52:b9:76:e5:ba:7b:d7:21:1e:e3:c0:99:
                    0f:32:ca:31:18:39:16:70:ba:0a:39:8d:ea:2c:b5:
                    09:1b:b3:4a:76:4f:86:90:e9:bc:e1:ef:fa:a2:b9:
                    12:a7:aa:13:d1:8f:cc:7c:64:28:fa:c6:9b:02:65:
                    08:b7:d7:f8:df:c6:6c:80:1e:37:69:46:73:89:01:
                    1a:07:52:d6:c0:18:09:c6:a1:b3:46:b6:ba:11:6a:
                    a8:8e:99:1a:bc:88:12:13:cf:38:3e:9d:0e:b9:d9:
                    9f:51:ea:d4:01:cb:64:5a:8c:38:7a:31:95:2b:ea:
                    27:13:da:e4:ec:f3:30:65:4a:53:ae:7a:d8:17:cb:
                    4b:42:68:a2:c1:d9:89:ba:ff:e9:f5:bf:f5:d4:e3:
                    14:77:a7:5a:50:2d:9c:8f:e8:70:7b:f6:16:06:f3:
                    a4:60:57:c8:30:9e:7e:8b:15:b5:38:58:88:df:31:
                    4d:fc:e5:30:0a:ed:81:08:18:c6:c9:97:a4:67:68:
                    a1:a5:d8:10:76:a0:73:55:ab:29:25:f4:da:bd:04:
                    53:47:1e:6a:46:db:1c:b4:a9:3c:f1:b9:6a:f6:f8:
                    1e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:72:F8:3A:36:C0:11:D7:30:88:49:63:02:35:F7:62:57:E5:32
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:97:4f:aa:f8:f6:b9:5c:db:57:29:d7:58:48:28:06:0e:8c:
         0e:51:2d:b6:e2:7d:f7:ce:77:3e:6f:56:63:70:51:17:04:14:
         00:ca:25:bf:f0:c9:97:58:95:a6:c4:9a:fb:f8:28:90:91:2d:
         c0:28:6e:ca:48:56:3a:f5:d4:aa:43:b0:aa:f1:f2:1c:2d:58:
         14:70:1b:d5:19:10:4f:0f:12:24:ab:3a:41:e0:48:c2:a6:38:
         24:4a:3c:c7:37:d9:80:84:10:07:31:09:c9:ab:2b:61:c1:a7:
         0f:ad:6c:d3:29:d1:66:d4:87:bb:0b:4c:8f:dd:bf:77:c0:67:
         2a:44:ce:8d:c5:45:bd:74:e1:b8:93:30:9e:79:39:42:6a:59:
         c7:d8:d7:9d:59:7f:4f:d3:d0:d9:68:36:94:50:4e:65:9c:36:
         ad:9d:4a:82:9d:f4:aa:55:e3:cc:fb:e8:90:36:9e:48:5f:85:
         ec:10:38:c2:8a:80:c9:af:61:e9:54:e2:8f:0a:82:f7:e4:ac:
         d8:d9:02:2f:c8:c2:a7:07:ba:29:7f:3d:2f:44:bb:a4:97:ac:
         3a:f3:d8:5c:34:2a:e4:12:8a:d9:9f:7a:81:42:de:4e:4c:81:
         3a:4a:21:40:bb:58:e4:22:29:a9:c2:49:9b:d3:05:3d:4f:4e:
         8f:47:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:13 2025 by rpki-client