Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File:                     gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier:          NiNpnGZJaYQ2XqBgUktZ1Vavtj1/LNqBw6UXYR++5e0=
Subject key identifier:   15:C0:51:C7:C0:F8:80:9F:D1:34:4E:C8:B5:0E:11:CA:17:25:A1:78
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer:       /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial:       019847E50A061057A0B582104AE951BF2589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 18:00:49 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:49 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:49 +0000
Files and hashes:         1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: ILlcvhsESylSHObfXg9fPpCgx1/ffG/AOEIM05noZjU=)
                          2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
                          3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e5:0a:06:10:57:a0:b5:82:10:4a:e9:51:bf:25:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
        Validity
            Not Before: Jul 26 18:00:49 2025 GMT
            Not After : Jul 27 18:00:49 2025 GMT
        Subject: CN=15c051c7c0f8809fd1344ec8b50e11ca1725a178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:02:a7:50:71:64:48:ca:2a:ca:47:5e:3a:
                    d4:b9:70:17:08:d9:6d:9f:ff:8a:d3:2b:98:72:b3:
                    65:21:01:6a:50:68:bd:ab:d6:1f:f2:e0:ef:b9:c6:
                    1e:d5:26:5f:f2:8a:fc:2c:bf:d0:da:ea:e7:0e:c5:
                    ba:9f:ac:04:87:70:82:da:53:d7:a8:e4:5a:e1:bf:
                    8a:cb:70:a9:4d:87:75:86:4c:f5:0a:8e:81:5e:d2:
                    4c:6c:7c:b5:68:86:71:e1:06:7a:d5:3e:87:76:be:
                    2c:98:4a:35:f0:f8:e2:63:1f:a9:1d:a9:c2:58:54:
                    db:3c:69:5e:71:b5:13:e3:6a:63:b1:f3:fc:fb:3b:
                    6c:45:fd:0e:e5:46:98:7b:2a:e9:bd:20:dc:df:26:
                    76:fd:cc:78:c8:13:6e:4e:18:94:1f:23:60:b9:36:
                    1a:a5:d2:b7:69:97:51:2b:6a:48:c3:97:7a:44:0f:
                    ad:5f:82:36:40:97:d2:5f:d4:25:22:d8:d8:1b:46:
                    f1:b9:d1:a4:23:af:8a:b0:b7:75:d6:0b:4b:da:0a:
                    ab:3f:20:f1:46:47:87:13:12:b6:4b:f5:99:00:7e:
                    b4:3e:a8:1e:c3:a2:a2:06:a5:2c:a4:4c:5f:56:ab:
                    1e:4f:c2:9f:1a:2f:96:38:9c:ee:a8:56:64:29:d9:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C0:51:C7:C0:F8:80:9F:D1:34:4E:C8:B5:0E:11:CA:17:25:A1:78
            X509v3 Authority Key Identifier:
                keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1b:06:d0:80:0d:dd:1a:18:c7:47:c0:ef:f6:15:0e:b7:1f:
         d2:74:de:34:e6:10:73:e6:89:ca:8c:ac:92:dd:b0:cf:3a:a8:
         a5:98:f7:48:42:db:e1:54:ae:10:a0:19:58:b6:bc:2c:fc:d5:
         2c:12:e7:df:ed:7d:9f:16:3f:8b:a6:b2:09:ce:6c:3d:20:d8:
         b6:9e:15:00:3d:15:d8:2c:56:b8:d1:33:23:47:45:c4:3a:00:
         c9:fc:0c:20:93:fa:25:78:25:db:5a:ec:77:d9:a2:da:03:a7:
         c3:6e:e6:88:06:68:ca:42:f6:e2:10:25:f3:08:23:6c:fe:c4:
         c4:8a:1d:52:2f:16:6c:e5:00:85:75:05:96:2a:ba:32:7e:a2:
         4e:8e:1d:2b:7f:51:37:a2:40:d1:7e:89:22:73:68:d7:33:06:
         fd:58:fc:ac:c1:d3:7e:92:54:15:b6:88:e5:11:10:b3:45:b9:
         15:e7:48:1d:a5:80:60:67:d7:31:76:fe:e6:7d:91:b7:7b:61:
         29:55:cf:5e:77:f9:97:59:a5:e8:65:20:59:76:17:c0:74:9b:
         8d:a9:1a:37:be:8a:19:20:f4:07:0e:a6:b8:09:49:42:27:e0:
         71:02:3e:0c:94:01:ba:5a:45:b7:19:39:73:d2:65:02:f0:21:
         0f:09:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:56:28 2025 by rpki-client