Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File:                     GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier:          GehT/rKDLZWV254wboLFGLu54nkNBew2iTrgV0pqssM=
Subject key identifier:   56:DB:1E:93:E5:EA:DB:82:26:B1:2A:88:B8:4F:6D:B9:27:5C:FD:63
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer:       /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial:       019843D0EDB10E42643B094FF4C1255CB790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number:          15FF
Signing time:             Fri 25 Jul 2025 23:00:22 +0000
Manifest this update:     Fri 25 Jul 2025 23:00:22 +0000
Manifest next update:     Sat 26 Jul 2025 23:00:22 +0000
Files and hashes:         1: 3LmcdlhkUozmC6fvBNvRqCvSzt0.roa (hash: Y7dEvx1WxwHh/kqiqr3Nj0OZHbvLg2W3/22cNvnOsh0=)
                          2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: lJfyDklEMpPP+l9eaEw5A2rcjXkSGsSmy2D09J3neS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:d0:ed:b1:0e:42:64:3b:09:4f:f4:c1:25:5c:b7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
        Validity
            Not Before: Jul 25 23:00:22 2025 GMT
            Not After : Jul 26 23:00:22 2025 GMT
        Subject: CN=56db1e93e5eadb8226b12a88b84f6db9275cfd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:01:3a:52:51:08:6c:a8:73:39:de:92:af:
                    96:7e:83:14:94:5f:8a:ee:c9:23:a4:2e:7c:77:fe:
                    fc:cb:d7:db:5c:33:35:66:44:23:c8:1f:7e:b2:c6:
                    4a:bd:fa:d1:4f:22:d7:3d:0e:68:d3:a5:20:09:97:
                    15:f5:a2:7a:67:f4:9b:c2:22:e3:d4:ee:88:08:dc:
                    aa:28:c1:03:7b:ce:dc:fd:4d:21:99:9b:9b:b8:bd:
                    fa:7d:eb:e9:4c:57:c0:e3:e3:b0:45:75:c6:7a:03:
                    02:2a:6d:d6:31:e1:32:57:2d:8d:b1:68:b8:cb:4b:
                    33:32:09:3b:70:6d:97:16:79:24:4e:2a:cd:e1:f3:
                    2c:07:99:e8:ce:2c:bf:09:44:2b:8b:f6:a8:4b:5e:
                    ef:40:96:62:d0:50:c8:25:e5:7f:e9:45:fa:89:7b:
                    3a:3c:9e:47:08:82:e3:05:4e:5b:e3:f7:1d:c6:e2:
                    d3:20:9c:a4:f9:7a:03:c1:66:e9:df:0c:aa:1f:37:
                    95:44:89:eb:9d:36:3b:53:ec:af:50:8e:6f:de:83:
                    60:48:a8:e9:79:01:65:d2:39:89:88:a3:1e:22:88:
                    db:77:6a:a2:04:4a:a1:51:aa:13:d0:13:c4:28:61:
                    ce:6a:1f:39:99:9f:0d:71:0a:32:f8:95:40:70:3f:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DB:1E:93:E5:EA:DB:82:26:B1:2A:88:B8:4F:6D:B9:27:5C:FD:63
            X509v3 Authority Key Identifier:
                keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:64:f2:cb:71:ee:c4:16:6a:8b:f8:b4:dd:19:93:90:52:fe:
         b8:6b:c8:50:03:c1:be:90:86:d7:f9:b1:10:4b:c0:73:12:e8:
         4a:67:47:5b:10:dd:50:ef:9f:b9:5f:82:8c:5f:a6:9f:2f:0e:
         85:cc:f0:55:e9:32:9b:76:b8:bc:84:09:d1:66:96:60:d7:99:
         5d:44:fa:24:aa:c8:11:31:14:c5:32:98:bb:45:2f:84:79:84:
         e2:38:f8:45:cd:38:32:85:ff:2a:88:af:b3:ad:de:e0:e5:7c:
         94:f7:05:59:4b:06:55:cf:54:24:86:e8:dc:b0:27:42:bc:3e:
         2f:a2:a0:fa:81:c5:94:aa:61:b5:39:0a:43:ba:81:4b:db:5f:
         18:99:de:93:da:05:0e:c1:38:d4:94:11:c3:dd:8b:45:89:74:
         ba:1f:cf:a1:6b:0d:99:42:34:56:00:33:93:87:b5:31:58:7a:
         83:a3:4f:2d:75:68:c7:1a:e6:d3:25:4d:69:44:53:52:ee:c9:
         1d:23:ca:58:1f:44:e7:ef:21:46:d5:23:c1:b3:d6:7a:a3:bd:
         f0:0b:5c:92:76:c6:bf:ea:89:d2:71:22:21:ec:d7:8d:e9:0d:
         26:26:4b:a4:d2:c4:fa:ca:8e:fc:b6:c3:26:a7:e5:89:59:12:
         46:0c:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:31:22 2025 by rpki-client