Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File:                     x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier:          Dv2CUnRc+2FkvL/+pZ3VeH9sxSDZZzu7KFe9CCsGJwY=
Subject key identifier:   09:C5:1C:F6:C9:25:7B:67:8D:23:4B:01:C0:09:18:DF:85:5C:2C:A3
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer:       /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial:       019845F6168E1BEDFFD01F1691BED0CA68AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number:          1515
Signing time:             Sat 26 Jul 2025 09:00:12 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:12 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:12 +0000
Files and hashes:         1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=)
                          2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: yDYqpCwTcAgCSQULljj5bv4+F998CCfaRtfk+a2n6YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:16:8e:1b:ed:ff:d0:1f:16:91:be:d0:ca:68:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
        Validity
            Not Before: Jul 26 09:00:12 2025 GMT
            Not After : Jul 27 09:00:12 2025 GMT
        Subject: CN=09c51cf6c9257b678d234b01c00918df855c2ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:43:c3:1f:2f:0b:61:34:7e:1e:0d:08:db:
                    e0:ab:4f:d6:0a:40:22:a8:8b:3b:4c:1c:08:d8:ad:
                    a8:f4:21:1a:48:8b:a9:5c:97:fc:56:4c:c4:63:5e:
                    fc:1d:78:a1:40:5d:2f:0b:b5:35:62:30:ab:9c:12:
                    a9:0c:f4:f2:04:ad:24:49:0b:d9:95:83:4a:eb:00:
                    e8:28:40:8d:fe:44:bd:6e:28:7a:eb:10:53:f0:5e:
                    70:92:78:5c:7e:36:16:50:0d:f6:b7:ce:75:1a:32:
                    f5:bc:98:31:91:00:70:88:bd:71:41:f6:43:72:d1:
                    0c:a9:51:a6:35:c0:97:0f:5a:7d:9e:e6:2b:11:61:
                    cc:a3:8d:41:e6:bc:ba:a1:db:82:d3:55:70:c1:10:
                    a2:90:96:f9:44:12:f0:d5:e7:e6:9c:e8:4e:d0:b2:
                    17:75:1d:ce:59:2a:72:09:82:e4:8f:8c:8d:6d:a3:
                    4d:9d:35:10:58:f8:e8:6c:cc:ac:5a:90:2f:ef:8e:
                    12:7a:32:26:45:44:ba:f4:5e:db:f8:44:53:d9:8d:
                    d8:57:70:3e:e0:6e:fc:50:d4:ea:84:9e:78:f8:5e:
                    bc:f5:0e:90:a5:5d:90:54:cb:36:f6:78:55:16:0a:
                    b9:bd:d8:9a:4f:bf:1a:c3:12:f5:b9:38:02:a1:34:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C5:1C:F6:C9:25:7B:67:8D:23:4B:01:C0:09:18:DF:85:5C:2C:A3
            X509v3 Authority Key Identifier:
                keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:97:d3:bc:76:da:b5:27:54:61:e4:8e:e6:6a:9e:0b:0f:ad:
         62:be:bb:78:97:73:66:f2:3f:dc:e4:f0:d0:03:f1:51:4d:e8:
         10:1e:29:c1:2d:64:b8:a1:c2:60:54:00:6d:cf:a4:0d:8d:fa:
         27:13:34:37:16:08:25:eb:3c:e6:3e:28:ed:ed:21:ed:dd:9c:
         62:df:68:ea:c0:b4:73:a6:d0:70:14:27:a1:5b:92:22:44:b4:
         9d:90:f7:8f:06:21:ec:a4:75:a4:e6:6e:32:b5:3b:91:ac:bf:
         de:fa:87:8c:1f:fa:90:82:49:a8:5f:82:4b:de:ce:23:b5:75:
         ee:4b:96:ac:e0:77:3e:49:84:8a:5b:3d:8c:d3:2e:8e:e0:7e:
         50:67:17:3b:e1:b0:13:9a:d8:16:b3:39:60:50:0c:5f:45:9a:
         62:63:ef:76:91:96:bd:a8:93:42:a7:08:d2:1e:f1:1c:d3:3c:
         04:1e:46:28:bb:d8:f3:f6:78:f5:c4:a1:a3:92:d8:9e:69:ec:
         f2:e0:01:98:ab:81:a3:5c:53:45:41:a2:f4:69:11:72:c8:02:
         e2:28:be:55:9d:b3:20:45:5e:d4:a1:31:91:7c:b4:38:82:d3:
         29:b8:c2:03:a1:8b:83:bf:0b:4c:4a:57:18:d6:4b:83:eb:24:
         c0:9c:c6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:17:30 2025 by rpki-client