Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File:                     bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier:          VxO6dHqWe2H7xK4ZaGNEWYghCWa2Eds9KGyuLczHBdI=
Subject key identifier:   78:1D:49:0C:17:B8:FC:FD:58:BA:C9:D6:47:56:76:15:43:99:8A:31
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       019827B568FF5968176E0A27BFBE102C865A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number:          15EF
Signing time:             Sun 20 Jul 2025 12:00:56 +0000
Manifest this update:     Sun 20 Jul 2025 12:00:56 +0000
Manifest next update:     Mon 21 Jul 2025 12:00:56 +0000
Files and hashes:         1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
                          2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: plglT4aB/WLOeugmk27Tr4eHoV0Wobuxi/olfsYMzdU=)
                          3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
                          4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:b5:68:ff:59:68:17:6e:0a:27:bf:be:10:2c:86:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: Jul 20 12:00:56 2025 GMT
            Not After : Jul 21 12:00:56 2025 GMT
        Subject: CN=781d490c17b8fcfd58bac9d64756761543998a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ca:3b:de:7a:6c:27:e5:27:bb:3f:95:08:79:
                    d7:a3:12:00:2f:2d:44:23:81:ae:9e:74:4c:59:57:
                    66:d3:d0:d8:61:3d:63:c1:8c:e8:27:8b:79:ac:21:
                    ab:d2:2a:ca:bc:26:2f:c1:91:bd:1d:9e:4c:dd:20:
                    d6:36:5b:8c:de:91:5c:3e:e6:29:21:92:a6:09:40:
                    1d:60:b5:d4:80:3f:57:31:ff:97:3d:fd:68:3f:7f:
                    ea:8b:61:d2:81:73:33:d0:63:cb:29:33:0c:0e:51:
                    4d:4b:cc:ca:e1:91:fe:7f:a0:be:ca:35:ef:10:c7:
                    79:5b:30:99:02:ef:55:3a:b5:b6:12:b8:ed:a6:72:
                    99:fe:2c:da:20:e6:07:ab:47:e4:55:d7:2c:12:c3:
                    07:e2:c2:2d:aa:ec:4b:a7:d5:83:30:fe:30:fe:77:
                    4b:88:61:cd:2d:76:75:5b:d5:ec:f3:c2:ba:cb:c4:
                    d3:76:89:be:15:e3:ea:9b:ae:c1:31:61:6c:26:04:
                    20:b3:b9:e9:a7:06:d0:fb:3f:65:1b:db:da:ea:4f:
                    84:2d:f2:3a:54:d6:4a:43:96:08:4e:00:3b:d6:3f:
                    d9:19:41:77:c9:10:77:fa:58:f4:3d:0e:fa:9e:b9:
                    c6:ca:6f:ff:6e:d9:da:1c:4a:be:af:92:37:ae:22:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1D:49:0C:17:B8:FC:FD:58:BA:C9:D6:47:56:76:15:43:99:8A:31
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:6b:96:2d:3d:3c:f7:48:86:c1:af:1a:77:5a:35:80:20:
         4c:ac:92:3a:6b:d0:b9:f2:12:27:08:11:c9:70:af:b3:b8:ef:
         e1:4c:62:95:18:65:ba:06:b4:b4:a8:c1:1c:27:b1:9b:f1:61:
         38:e2:9e:66:cf:1a:8b:f2:75:9e:23:f9:3e:85:b4:6c:a5:a4:
         0c:fa:38:52:54:b7:36:98:8d:b2:50:eb:d9:97:ed:2b:1f:a7:
         3b:79:d1:5e:61:b8:46:f5:d9:9b:63:61:b4:9f:cc:29:04:a4:
         4e:a9:fc:37:db:6a:b3:54:8f:44:e1:2b:19:14:12:ac:6e:2b:
         ce:da:5c:2e:81:15:82:9f:90:7e:5b:83:df:3d:92:9d:1a:61:
         b2:b6:08:84:8a:93:99:4f:14:6c:2a:a6:a9:94:45:52:13:fa:
         63:6c:dc:a2:f9:55:d8:64:d9:9f:e3:15:13:fc:50:7c:af:fd:
         95:78:fc:f7:40:cb:cf:b7:da:44:b8:c4:e9:1f:46:9c:07:8e:
         ff:e4:0c:3d:49:61:56:5c:2b:df:3a:38:70:1b:b4:41:7e:66:
         c2:4b:f4:7d:79:24:c9:b8:5e:f5:35:c5:63:6e:87:be:d5:44:
         e8:32:27:3e:d5:55:b9:c9:e0:d9:32:3d:33:6a:a6:b8:b3:29:
         fb:2b:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:52 2025 by rpki-client