Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File:                     1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier:          fNbq4L1z+nHTJL2QPxoeZ2IgowKrpUR3Ylesu2LNccc=
Subject key identifier:   C8:34:3E:23:AC:58:6D:A1:0B:B7:91:6D:0A:6F:8D:10:1B:0C:B6:DF
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer:       /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial:       01976D3D6AD452C774971CE145C4C1592EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number:          15B1
Signing time:             Sat 14 Jun 2025 07:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:30 +0000
Files and hashes:         1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: OforSZPRt8pvWbzLpzem2EmNW10jItsDEbNm0V54Mec=)
                          2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:6a:d4:52:c7:74:97:1c:e1:45:c4:c1:59:2e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
        Validity
            Not Before: Jun 14 07:00:30 2025 GMT
            Not After : Jun 15 07:00:30 2025 GMT
        Subject: CN=c8343e23ac586da10bb7916d0a6f8d101b0cb6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:53:66:6a:9a:af:9a:cc:43:fd:e8:27:60:
                    a0:00:69:83:81:f2:81:10:d0:cc:6b:42:1d:02:f7:
                    b1:14:70:61:8d:00:87:5c:1d:d8:9a:3a:8c:92:b2:
                    1a:c0:e4:56:7f:a9:20:d3:b9:f1:6e:24:13:fc:db:
                    7a:bf:d5:96:af:41:7b:37:6e:60:9c:dd:19:11:40:
                    08:39:d0:99:c3:82:26:ef:7d:27:ba:25:1d:8c:06:
                    c7:63:ce:1b:d8:d5:54:7d:63:06:40:d1:6e:a8:c3:
                    ee:d0:89:36:1e:4e:f7:8a:06:f6:5e:c8:a0:5e:ca:
                    cb:d9:bf:af:ed:52:ad:68:9b:69:3d:95:44:9b:2c:
                    dc:4a:20:64:b2:f8:8d:9c:b9:52:17:3f:52:a6:e0:
                    07:50:0f:71:81:6a:3e:fd:26:eb:0e:db:b1:21:0c:
                    2c:be:eb:ca:3e:69:fd:ba:be:88:d5:60:72:38:3d:
                    df:64:3d:2d:65:6c:e1:1e:6a:a4:ed:2a:e8:83:66:
                    9c:2d:96:00:fa:31:67:b5:3c:6c:5f:1f:7c:8c:2a:
                    8d:33:65:c0:4c:b5:b5:b3:7a:e7:70:19:36:6f:8a:
                    61:b7:bf:b4:0a:f5:4b:e4:cc:47:18:75:8c:29:0c:
                    70:91:a7:6d:98:e2:d6:4f:e4:af:c4:25:5f:04:e1:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:3E:23:AC:58:6D:A1:0B:B7:91:6D:0A:6F:8D:10:1B:0C:B6:DF
            X509v3 Authority Key Identifier:
                keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:16:16:9b:81:8e:62:3d:d9:27:6b:5e:b2:2f:11:87:c6:c2:
         58:48:2d:15:52:a8:e5:4c:b0:af:45:43:bb:b6:11:ed:84:51:
         8e:4a:ae:5d:2b:6e:7f:1e:5e:eb:be:76:05:9f:b1:c4:dd:ad:
         ae:41:d7:90:45:57:f7:62:18:8f:5d:b4:7e:a2:1b:c6:ac:55:
         7a:5b:9e:2e:c0:16:a8:09:e0:96:a5:1a:9c:8c:70:0a:51:48:
         79:36:8b:d1:b5:2f:71:77:9b:2a:90:33:f1:71:d2:50:c6:fb:
         b0:c2:d4:25:b4:b2:46:cd:a7:ff:d3:b9:e9:eb:4d:8b:97:dd:
         d7:a0:de:43:38:10:66:1e:fc:4b:58:5e:a8:e8:b4:2a:57:5f:
         a6:04:5d:04:7e:93:6e:b9:6b:79:0d:d8:4b:5f:3b:e0:bb:ea:
         c6:f1:a7:67:8b:99:8d:e0:ac:58:c3:fa:f3:44:18:75:e0:5e:
         06:d1:07:4e:5d:ff:c7:97:9c:f2:90:6c:60:8f:d5:9e:05:cf:
         6b:97:e7:e1:31:db:44:fc:f9:ea:10:3a:72:c2:38:f5:38:08:
         f1:5c:60:91:3f:5f:70:04:45:39:25:03:5a:47:83:55:f4:37:
         1e:06:52:73:18:ea:03:98:72:f9:b1:b0:dc:85:f2:ae:7f:dc:
         24:dd:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:47:04 2025 by rpki-client