Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
File:                     h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft (raw, json)
Hash identifier:          gTiK/C/Aik26MB2G2ItBXIEFvsdDyY+8NEKtcazip8U=
Subject key identifier:   6A:41:09:F9:08:F7:E4:82:24:82:1D:4D:E3:AA:EA:0C:FC:D9:F4:66
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Certificate issuer:       /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial:       0197C982B95F474AF84B364314C2D3EC1F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
Manifest number:          15C1
Signing time:             Wed 02 Jul 2025 05:01:16 +0000
Manifest this update:     Wed 02 Jul 2025 05:01:16 +0000
Manifest next update:     Thu 03 Jul 2025 05:01:16 +0000
Files and hashes:         1: P-yGIcgr3IfthLgzfM98T6lGbKU.roa (hash: 7HVjYAoSUQuVeE2cpmTGfmBl3cuM7py9I5dDG8/Cz1U=)
                          2: h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl (hash: Rbv10DDbWRiXHCcrI1AJ8HWHk9+t0XYg0hUaOVO5UOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:82:b9:5f:47:4a:f8:4b:36:43:14:c2:d3:ec:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
        Validity
            Not Before: Jul  2 05:01:16 2025 GMT
            Not After : Jul  3 05:01:16 2025 GMT
        Subject: CN=6a4109f908f7e48224821d4de3aaea0cfcd9f466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:f1:12:81:80:a3:f9:75:58:11:8f:e9:24:
                    cb:d4:00:de:65:19:d4:4a:21:3a:4d:f8:b2:7c:37:
                    a1:6d:cf:52:8e:29:e4:39:1c:1a:ae:96:29:52:02:
                    53:f8:95:c1:77:6d:9e:af:43:db:65:cc:a7:cd:b9:
                    60:35:da:6e:da:17:fe:25:f4:fa:4d:1c:36:88:a5:
                    90:e4:b7:96:ca:b8:08:c0:90:21:30:bd:df:87:43:
                    e1:0a:e6:2d:98:05:af:af:dc:ed:8f:e1:98:4d:1a:
                    ae:e5:38:9b:3c:bb:7c:d5:24:3a:e0:52:6c:5f:1f:
                    66:a3:01:02:2d:63:fa:87:2f:ad:91:14:2a:3f:d0:
                    ce:f8:00:88:46:1d:56:0d:b5:95:70:5b:e3:b5:e6:
                    d9:44:b8:5f:bf:c8:83:ed:d1:c3:2f:05:a5:80:60:
                    0d:88:51:63:0b:55:79:a5:96:27:be:3e:9f:db:81:
                    02:3b:28:c1:7c:eb:87:73:9c:ce:33:65:01:3f:94:
                    17:2d:5d:16:99:d8:e2:01:6e:65:6e:6a:59:96:68:
                    7f:b2:5f:52:3e:fe:30:30:a1:fa:40:14:d7:ee:45:
                    79:32:06:2c:64:99:10:f3:6c:fa:0a:53:1c:c5:59:
                    3d:1c:bc:bf:d5:e9:67:3a:a7:54:3f:6c:95:88:f8:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:41:09:F9:08:F7:E4:82:24:82:1D:4D:E3:AA:EA:0C:FC:D9:F4:66
            X509v3 Authority Key Identifier:
                keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:76:3b:20:ea:a7:26:b4:6f:68:61:f7:1b:54:7e:0d:99:b3:
         27:f3:97:44:75:48:0a:3e:16:53:02:27:bc:90:8c:ba:f2:8d:
         f8:e5:5d:63:f7:13:78:0d:32:f7:3c:33:b5:e8:b3:03:df:a3:
         76:f5:94:30:51:b8:70:76:c8:b8:7b:88:fe:ee:eb:ec:3e:41:
         a7:4d:05:b0:2b:c9:ea:80:58:d8:45:85:8b:af:ad:c9:c3:c8:
         d0:91:dc:92:12:a2:5a:df:c9:45:a6:df:b5:8b:b6:bc:5f:fc:
         11:1d:73:04:2f:8c:48:05:e6:9b:a6:b4:90:3f:e4:85:b6:1e:
         c8:dd:3f:e6:55:56:f1:c2:3e:40:99:2c:6e:cf:33:e1:dd:11:
         85:2b:48:d6:e8:19:d8:f0:5e:e5:3c:8d:b3:c1:dc:b7:ec:72:
         2d:3a:1c:6b:a6:10:ae:67:45:54:9f:e7:ff:2d:e2:42:68:5b:
         9d:69:8d:34:68:c7:2b:7e:80:1a:f4:d2:ce:0a:1e:d2:c0:2f:
         f6:5c:5d:65:34:a7:f5:bc:88:3a:38:83:f7:d8:97:09:1c:14:
         09:87:f9:80:a3:1b:f1:12:f9:32:1a:8e:df:46:c5:1f:bd:7e:
         bc:93:5d:46:20:c9:8f:e5:53:d6:3b:8a:4f:3e:d8:e2:ae:a0:
         79:45:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:11:27 2025 by rpki-client