Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File:                     15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier:          QSGm1ASbx4yukgn6moTjJ6nYaiZNp3fFAapT2TeQ0gs=
Subject key identifier:   1A:D5:5C:20:FB:99:FB:1C:FE:D3:96:21:6F:3E:14:09:32:F0:EB:9C
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer:       /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial:       0197469E46806C208DC779A43D3F1B782430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number:          05FD
Signing time:             Fri 06 Jun 2025 19:01:07 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:07 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:07 +0000
Files and hashes:         1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: 8IejDUIKFNu4MiSq1qPGGTT8xAFGdmmEm7xOcbVMkNw=)
                          2: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (hash: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=)
                          3: ygl5P_7lTFnzJgirLplRNSI58XI.roa (hash: cR+NYAbF+5iFZxCdzFXgCBDiu3chwIso0AL6/JnYtEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:46:80:6c:20:8d:c7:79:a4:3d:3f:1b:78:24:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
        Validity
            Not Before: Jun  6 19:01:07 2025 GMT
            Not After : Jun  7 19:01:07 2025 GMT
        Subject: CN=1ad55c20fb99fb1cfed396216f3e140932f0eb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:d5:c0:d9:d6:2b:e4:60:60:99:f1:d0:5d:
                    03:cf:2c:b2:ae:b4:c3:e8:5a:29:8b:c6:6d:78:42:
                    4c:1d:41:aa:bf:f7:9a:d0:d3:ad:24:4a:dd:ec:1b:
                    63:06:4d:e0:cb:c8:b2:ef:c1:a6:f0:83:e9:b0:31:
                    9e:d7:4f:6f:ee:97:21:66:79:c0:c5:b0:79:7b:fc:
                    d7:41:88:7b:c0:e7:51:19:4f:f7:e5:ea:1b:9a:b1:
                    cd:78:fc:61:05:5a:1c:c4:db:b8:eb:b5:54:cc:3a:
                    de:ef:0e:64:d2:a1:5a:36:3a:57:42:df:cc:7c:5b:
                    76:06:00:86:c3:26:ec:37:3b:99:a1:5a:67:8c:e4:
                    8b:b5:af:84:08:42:59:b7:2e:b7:91:c6:c0:95:48:
                    e1:2a:9c:43:ab:6b:55:97:e2:80:34:8a:66:a1:9a:
                    01:c5:fe:ac:3a:11:83:d9:0c:ff:75:7d:f9:42:3b:
                    5a:44:99:6f:d4:ff:cb:72:5f:23:3f:9a:cf:c3:e9:
                    d7:dd:b2:e7:e6:2e:d3:cf:fe:14:f3:d8:e2:bf:98:
                    77:27:48:40:aa:a7:3c:49:33:66:f9:98:1d:be:73:
                    12:fb:d4:2e:1b:2e:f2:fa:a1:87:19:90:15:89:17:
                    e9:80:44:90:18:69:0c:97:ee:27:06:36:cc:61:ee:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D5:5C:20:FB:99:FB:1C:FE:D3:96:21:6F:3E:14:09:32:F0:EB:9C
            X509v3 Authority Key Identifier:
                keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:73:dc:fb:4a:1d:42:08:85:f5:e2:04:0c:d3:1a:f4:65:10:
         71:3b:40:e1:e1:3c:61:1a:de:2f:89:5b:55:26:30:e3:59:86:
         9b:c3:92:f8:c9:a4:04:21:7e:ad:a9:26:31:b3:3e:26:d8:12:
         ac:52:f4:67:05:8d:10:78:21:ed:45:d3:bd:76:d0:83:7a:f4:
         9c:b8:c9:26:8c:c1:41:20:42:71:70:a5:6a:c8:32:80:13:93:
         cc:f5:dc:55:b6:8d:07:33:f6:69:25:31:04:65:c8:99:b5:9f:
         ae:8d:4a:cf:39:1e:30:73:fa:2e:ea:12:f9:c7:5d:41:02:fb:
         93:53:5c:2b:46:73:1f:be:21:eb:cd:b7:cd:38:26:e3:57:5b:
         bb:d5:eb:59:66:96:ac:8e:07:1b:a3:0b:08:8c:95:a9:6b:da:
         18:09:71:69:88:59:0f:08:21:26:cb:9c:6b:2e:1e:9e:00:8c:
         45:f3:80:63:7f:cd:dd:91:f6:50:8a:cd:46:2d:9c:b8:60:2f:
         f1:cd:46:7e:c5:11:c4:39:ce:53:a7:0f:e8:2a:4b:7f:d5:04:
         b1:16:d4:e1:94:81:5b:1e:b7:6f:52:92:4c:b9:c0:d1:36:48:
         09:43:95:89:59:fe:37:95:67:8f:98:fc:8e:67:1f:7b:61:4d:
         f6:f2:9d:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnkaAbCCNx3mkPT8beCQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx
M2FlMzkwHhcNMjUwNjA2MTkwMTA3WhcNMjUwNjA3MTkwMTA3WjAzMTEwLwYDVQQD
EygxYWQ1NWMyMGZiOTlmYjFjZmVkMzk2MjE2ZjNlMTQwOTMyZjBlYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuobVwNnWK+RgYJnx0F0DzyyyrrTD
6Fopi8ZteEJMHUGqv/ea0NOtJErd7BtjBk3gy8iy78Gm8IPpsDGe109v7pchZnnA
xbB5e/zXQYh7wOdRGU/35eobmrHNePxhBVocxNu467VUzDre7w5k0qFaNjpXQt/M
fFt2BgCGwybsNzuZoVpnjOSLta+ECEJZty63kcbAlUjhKpxDq2tVl+KANIpmoZoB
xf6sOhGD2Qz/dX35QjtaRJlv1P/Lcl8jP5rPw+nX3bLn5i7Tz/4U89jiv5h3J0hA
qqc8STNm+ZgdvnMS+9QuGy7y+qGHGZAViRfpgESQGGkMl+4nBjbMYe5kpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrVXCD7mfsc/tOWIW8+FAky8OucMB8GA1UdIwQY
MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt
OTZhMzRiMDIyZjg5LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5
LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnPc+0od
QgiF9eIEDNMa9GUQcTtA4eE8YRreL4lbVSYw41mGm8OS+MmkBCF+rakmMbM+JtgS
rFL0ZwWNEHgh7UXTvXbQg3r0nLjJJozBQSBCcXClasgygBOTzPXcVbaNBzP2aSUx
BGXImbWfro1KzzkeMHP6LuoS+cddQQL7k1NcK0ZzH74h6823zTgm41dbu9XrWWaW
rI4HG6MLCIyVqWvaGAlxaYhZDwghJsucay4engCMRfOAY3/N3ZH2UIrNRi2cuGAv
8c1GfsURxDnOU6cP6CpLf9UEsRbU4ZSBWx63b1KSTLnA0TZICUOViVn+N5Vnj5j8
jmcfe2FN9vKd9w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:00 2025 by rpki-client