Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File:                     rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier:          +dN+OWNFgtevS+Zl0QAaXbU2vZvLu0mTlKbczxE/3dg=
Subject key identifier:   35:93:00:1C:6F:BF:59:26:C1:58:8D:42:78:D1:6C:23:D2:08:61:AF
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer:       /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial:       0197C86FF93AF5DA673DF3B1D43C20519784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number:          15DF
Signing time:             Wed 02 Jul 2025 00:01:10 +0000
Manifest this update:     Wed 02 Jul 2025 00:01:10 +0000
Manifest next update:     Thu 03 Jul 2025 00:01:10 +0000
Files and hashes:         1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
                          2: 8nUvj8lY7CMTGbwnkVwsxBWh6aw.roa (hash: Aix9ab5boOQSnVduDf/PzYb3KHZGbO4bW6Ul5fxfzk8=)
                          3: bdkHO-cMRs9yWZFdjBV-qe9nYgE.roa (hash: qubjkKMt0NactOF0nXU7jk7H1UZ/exx8oL0CEz67yU4=)
                          4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: Z/eRDvwvk5ykX10EY45X1Fi8kiKI5wgr6UEE404lnzY=)
                          5: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:6f:f9:3a:f5:da:67:3d:f3:b1:d4:3c:20:51:97:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
        Validity
            Not Before: Jul  2 00:01:10 2025 GMT
            Not After : Jul  3 00:01:10 2025 GMT
        Subject: CN=3593001c6fbf5926c1588d4278d16c23d20861af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:e6:d2:75:8e:dd:a1:07:24:56:a5:6c:35:
                    b5:17:08:2e:75:ad:00:c7:4a:40:32:f5:b0:3f:99:
                    46:88:6d:1f:d0:cd:7e:d6:63:e9:fe:53:df:28:2e:
                    d9:f3:64:3c:18:84:46:9a:63:ce:e4:63:c0:ce:13:
                    2f:7b:30:72:e2:9e:61:d2:98:2d:c2:36:34:3f:75:
                    dc:3a:3d:68:7e:d7:61:bf:61:3f:17:a8:8c:dc:f6:
                    c1:5c:97:13:e9:c3:f3:78:d1:a3:6e:ec:4a:c9:72:
                    4c:c1:54:ff:72:6c:ab:4b:ab:3c:3d:be:bf:b3:aa:
                    b5:2f:f9:b4:7f:e1:26:6a:7b:7c:f5:79:0c:2b:65:
                    8a:c6:7d:4e:dd:dd:4b:a4:84:82:82:76:2a:39:71:
                    77:35:0c:d2:62:b2:d7:3d:8f:7e:d6:b6:65:38:d7:
                    dc:32:d7:1c:fc:3c:74:98:11:7e:61:4a:db:ad:88:
                    b9:20:e5:9f:26:b5:ce:87:c5:8d:b5:15:f0:ac:be:
                    d1:6f:b4:f1:7e:6c:1c:3d:53:a5:58:73:79:38:36:
                    13:9c:a4:20:0c:f4:43:a8:b7:23:fb:4e:7b:52:ff:
                    70:26:a7:fe:8b:26:75:3a:82:69:7c:e9:93:f8:f0:
                    ac:db:46:c3:b7:61:9e:c4:02:7e:6a:d0:18:fb:90:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:93:00:1C:6F:BF:59:26:C1:58:8D:42:78:D1:6C:23:D2:08:61:AF
            X509v3 Authority Key Identifier:
                keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:ba:5e:29:49:da:e4:68:9b:9e:8b:9c:cf:a9:d6:0c:80:
         30:2e:ef:fe:e7:33:d2:42:98:77:8b:2e:bd:b4:65:52:e0:5d:
         b2:45:7f:f0:93:7e:65:7d:fc:03:2b:9b:bc:29:ed:11:cd:a1:
         f6:0c:59:6e:74:d1:f5:03:4e:92:c7:a8:60:0d:1c:c9:bf:6a:
         99:63:d6:bd:8e:00:1e:cf:ce:61:79:2b:0a:29:18:56:74:e9:
         97:fc:74:c0:5b:bc:32:a5:51:8a:69:cc:3d:15:7c:7f:40:a8:
         8c:1b:4a:d0:71:07:eb:15:16:cf:a5:c5:a6:97:e5:d9:64:f2:
         be:64:c2:bb:8b:36:5f:5b:03:da:82:cb:f4:74:3d:7f:f6:2f:
         0c:c4:fe:83:2d:2a:04:2c:36:5e:52:83:a9:db:4c:62:68:d1:
         b4:7e:43:d4:35:f9:24:06:68:77:b7:fe:c8:62:40:37:ff:32:
         3a:32:20:60:df:13:84:27:6e:e6:c3:c2:37:9a:cd:f6:a4:d8:
         fc:d5:11:8e:3d:28:55:66:70:df:7e:ac:2b:d8:61:58:2a:f6:
         03:a3:3e:94:91:8e:fe:df:cb:63:b0:ab:96:68:dd:af:be:e8:
         d1:a0:8c:a6:69:60:f2:27:b2:a1:ea:7b:13:49:a4:6d:5b:f4:
         f5:58:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:30:13 2025 by rpki-client