Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File:                     _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier:          7W0/p5XXXv0jcN9tJHDF63PscVr5uM9+pRAH14FGJlc=
Subject key identifier:   0E:DA:8C:E0:19:2A:D1:BD:D2:D4:DA:DE:D3:69:1A:C5:F9:64:DD:FB
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer:       /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial:       0197C9F0A2614C0308DC01550A36A11DC8C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number:          15BE
Signing time:             Wed 02 Jul 2025 07:01:20 +0000
Manifest this update:     Wed 02 Jul 2025 07:01:20 +0000
Manifest next update:     Thu 03 Jul 2025 07:01:20 +0000
Files and hashes:         1: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: ZlaSTipuEl+tnqSkTT/adXcNqh13R/Aj+WL6ACu1J+U=)
                          2: eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa (hash: ZjNNKQofgKq/YUnavRCCV2cjVOzm2yU0UKdAMKHM4p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f0:a2:61:4c:03:08:dc:01:55:0a:36:a1:1d:c8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
        Validity
            Not Before: Jul  2 07:01:20 2025 GMT
            Not After : Jul  3 07:01:20 2025 GMT
        Subject: CN=0eda8ce0192ad1bdd2d4daded3691ac5f964ddfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:52:d2:17:49:50:ba:5b:6e:1d:d2:5e:53:
                    c0:85:19:24:42:2b:9a:60:a4:35:63:a6:8d:77:52:
                    ee:3f:3d:bd:2c:05:fe:7d:d7:b6:c5:b4:ea:d3:bd:
                    df:bc:9f:d4:4d:8b:cc:0a:d8:25:f4:b5:e2:02:c6:
                    e2:4f:d6:b5:67:9e:3a:b0:7d:d4:00:fb:31:f4:ae:
                    fe:a8:44:de:53:e1:15:7a:f9:c6:c8:7b:76:0e:65:
                    b5:6d:34:3e:b8:6c:74:4c:74:dd:34:d8:70:e5:a4:
                    aa:d0:29:80:93:d1:f2:ce:67:b7:4b:64:a3:61:d9:
                    24:c8:a8:bd:10:41:0f:7e:57:f4:fb:cb:b8:ca:b2:
                    60:ed:bb:b8:a9:ce:f7:68:10:f7:6a:6b:27:b2:1b:
                    8b:b7:3f:15:f9:e1:6c:57:80:af:ff:40:ea:e9:8f:
                    26:ce:56:0a:72:e6:6a:07:8f:27:e6:7e:18:3a:6d:
                    2f:2b:5d:8e:44:9b:f1:2d:59:b7:29:ad:65:9b:38:
                    a4:2e:94:6f:da:22:19:40:a6:84:f3:9f:9a:66:ac:
                    bf:74:03:25:f3:31:b3:e2:07:93:2a:a4:d8:7c:6c:
                    b9:d4:cb:26:47:01:09:af:e2:6a:4d:ac:2b:e5:97:
                    9c:76:f0:ac:29:a3:79:4b:82:39:b8:d6:71:25:d0:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DA:8C:E0:19:2A:D1:BD:D2:D4:DA:DE:D3:69:1A:C5:F9:64:DD:FB
            X509v3 Authority Key Identifier:
                keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:84:6a:24:39:bc:0b:ef:99:12:20:29:ba:d3:b7:fe:23:90:
         52:a1:1a:d3:e8:62:3d:15:7f:ab:29:6f:fd:37:d0:ca:e0:a8:
         e1:53:20:5b:93:a9:c3:24:b7:26:75:45:10:51:09:33:a2:76:
         32:74:bc:4a:f3:3a:45:23:f7:80:f7:fb:58:2a:44:1d:52:ae:
         d7:ff:88:0f:ad:d9:92:cb:1a:8e:65:c9:26:86:df:a6:1e:a7:
         ef:66:48:da:45:48:d7:45:53:d4:99:b4:9d:71:77:b2:1a:c3:
         c5:84:7e:49:e0:7d:3b:ba:de:3a:4d:24:fd:b4:2f:f2:e8:c0:
         dd:00:0a:8b:49:3a:65:5e:1d:78:82:d0:ab:8c:d3:00:a2:62:
         f7:31:f8:ad:be:94:20:39:51:b1:a7:66:e6:9c:96:3c:aa:d9:
         f6:9f:8c:3d:d4:46:03:a5:14:00:e2:9b:9e:9f:d4:b9:72:2b:
         bf:4e:29:6a:e0:3e:55:5f:b2:ea:e2:0d:20:07:05:50:5c:60:
         26:9d:ea:86:27:95:99:e3:88:08:a3:8e:9c:4d:2c:e6:04:12:
         06:3f:5c:22:b9:97:64:bc:b7:74:05:e7:0e:1b:c3:45:45:b6:
         3f:1b:4c:de:a5:e4:8f:b0:92:dd:43:21:58:47:6a:ae:57:5d:
         57:dd:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:14:19 2025 by rpki-client