Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File:                     F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier:          PjTZp40U9+JpvkD3TcvST45yKdlbfFm/yM9qtgK8BSk=
Subject key identifier:   D8:C0:F1:FF:E2:87:B6:1B:08:D6:5E:7D:BA:EF:EA:71:94:51:21:08
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer:       /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial:       0197D81A10FA2CE19494BBB3CBF7013636E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number:          15C6
Signing time:             Sat 05 Jul 2025 01:01:16 +0000
Manifest this update:     Sat 05 Jul 2025 01:01:16 +0000
Manifest next update:     Sun 06 Jul 2025 01:01:16 +0000
Files and hashes:         1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: sw1ArjfL9p7rFOFuzb2Rr5Y5F+qi2veqo+yibVS2yOU=)
                          2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d8:1a:10:fa:2c:e1:94:94:bb:b3:cb:f7:01:36:36:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
        Validity
            Not Before: Jul  5 01:01:16 2025 GMT
            Not After : Jul  6 01:01:16 2025 GMT
        Subject: CN=d8c0f1ffe287b61b08d65e7dbaefea7194512108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:45:22:e4:11:7b:ee:9c:38:8a:c8:3b:35:6d:
                    ec:3c:26:05:16:af:50:c2:21:01:a1:62:83:35:0f:
                    a6:91:0d:eb:ed:7d:a6:6e:c3:39:bc:51:86:55:21:
                    6a:4f:ec:9d:f0:0d:ef:31:82:48:d1:86:bc:71:e0:
                    de:4c:7b:d0:02:ed:84:e5:fb:df:cb:7e:26:a6:9a:
                    45:d1:16:46:b4:42:cd:cb:a9:82:96:69:a5:8e:78:
                    ae:0d:20:83:d5:a8:15:9a:fd:99:77:50:35:b5:c4:
                    35:07:e8:a1:40:f5:d6:2e:19:b1:54:7d:cc:f0:ec:
                    29:49:be:ee:0c:f2:96:98:ed:d3:18:6b:df:15:f9:
                    d0:5b:4a:83:00:f9:a9:ce:b0:aa:9c:91:be:6c:24:
                    59:73:09:56:6c:13:8e:81:0f:66:6c:4e:bd:18:bc:
                    c8:de:b6:3d:f8:c9:07:62:ad:7d:c7:33:07:2e:df:
                    3a:fb:65:bf:26:b9:83:ac:ca:b3:6d:e5:82:68:b6:
                    5b:0f:8a:4f:fb:94:7b:6c:fc:81:60:bf:27:1e:de:
                    52:be:3c:92:31:e3:19:72:7c:96:82:b1:9e:b2:9f:
                    2f:4f:ba:13:40:c5:0d:bb:97:df:e0:c9:16:28:93:
                    8f:29:e2:3a:f1:11:da:c0:4e:75:6b:c9:91:22:1f:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C0:F1:FF:E2:87:B6:1B:08:D6:5E:7D:BA:EF:EA:71:94:51:21:08
            X509v3 Authority Key Identifier:
                keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:7a:37:f3:2f:e6:74:b0:e0:da:05:1e:d6:0b:2c:7e:28:
         06:d2:83:91:56:bf:bf:d1:88:67:61:19:25:86:37:ed:d9:32:
         4b:44:76:4c:f5:9e:89:1e:8e:dc:bb:99:4c:03:64:19:fe:53:
         35:f1:e1:e9:9b:bf:f0:f0:b2:6d:a4:20:8e:94:55:96:b3:a6:
         0f:c3:15:6e:dc:5c:bb:d3:7b:d2:07:e7:53:b0:9f:dc:fd:dc:
         7e:5a:02:da:c1:e7:7c:d1:fb:57:b3:7c:3e:a8:ed:17:f0:a1:
         f3:c7:dd:64:dd:86:8b:52:28:f5:49:a1:cc:ef:be:91:23:20:
         b7:c4:32:46:94:ee:30:fa:fc:9c:ad:28:05:cf:ca:e7:c4:be:
         ff:f9:ce:c8:dc:22:35:5c:83:0c:50:f3:19:3b:1e:26:bd:a6:
         18:1e:12:98:77:60:a1:13:d9:a0:39:b7:c4:ae:ee:68:e2:87:
         47:ae:9c:88:55:16:84:d0:2e:57:f6:62:54:7d:46:28:95:fb:
         76:e6:7b:8a:2e:a7:bc:a0:fe:43:51:7d:c0:7d:be:19:7e:37:
         2f:cf:c5:89:f7:a4:b6:5a:ff:2c:92:b5:ca:00:c8:54:ca:34:
         ee:6f:0c:6d:ea:f1:27:52:0c:d9:5e:a6:86:60:7d:ed:1f:98:
         bd:de:6b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:16:08 2025 by rpki-client