Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File:                     Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier:          zIUh2ePaYAILgFxPrhJFX5RHmpuhedLeSIoJHLooh04=
Subject key identifier:   60:9D:FC:DB:42:A9:43:35:0F:61:3C:79:3F:3E:27:F1:46:87:71:0A
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       01975E6F3C1725A2687DB8636BDC90123D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number:          15E5
Signing time:             Wed 11 Jun 2025 10:00:37 +0000
Manifest this update:     Wed 11 Jun 2025 10:00:37 +0000
Manifest next update:     Thu 12 Jun 2025 10:00:37 +0000
Files and hashes:         1: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
                          2: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
                          3: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: HLjOSg7KlhFwd2GuT3mn9xQDbfx2KuNS3U5vmPryHWs=)
                          4: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
                          5: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
                          6: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
                          7: uOMM6E0bjpo9Z4Gp-nfqUv0VaVQ.roa (hash: B3I+niBmd/S5k5XR2KwNvCK0s1V+GTyHX32C34m4UZc=)
                          8: utyHAEFwJnyFPJNvun5WhnSWaes.roa (hash: 6wOcZjzxIP7txWQ7ykuvtlJ7+2Z7YXGjpvL74E0vFA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:6f:3c:17:25:a2:68:7d:b8:63:6b:dc:90:12:3d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Jun 11 10:00:37 2025 GMT
            Not After : Jun 12 10:00:37 2025 GMT
        Subject: CN=609dfcdb42a943350f613c793f3e27f14687710a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:7c:52:3b:db:6d:5d:04:21:b2:ff:d7:17:
                    39:0e:67:53:3c:7e:05:ca:49:4b:73:33:e3:b5:4b:
                    d2:e2:55:20:b2:b8:cd:be:98:07:a9:eb:e7:83:fc:
                    f9:5c:76:93:24:32:61:40:5c:f9:b9:0a:8c:0d:a7:
                    84:9e:23:13:5c:fc:43:75:c5:57:ec:b0:71:d1:df:
                    5b:60:e9:9b:5a:49:41:98:34:79:f7:93:b0:03:05:
                    73:95:e9:4c:41:1b:ee:9c:17:1e:21:f2:05:5b:91:
                    b8:af:a5:21:43:76:79:07:b8:a4:36:78:73:30:c6:
                    64:6c:4c:ad:de:6a:af:83:34:60:55:d8:bd:b6:bd:
                    c3:c9:5e:92:8a:52:10:bd:47:6c:1c:6d:06:90:55:
                    87:96:ab:e8:2e:c3:56:53:b8:7c:fe:ef:60:f6:62:
                    d2:dc:83:12:74:0c:55:f0:ff:53:b4:f3:74:32:ca:
                    d2:a3:6b:5c:cd:47:df:bc:05:12:42:2b:b0:e4:ec:
                    70:74:49:e0:44:75:ee:61:58:f5:18:6f:ea:a4:cc:
                    dc:ba:f2:61:9d:42:94:26:52:a8:4e:02:18:02:7c:
                    f9:e4:96:36:07:d6:a6:e1:de:bb:5e:42:b9:34:ba:
                    1e:01:46:9a:75:04:21:d8:cd:f6:23:e1:6a:92:8d:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9D:FC:DB:42:A9:43:35:0F:61:3C:79:3F:3E:27:F1:46:87:71:0A
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:3c:61:63:95:8d:60:db:30:1f:e1:1c:1c:ba:ac:3a:28:
         62:6a:9b:37:d5:aa:3d:02:f2:d6:48:55:3e:35:2a:09:64:d5:
         ca:75:9d:2d:1b:b5:fb:d6:36:33:ca:c5:b1:ee:e2:39:6d:65:
         a6:42:d0:f1:88:62:aa:ae:fb:12:b2:27:fd:97:87:f1:37:c1:
         d1:c1:5c:43:e2:cf:46:e2:86:e1:64:69:85:6b:54:f3:09:3e:
         9c:14:18:aa:ba:96:c3:a4:00:fb:82:57:d3:72:71:e2:f5:f4:
         25:71:22:26:c5:d7:6c:76:7f:bd:9e:47:f9:22:8c:e5:f5:8b:
         45:28:71:e3:42:c0:4f:f7:4c:c5:10:6c:96:4c:51:59:2d:11:
         52:7d:9f:f3:a9:6c:04:d0:22:e4:21:08:16:d9:9c:5b:05:99:
         03:25:d6:ac:c4:96:ea:15:7a:b4:21:1f:d5:75:6d:db:fe:14:
         b0:67:19:65:21:1c:07:f3:3a:b0:16:92:48:bf:2a:c8:a7:8e:
         3a:23:f4:7f:80:74:ed:13:10:b4:bf:0b:1f:45:a7:f5:2a:0b:
         84:1f:77:4a:4b:9f:a2:90:71:a1:10:e5:01:8e:f6:d6:1b:7c:
         d0:16:09:6f:c6:7d:09:37:ea:92:e9:73:c5:89:dc:cd:27:40:
         a2:0c:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:34 2025 by rpki-client