Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          SJPGQ0qrMcSKJGryJaxSzWfOY4QRmOsB/4aQ6UJXbz4=
Subject key identifier:   1A:36:E3:88:D2:83:B6:05:4E:6A:0E:EE:4F:0B:72:DC:48:E1:D6:7F
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       0197C19248F1BB804B78495F787A047AE1BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          15CB
Signing time:             Mon 30 Jun 2025 16:01:18 +0000
Manifest this update:     Mon 30 Jun 2025 16:01:18 +0000
Manifest next update:     Tue 01 Jul 2025 16:01:18 +0000
Files and hashes:         1: 0UNxLFiNDnM7JAFQJgASYQsaA6g.roa (hash: yeNDFn94twaWZPqm9gsLvpXQ7L9cVI5aXIkqJKLoX5M=)
                          2: 1xdn8NiVRswlc4uk1WDeK_RiIBI.roa (hash: q1iCF9iJIPjwrPQXtH4xaMoQe7AL1oF2LyzhxGkgni4=)
                          3: Am8JOUS_pv4aGyonpJm3aY43kFA.roa (hash: hel/WsPbSFwbb5JTEfjY35Y4+JW18MVGcJtVTdlc80w=)
                          4: C3FHaTVyQ086WMPBag3rQPfajw8.roa (hash: f/oNhKigKco9tBiGw31uoIotXboAy39S9i+k1rCBUzQ=)
                          5: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: +srqSPjpZkQMP/GseBUXxXs6BMAQfxLclkKUkRfY6DA=)
                          6: Nh1ckidMNKlHTaQDjmBWaD_RTqU.roa (hash: HGI9KzkrMn/Mgs6qOK3BC5AOQs+VrhmYJ0sTwXf2f0M=)
                          7: W4wf-OAMEK-73Ed6RT7ypN5sr-k.roa (hash: IJZ4wsFpXNgYN94omFfW/OOG2yIoCFkgqtOfLsCQRvA=)
                          8: Wq5DUxTVl0Dm7wyA_VIMLG14k7s.roa (hash: vEG0EhUJl23XyGjHlaal+XqlIJfe5erG7/zNb/KcbuI=)
                          9: Z0sinVsrjztZdWZXyq0HAMquROw.roa (hash: 5+GjpnCGBWsr7RuL/tVtX2VueODcLobULhwbhL426U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:92:48:f1:bb:80:4b:78:49:5f:78:7a:04:7a:e1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Jun 30 16:01:18 2025 GMT
            Not After : Jul  1 16:01:18 2025 GMT
        Subject: CN=1a36e388d283b6054e6a0eee4f0b72dc48e1d67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:db:87:9c:64:48:cb:a5:c6:ff:d7:97:6c:
                    76:5c:96:f7:54:c5:13:a2:0f:dd:db:ac:2f:25:a3:
                    70:de:a7:6c:68:11:37:88:85:b9:55:47:e9:27:3d:
                    c8:36:d0:0e:0e:8e:57:9c:e8:15:4f:fa:5f:c7:b3:
                    ed:5f:15:f8:93:9b:c9:08:69:19:f3:4c:6a:7a:7a:
                    28:6a:be:4a:a4:4e:8c:3a:12:b8:e5:a1:2b:3b:cc:
                    a1:37:5e:a5:5e:f8:b1:b3:65:e8:53:d3:54:72:ca:
                    94:88:00:69:00:a3:3f:49:3d:b6:f9:0c:c5:68:89:
                    ce:04:1e:d0:33:47:f0:32:24:f4:85:0d:a0:26:a3:
                    0e:7a:0d:89:bc:12:52:eb:8e:28:46:55:ef:b9:c6:
                    1c:00:15:a0:2b:86:3e:6d:bf:c3:f4:6a:de:f0:28:
                    13:58:e4:4c:89:e1:ff:2f:9e:4b:50:52:66:21:cd:
                    e1:90:94:c7:6e:2d:39:8a:b0:d4:d4:d1:0b:9f:d9:
                    ad:4d:85:93:54:2b:10:a3:45:8a:b3:74:26:91:63:
                    93:c9:76:e8:50:48:a9:ab:43:9a:4b:d8:14:36:d0:
                    ef:cb:3c:57:96:c8:8b:42:c1:50:2a:bd:06:b2:98:
                    9d:d4:10:52:13:46:4d:15:ff:b2:89:6e:fd:ff:21:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:36:E3:88:D2:83:B6:05:4E:6A:0E:EE:4F:0B:72:DC:48:E1:D6:7F
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:29:2e:d7:f4:50:35:2a:3e:ee:76:7a:90:8b:19:ca:d8:ab:
         0a:39:70:af:56:e1:fc:04:ba:3b:75:0f:2c:b8:a6:b5:fb:97:
         ce:3a:c9:56:22:81:54:fb:82:f3:42:13:0a:74:e8:9c:96:12:
         1c:d1:04:da:3f:42:cb:7d:42:c9:2d:19:79:1c:93:d0:82:24:
         be:78:fa:95:af:3e:29:24:1a:0d:d2:52:33:fe:9a:8d:4d:2d:
         95:3a:34:2e:7b:fc:aa:90:d2:cb:35:c3:5e:0b:d7:81:d0:e2:
         24:dd:e6:c4:64:cf:fe:83:e1:85:7e:9d:95:e1:f1:49:00:1e:
         a2:12:4f:9d:a9:2e:d2:40:f9:71:8b:93:ca:e9:71:66:e6:d9:
         71:ff:bb:12:61:ca:f0:22:37:3e:62:78:d6:14:7b:44:9f:57:
         fc:3b:e4:83:bd:5c:85:03:0c:1d:cf:7f:49:06:60:dc:57:3f:
         54:6b:2c:57:28:ff:07:aa:96:86:3c:fa:85:eb:0a:8d:09:49:
         91:c3:8f:0e:17:1d:2b:33:b2:87:90:c8:b7:04:1d:e0:8e:ef:
         a6:01:71:80:1a:c9:e5:46:83:2a:d8:25:79:b7:f2:45:69:55:
         57:57:ce:bc:fc:b4:0c:2c:93:c1:ec:79:83:57:dd:38:7b:29:
         65:db:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:37:50 2025 by rpki-client