Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
File:                     fi3yT4V3zASMPHn7jbFIPnt14l0.mft (raw, json)
Hash identifier:          DFvGFDpDkdzaQ4NYh/GyX7RseYRnD7oxu4a4BoL1qH8=
Subject key identifier:   B8:71:1A:E2:93:86:A7:BF:21:FA:30:35:56:AF:68:01:C4:6B:2B:CF
Authority key identifier: 7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
Certificate issuer:       /CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Certificate serial:       01974DE97B4DC01625F2A5B3029DB95CDCF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
Manifest number:          07
Signing time:             Sun 08 Jun 2025 05:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:36 +0000
Files and hashes:         1: fi3yT4V3zASMPHn7jbFIPnt14l0.crl (hash: Uk9KshHac5a2va27XGjHuohkRsRmoMi1qu3Wgnehl2A=)
                          2: hyvVkmYmp_Y-JQm2DlccYLeH864.roa (hash: VaFEZ5cWbIO/7jTIbMlqrCVV+YCmqTrdOrKl1z8IWMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:7b:4d:c0:16:25:f2:a5:b3:02:9d:b9:5c:dc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
        Validity
            Not Before: Jun  8 05:00:36 2025 GMT
            Not After : Jun  9 05:00:36 2025 GMT
        Subject: CN=b8711ae29386a7bf21fa303556af6801c46b2bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:7a:56:db:27:97:76:65:ad:66:cc:82:f8:
                    c6:9c:d7:46:c0:76:71:80:91:a0:f9:78:d0:6c:44:
                    dc:99:5b:60:21:77:d3:6e:76:21:5e:0a:a0:d2:ad:
                    03:b8:03:90:d6:3e:ac:ba:be:65:52:27:41:31:eb:
                    c6:9b:ae:df:68:25:f3:61:e2:76:ef:19:7b:ae:e3:
                    1b:5d:f5:ce:c9:8b:74:0f:57:0e:b7:a1:33:02:3a:
                    5f:84:2d:e2:eb:8b:cf:09:a5:c0:cd:b3:2d:54:d2:
                    b6:fa:1e:6a:d7:c6:1b:3b:01:f2:5f:d5:77:f9:fc:
                    d8:d9:1d:97:d0:64:0d:01:52:b0:48:1b:6c:75:3c:
                    ca:97:f1:d0:0c:11:be:6e:2d:13:85:4b:b5:a3:a6:
                    7c:8b:11:4a:f0:3c:e0:d3:62:58:9d:a2:20:6b:59:
                    9a:2e:fd:79:e7:39:90:82:cb:c4:b6:02:16:07:69:
                    b6:c9:69:47:b6:9f:bd:08:c5:21:7f:85:74:a1:93:
                    33:a9:aa:f1:be:be:79:f0:fb:e3:7b:8d:00:ca:63:
                    53:e5:78:1b:d2:ba:5c:49:ed:f3:2c:be:78:16:4c:
                    7a:28:3c:ac:8e:0f:85:2f:cd:94:31:66:c5:c6:8b:
                    3b:55:77:2d:26:69:0e:08:fb:0a:39:27:91:26:99:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:71:1A:E2:93:86:A7:BF:21:FA:30:35:56:AF:68:01:C4:6B:2B:CF
            X509v3 Authority Key Identifier:
                keyid:7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:36:b0:fd:5b:06:d3:54:97:a0:1a:fc:1f:20:08:ea:83:
         cb:62:33:01:64:db:1a:1b:b5:e1:f0:d1:78:94:6f:8c:31:66:
         08:13:8c:8a:2e:a9:4b:ed:48:41:ef:27:e1:37:14:a8:50:00:
         c5:fa:87:ba:7b:ab:f2:2c:46:a1:30:e9:73:4c:ff:e7:35:27:
         89:4d:f6:8c:34:8f:e6:bd:ee:cb:c3:6f:77:98:ed:9a:0d:e7:
         82:20:96:c6:f1:3d:e2:bb:32:16:64:05:ac:41:c1:41:33:de:
         d1:74:7c:ab:bd:d2:9a:81:eb:34:7e:a6:6b:84:2a:7f:54:fa:
         41:10:d0:14:b4:b8:65:c2:7c:21:88:bf:41:e9:1a:2a:43:21:
         12:4e:46:4d:d2:50:81:80:32:dc:70:3a:df:c7:4b:b0:ea:b0:
         70:8a:e4:f3:54:2f:af:32:60:5b:b2:7e:39:38:0f:58:17:6d:
         fb:6c:0a:54:a5:af:fa:fe:e1:fb:0a:a7:b9:bc:9d:72:01:11:
         00:22:d1:df:c2:dc:c6:9b:7a:df:1a:fe:3e:e9:ce:03:c3:33:
         c2:98:b0:8e:eb:c8:40:50:c4:5a:8c:d6:c6:ac:61:9b:fb:e6:
         d1:23:d5:2d:9e:66:73:40:be:01:a5:c5:ec:e2:8f:7b:6e:16:
         08:a6:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:11:26 2025 by rpki-client