Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File:                     eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier:          svWupPL54Q4r5g8pd9x3kE9iyB07JGsXwnEuk8oXp2c=
Subject key identifier:   1D:9F:76:53:0F:FD:2E:2A:AE:39:4A:AB:0D:33:99:63:CE:7C:75:95
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer:       /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial:       01974A7B086DD1E20E8A228E7C511FF11101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number:          0E7C
Signing time:             Sat 07 Jun 2025 13:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:06 +0000
Files and hashes:         1: N0z9esTkm8sf7IqrP3Uufonx0_k.roa (hash: cRVe0pjyNnhUe4BOiczul9pweEDzxKe03iHv5OQ9WhI=)
                          2: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: imIDnpvKs+dTF99K46v0prT42DxI/IQl+ZmJk8zuxNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:08:6d:d1:e2:0e:8a:22:8e:7c:51:1f:f1:11:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
        Validity
            Not Before: Jun  7 13:01:06 2025 GMT
            Not After : Jun  8 13:01:06 2025 GMT
        Subject: CN=1d9f76530ffd2e2aae394aab0d339963ce7c7595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:c9:78:bd:8d:03:4b:90:cc:ab:58:07:32:
                    53:81:f6:92:6f:ce:e0:1d:0d:57:79:1d:57:25:8e:
                    bf:e6:18:d0:7f:d0:85:62:5e:dc:26:e9:0b:5f:9c:
                    1b:f6:05:b2:a6:69:d5:d3:d5:f0:a6:07:13:1d:15:
                    6d:d7:69:bd:08:e7:01:e6:eb:c9:8a:e1:7f:27:ce:
                    fa:4a:e9:cf:e8:b7:6c:e7:34:6d:cc:33:76:00:01:
                    97:f6:56:6d:53:f5:cd:8e:4c:b1:c6:54:6a:f9:82:
                    57:9f:15:00:e5:5e:da:b9:bd:20:4e:f2:79:80:9c:
                    b7:7a:8d:7f:cd:fd:e1:92:c7:b7:93:93:24:62:3f:
                    1d:5d:88:5f:9d:8d:b4:67:02:08:2b:68:90:6a:10:
                    8d:06:05:85:9c:ce:b2:8e:3a:e2:57:81:bb:a9:88:
                    a9:25:e9:f4:90:b0:e0:5c:9c:62:35:7f:0e:f1:bc:
                    82:1b:c0:9d:05:2f:b8:a0:02:eb:46:cc:d6:45:16:
                    53:50:51:c1:15:90:fd:9e:45:40:c3:99:c0:a9:08:
                    f0:d6:9b:82:78:54:6c:f9:51:49:4d:56:81:70:b4:
                    55:66:c6:df:cb:a6:7d:bc:04:91:06:b2:23:0d:91:
                    d7:36:aa:d0:0f:8a:ce:1b:cd:13:ca:62:5b:aa:b1:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9F:76:53:0F:FD:2E:2A:AE:39:4A:AB:0D:33:99:63:CE:7C:75:95
            X509v3 Authority Key Identifier:
                keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:27:a6:9d:49:24:49:2f:b0:3c:1e:6c:f7:03:49:79:d4:60:
         30:05:8f:6a:3b:f5:28:67:16:20:84:1a:d0:51:fd:9f:c2:02:
         b0:9b:88:d5:0c:bc:a6:2c:3e:3d:f7:43:21:ad:35:50:f9:89:
         c0:ed:89:71:b0:aa:f6:dc:15:1c:fb:6e:14:3a:f9:3b:b3:04:
         d8:a1:11:3e:da:40:4a:93:9a:11:db:cb:b0:56:06:5d:e9:1e:
         89:3d:8a:cf:98:40:9d:7e:34:c6:22:79:0a:e4:a4:5d:75:cb:
         d8:47:3b:f1:80:4d:6b:70:31:01:f3:5b:95:89:e4:66:8a:cb:
         97:24:fa:36:8d:cc:8f:8e:57:2e:ce:09:f1:f6:25:f1:ed:62:
         df:22:23:71:27:13:27:36:86:14:bb:4c:73:85:f2:e6:ef:d3:
         9b:3d:06:cb:a9:4a:1b:47:9d:02:a2:a1:40:e0:c1:6e:60:ee:
         68:79:5a:7b:c5:18:59:5b:c1:95:0e:0c:27:73:2d:7b:34:cb:
         71:6b:d1:3d:46:17:a9:ac:18:91:52:ae:ce:66:15:70:99:40:
         7b:e5:19:5f:b9:85:7c:6d:cf:7e:88:79:de:32:e1:88:ac:15:
         1c:9c:6a:e5:85:1a:ac:d8:91:29:6b:66:ed:d2:aa:a0:ca:f2:
         ef:89:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:30:11 2025 by rpki-client