Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
File:                     7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft (raw, json)
Hash identifier:          PcWEjlnSZuHtVPkJmtI1uvR0fUtk0geCg+fQzDx1kpk=
Subject key identifier:   ED:28:DE:86:F5:F1:3B:FE:0A:C2:80:CB:2D:99:1B:3B:47:1E:84:A6
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Certificate issuer:       /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial:       01975CB7A29658BF4E495F1562824E21F2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
Manifest number:          05A1
Signing time:             Wed 11 Jun 2025 02:00:27 +0000
Manifest this update:     Wed 11 Jun 2025 02:00:27 +0000
Manifest next update:     Thu 12 Jun 2025 02:00:27 +0000
Files and hashes:         1: 5klL4oJYCAWVCtSt4Aa3ZqfkGO4.roa (hash: qBVepds6Syb8DaPWB6RynfxxSA3Sp6OU8dF9D31HEW4=)
                          2: 7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl (hash: nyZmH3q1qRTcjBX2lMunsAxoNmr+qxcn8Tmthkwdi00=)
                          3: 8WMbOpSCq-43yrjp-Gue986sGls.roa (hash: lSFJ6DNUnrryZBRZ4iwSdCLZNyBNPcmv/tCrUVWgz2s=)
                          4: E6SsxrL0YU9sVh9I8GUbKrOvT1M.roa (hash: YCaqr7sid2K9NSVR3DjQ0cVKpB+Nv1AlUmt5Gzw4TLs=)
                          5: G40JELkFkjinZ7Bg4-gGMDe46ac.roa (hash: DxEJ7/YxUtp6mDjGz6vAkm+fJcRrhUMEE1ib29ZnNNg=)
                          6: dqHEZ0oARNoaVvG3IlOzVbCxw8E.roa (hash: Lu4R8BGvmtKvcPKaLg2jGVkmpU76/ij/EjZ+FuotBOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:b7:a2:96:58:bf:4e:49:5f:15:62:82:4e:21:f2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
        Validity
            Not Before: Jun 11 02:00:27 2025 GMT
            Not After : Jun 12 02:00:27 2025 GMT
        Subject: CN=ed28de86f5f13bfe0ac280cb2d991b3b471e84a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:a6:20:65:cf:9c:0f:46:7d:ce:9b:f6:d6:
                    5a:07:e4:2c:7f:d7:53:e9:24:27:55:ab:9f:d0:2a:
                    09:21:10:36:fb:f9:fa:86:28:77:67:de:6a:18:85:
                    a1:ef:1f:ec:27:fe:f7:a5:59:a0:c4:d9:97:26:37:
                    df:f5:3d:12:bb:0b:4d:a7:07:7d:5c:f0:a8:aa:31:
                    36:f8:81:53:6a:1d:63:98:84:a4:e5:97:9b:75:29:
                    f0:17:53:33:ad:86:87:65:ca:28:34:0b:eb:cb:d7:
                    d6:da:85:ab:43:30:57:39:69:df:96:8f:a7:96:2c:
                    c0:45:85:af:b7:db:77:32:42:eb:af:4b:0e:d5:87:
                    61:a6:44:d3:ff:f9:23:40:e9:00:30:27:62:ae:7c:
                    92:44:fa:37:e8:4c:23:ec:44:d8:96:7a:34:79:cf:
                    63:26:c3:51:d0:7a:c5:b9:df:f4:dd:59:e4:19:93:
                    57:b4:5c:1d:2f:34:96:7e:96:cc:54:bc:df:c9:1c:
                    da:54:ad:e0:0f:d3:6e:13:22:24:77:bb:9a:90:b5:
                    b8:ba:26:cd:40:10:5c:da:61:76:0b:74:bd:d8:cb:
                    3f:05:4a:53:3e:f1:06:ed:aa:5c:10:c7:6e:d9:06:
                    96:d7:fa:3b:6f:90:d2:72:15:a5:ff:be:7d:ef:df:
                    ce:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:28:DE:86:F5:F1:3B:FE:0A:C2:80:CB:2D:99:1B:3B:47:1E:84:A6
            X509v3 Authority Key Identifier:
                keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:06:f6:ef:c0:74:43:08:04:8a:c8:eb:2b:36:89:f0:f1:2c:
         e9:78:7a:9d:ee:49:33:35:2c:21:95:46:ac:f7:85:16:4d:a0:
         75:d0:ee:53:47:d2:e1:63:d8:92:f8:f9:bb:01:a6:42:aa:df:
         8c:c8:6b:28:c6:d3:9b:f5:f6:15:f3:30:bb:a4:52:46:c2:49:
         e4:35:34:c5:16:5f:bd:59:ef:2b:29:83:ab:35:b5:f7:43:18:
         b5:0e:68:2a:30:89:4c:c1:3d:d6:02:d0:da:da:2b:ff:db:60:
         01:6f:6d:24:6c:73:b7:03:bf:53:7c:7f:9d:e4:74:0b:66:46:
         4f:52:8d:dc:6a:06:be:e1:33:60:5f:90:85:ee:cf:81:4f:06:
         28:d0:9c:87:09:6a:19:26:a8:2b:68:35:67:4e:70:1d:65:8c:
         d2:3c:a5:11:fd:4e:07:87:b5:62:49:f0:bf:1f:08:22:05:cc:
         8e:2b:58:7f:ef:7e:87:7e:f8:71:2d:4c:fc:21:89:c1:e2:74:
         1f:1b:cd:d0:bd:36:82:88:76:f0:a8:31:71:3e:45:08:70:f0:
         d8:60:1e:f7:be:72:5b:fe:b1:04:5a:9d:c6:d1:85:dc:bd:07:
         a0:9d:bd:86:c8:69:58:37:2e:51:f6:e2:ba:c4:2f:da:36:af:
         b6:b0:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:48:14 2025 by rpki-client