Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File:                     7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier:          GY1dS+x67DjUbmnsydESJrkKSH5TqtJsQXp9L7A76ac=
Subject key identifier:   DA:D3:32:F1:4C:84:5E:6D:1E:40:F1:EA:D8:E3:95:AB:60:EB:78:48
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer:       /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial:       0197470B6EDC71752EB245C4CA508497FA5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number:          0431
Signing time:             Fri 06 Jun 2025 21:00:20 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:20 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:20 +0000
Files and hashes:         1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: d1zxSBS+4yDSzr/s8hutvpF5B8lozsbfbuDBKOc/O7M=)
                          2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:6e:dc:71:75:2e:b2:45:c4:ca:50:84:97:fa:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
        Validity
            Not Before: Jun  6 21:00:20 2025 GMT
            Not After : Jun  7 21:00:20 2025 GMT
        Subject: CN=dad332f14c845e6d1e40f1ead8e395ab60eb7848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:c0:91:88:aa:bb:bc:64:86:86:bc:78:d0:
                    11:ed:64:17:65:f0:58:5e:23:c9:7c:90:29:aa:36:
                    60:de:04:cb:2b:0a:c8:3e:4d:b7:6b:ab:5a:be:f4:
                    a1:bd:06:80:0e:92:36:33:e4:2c:23:da:be:28:af:
                    6f:76:ce:3f:32:08:31:1b:8e:4d:b1:96:21:fb:cd:
                    bc:bc:9f:47:99:6d:cc:ed:05:e3:62:6d:e0:87:ec:
                    3e:fd:57:ab:40:0a:04:29:a9:60:6d:ab:bf:21:43:
                    0c:f6:33:80:6f:25:cf:13:b4:17:0a:d9:34:c8:bf:
                    f9:5c:5a:d3:11:dd:54:19:a4:24:55:1e:5e:24:6f:
                    0e:15:e1:9d:3d:18:be:2e:bb:14:13:a7:15:21:b5:
                    ba:0f:81:eb:4c:02:df:77:a9:83:bf:3a:39:b4:4f:
                    c1:71:18:e7:b0:f5:28:82:01:fe:3a:25:70:2e:50:
                    ed:7b:f5:a4:92:9c:14:b4:a4:9c:70:6f:bb:58:30:
                    11:f2:0a:18:64:c1:7e:71:2d:6a:84:2a:45:66:32:
                    85:4f:17:0f:a6:f1:2b:ca:91:1d:c7:ee:8b:e5:0b:
                    18:dd:85:a7:f3:98:cd:d1:7b:23:15:a7:d1:d4:63:
                    97:8e:d5:7a:fb:74:d7:33:c6:7f:fb:ce:33:e1:53:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D3:32:F1:4C:84:5E:6D:1E:40:F1:EA:D8:E3:95:AB:60:EB:78:48
            X509v3 Authority Key Identifier:
                keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:79:0e:7b:15:88:fd:12:a7:66:67:a3:c8:d5:c7:3e:dc:00:
         a5:5f:1a:56:ac:44:bf:e2:f2:f2:4b:d2:80:a3:3d:14:16:7b:
         b1:54:1a:76:8a:6b:7a:f4:b0:29:70:8a:8b:59:62:af:33:68:
         04:f6:13:78:8d:1d:44:43:50:42:e0:47:87:5c:2b:47:e0:9d:
         8a:00:9a:03:3f:46:4d:d1:7b:85:97:6c:51:f6:c9:82:48:1a:
         d3:47:f3:ab:ab:23:37:6a:19:f6:f7:ea:fe:2b:ca:3b:78:fc:
         2d:ce:1c:a2:32:3a:6d:a2:0f:e9:24:15:c5:88:47:4e:d4:e8:
         7b:93:62:26:c6:67:a8:81:e6:a0:db:07:37:ac:21:e6:d1:1b:
         63:2e:c3:91:38:9f:11:03:cf:1a:22:04:18:a8:ff:ae:46:ee:
         cd:b5:27:2c:4b:1f:33:19:54:72:2c:88:4e:91:15:28:3a:85:
         a9:82:d1:d6:75:c8:cf:a5:5b:b8:1f:62:eb:41:07:61:7f:23:
         91:dc:a0:38:83:89:1c:49:6d:e8:d6:4f:7c:d5:20:ce:0e:02:
         a5:88:2b:4b:84:0f:4b:f4:b9:b8:73:4f:44:f0:3f:29:7a:ca:
         e4:6b:eb:06:e4:aa:86:51:a7:82:c5:92:60:08:54:e3:b3:65:
         b5:79:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:01:35 2025 by rpki-client