Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File:                     p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier:          yJ2t04RLCNsbdT2P1VqQRDomYY2b0pmrhvo9Nwo37TE=
Subject key identifier:   29:E5:12:AB:8E:6E:32:6F:F7:69:94:94:05:BA:3B:70:20:55:DA:C8
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer:       /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial:       019747B0CFBC0C3910A8C74CE0108704092D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number:          04E7
Signing time:             Sat 07 Jun 2025 00:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:59 +0000
Files and hashes:         1: EnZTRjVsyeH5YvN_IXdrjMInto8.roa (hash: dGNdfgQT3ZLKhZ/v9I6RHyrRDvkswkwt2I+OFKs6hJw=)
                          2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: 9s5Nt6eHmwUF4zmhH7JYrk+iSMMfjc53lM/dHNt8hKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:cf:bc:0c:39:10:a8:c7:4c:e0:10:87:04:09:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
        Validity
            Not Before: Jun  7 00:00:59 2025 GMT
            Not After : Jun  8 00:00:59 2025 GMT
        Subject: CN=29e512ab8e6e326ff769949405ba3b702055dac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:ed:be:80:a6:8d:3f:7f:19:b4:b2:29:1d:
                    af:e3:20:be:0d:76:e2:1a:2d:31:20:9e:02:66:d3:
                    bc:fa:05:34:41:7f:ec:8d:8a:29:d2:ce:c1:6b:8b:
                    5b:6a:18:0f:51:6d:41:48:2a:1d:06:10:ea:5c:89:
                    06:2e:72:ad:15:7d:1c:d6:27:4c:1b:1b:8b:78:15:
                    8f:ec:d5:57:b4:e1:39:e3:40:98:db:a1:46:6c:c6:
                    54:c1:b2:30:50:d8:2f:3f:8e:d4:77:16:62:bd:0c:
                    7c:ab:f4:36:34:d9:a4:38:1e:fb:64:68:7f:58:48:
                    bc:5a:a3:b3:03:c7:0f:44:37:6c:86:31:15:82:7c:
                    8f:fd:7f:08:71:e5:db:67:b7:0f:89:eb:fd:23:85:
                    8f:6e:dd:58:e2:9c:04:fb:b4:8e:e2:32:8c:ea:ac:
                    f7:2f:ba:f3:a9:34:9d:36:e7:51:eb:7a:c2:ad:22:
                    e5:97:ff:7e:a1:78:58:59:7b:8a:14:26:68:79:44:
                    77:e4:ca:98:44:6e:1d:50:44:11:32:48:d9:bd:95:
                    89:7b:4a:c2:79:4d:66:6c:c9:1b:d0:3a:75:2f:8c:
                    62:78:f8:ae:61:e0:3b:00:e2:21:d9:04:0a:9a:63:
                    81:4a:3a:b2:44:a2:79:db:5f:9d:df:2f:42:cd:12:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E5:12:AB:8E:6E:32:6F:F7:69:94:94:05:BA:3B:70:20:55:DA:C8
            X509v3 Authority Key Identifier:
                keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d3:67:e4:c9:0e:b8:07:a7:be:8f:a7:66:51:58:81:94:7d:
         d1:f0:1d:c7:94:98:50:74:04:ef:53:63:8e:a1:8a:db:1b:1b:
         21:01:d9:1d:3b:88:d7:b6:20:a3:af:33:17:fd:e1:22:6d:3f:
         4f:d7:18:09:c9:e7:31:e0:3d:c3:95:13:83:f3:63:43:56:d4:
         b7:8a:15:17:b6:47:39:61:83:9e:96:35:08:43:be:43:c1:49:
         8e:51:db:b7:41:e1:14:40:cf:72:55:0d:02:d1:d0:64:5c:32:
         89:6e:65:80:37:79:aa:25:b2:be:51:76:b0:c5:1d:81:11:55:
         4e:eb:19:bc:45:a3:dd:0b:6a:23:9a:08:04:17:eb:9e:82:09:
         d9:50:c1:7e:9c:50:b1:b9:e7:36:4a:d6:b6:26:76:ae:a8:6f:
         6b:60:a3:40:cd:e0:d2:f2:4b:f2:d8:33:81:61:9f:bc:3e:48:
         68:bc:98:d7:e8:29:62:04:af:ab:ae:d9:3f:cf:49:93:ab:24:
         82:8f:c5:5c:20:33:c7:8b:0b:61:76:e9:4e:62:c4:c3:d0:6e:
         9e:f4:8f:3f:7a:a8:0e:b1:61:ce:1d:10:08:bd:a3:41:d6:54:
         b8:3f:22:9f:97:81:a5:b0:ad:0e:48:dc:d4:b2:77:80:34:d9:
         14:57:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:31 2025 by rpki-client