Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          ivl08KRdwPEgeMXKMwirJH8ad1R/jl52JI4JsgGjgCY=
Subject key identifier:   E3:E7:6F:92:AB:7B:10:8E:C7:15:34:F3:07:42:30:24:22:DA:3D:52
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       01974EC53748C1795992AAF6FCD78D8E783C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          0DD6
Signing time:             Sun 08 Jun 2025 09:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:36 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: 4+2bLSz2GM2kXpVrVb3u5/GBzcK787oBey1svRq8Pm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:37:48:c1:79:59:92:aa:f6:fc:d7:8d:8e:78:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Jun  8 09:00:36 2025 GMT
            Not After : Jun  9 09:00:36 2025 GMT
        Subject: CN=e3e76f92ab7b108ec71534f30742302422da3d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:17:ce:e0:49:bb:e1:92:fe:05:b0:8b:8e:
                    a0:05:28:63:17:b1:b0:94:16:59:70:9a:71:4d:7c:
                    27:d6:98:53:aa:89:f0:8d:8e:0b:ce:c9:6d:d6:a3:
                    a9:a9:46:22:d5:16:61:55:5d:c4:7c:3e:79:2c:74:
                    e5:ff:e6:cb:8f:0e:ac:ce:7e:3c:74:ab:03:a7:a1:
                    c7:3b:57:a2:79:73:1f:0d:64:05:c8:3b:f3:3a:99:
                    f9:88:f5:9d:61:a8:54:ed:f1:fe:f1:c2:49:48:5b:
                    52:94:66:6b:ba:aa:4b:cc:ac:dc:00:fb:8d:0d:25:
                    17:9b:88:40:41:b0:e4:92:e0:90:b7:d4:55:67:68:
                    87:3a:d6:45:77:4b:69:33:d6:2d:4a:d5:f4:a8:8a:
                    3f:6a:6e:35:c2:46:4c:7c:8a:fa:24:04:b9:eb:cf:
                    07:8a:4f:c9:44:77:22:f9:b5:68:37:e4:5e:72:2f:
                    28:41:0b:f3:08:0a:cb:35:40:11:40:7a:f1:f9:cb:
                    dc:99:74:44:a3:80:c8:d4:cc:20:a1:1c:e2:8d:6a:
                    4b:2c:5d:77:c6:db:e9:9d:9e:e7:48:f6:a3:29:05:
                    1b:12:e9:73:33:a4:2a:af:64:da:2d:8b:ca:16:f4:
                    14:6e:62:01:78:28:42:5b:76:f3:26:53:f8:e0:b6:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E7:6F:92:AB:7B:10:8E:C7:15:34:F3:07:42:30:24:22:DA:3D:52
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:45:64:e7:e1:b0:b5:a7:03:0a:f1:f7:43:d9:36:05:f5:
         02:50:c0:47:f7:bd:6d:ab:32:0b:e4:c3:a9:18:37:68:87:a2:
         d7:94:b5:db:d6:9a:74:a8:06:62:9c:06:47:ac:8c:eb:87:ea:
         b1:66:25:58:0c:bb:a8:a1:86:19:18:44:4d:99:9e:ff:5a:59:
         02:e8:87:52:7d:fb:16:9f:d1:ed:f6:47:ca:36:d0:36:b3:c9:
         00:0a:d2:72:8c:88:ac:30:0f:84:9b:26:63:4c:c1:4d:57:90:
         25:37:41:2a:38:b9:26:99:27:c1:0c:d2:96:e9:fa:4e:b3:ef:
         cc:b9:a6:a3:de:35:51:b1:12:1d:62:5f:dd:e7:c5:b8:d2:3f:
         82:12:b1:01:10:22:1b:a9:7b:66:2b:5a:1c:0f:53:80:44:4e:
         26:9a:dd:19:2d:15:1d:6b:2a:5a:d9:99:29:73:3d:84:7a:8b:
         04:04:72:c1:7a:58:05:ec:76:8a:fc:eb:f2:1f:03:5d:79:43:
         9d:0c:27:44:18:0d:c9:28:2c:7e:b9:0a:f8:59:85:22:a6:50:
         12:1a:47:cf:5b:89:93:a4:95:1a:c0:96:82:b9:0d:45:9e:3e:
         a9:f4:79:f0:69:3f:c3:59:46:62:a1:29:06:80:7e:e4:e8:52:
         09:e7:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:54:40 2025 by rpki-client