Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
File:                     7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json)
Hash identifier:          I1uY1FEyZPGgqduGk/RH4QTASt66LsvU2rZlKDQC4yc=
Subject key identifier:   F5:40:EA:9B:41:E8:F0:0B:F0:FC:93:52:B2:97:52:06:F8:9B:68:81
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Certificate issuer:       /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial:       01976D06E08670E5821581D4F5B7F1B4EE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
Manifest number:          03EA
Signing time:             Sat 14 Jun 2025 06:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:56 +0000
Files and hashes:         1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: xZXTrahlOvuD7piZnhbHckEh5qmLSWm6pfUz25bM9/U=)
                          2: kMswko4ElKY06SDhGpfueJq34D8.roa (hash: kJ3gz3NOtbD3WpAXsJWsntX+DKlol8R3qkfnxa7rQtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:e0:86:70:e5:82:15:81:d4:f5:b7:f1:b4:ee:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
        Validity
            Not Before: Jun 14 06:00:56 2025 GMT
            Not After : Jun 15 06:00:56 2025 GMT
        Subject: CN=f540ea9b41e8f00bf0fc9352b2975206f89b6881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:bd:ae:f0:2f:83:42:03:34:23:40:e9:bb:
                    a3:9d:e1:85:91:3c:11:0e:44:ac:18:b0:cd:49:05:
                    a6:0c:fc:25:5c:93:d0:fc:af:56:b5:10:92:81:be:
                    48:c3:59:4e:b7:77:c2:ef:0a:0b:75:9f:61:0b:80:
                    c6:42:b6:d5:3f:a5:72:9e:aa:9c:b5:af:bc:97:fe:
                    87:89:e3:73:58:c9:b4:29:9b:b8:ab:94:93:b5:07:
                    9d:22:76:22:4b:3f:10:0c:fc:13:b2:01:15:d1:d2:
                    0c:e8:f7:e4:13:e2:e0:bb:a7:cd:b6:c5:e8:2f:8f:
                    c3:2c:fe:81:b6:62:5e:91:48:7b:10:ff:cc:1b:42:
                    45:b9:e9:a6:11:c3:26:5f:c3:b8:e4:eb:54:57:d4:
                    42:db:7a:36:ab:45:bb:68:0f:e6:fa:fc:16:ee:4e:
                    8b:c8:fb:52:82:8f:7e:7c:c7:c7:55:3c:ae:4e:22:
                    a2:48:91:c5:8c:fe:a0:97:6f:80:ba:7d:78:77:06:
                    02:d2:f5:67:68:73:56:b9:fc:12:85:ef:65:82:f4:
                    29:34:2d:4a:1d:63:ab:a5:e0:38:0b:ef:48:b0:e3:
                    a2:e5:79:1f:e2:b7:b8:c4:84:fc:3e:12:09:05:8e:
                    89:de:52:c0:05:74:04:a2:26:85:ec:d4:57:c0:7f:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:40:EA:9B:41:E8:F0:0B:F0:FC:93:52:B2:97:52:06:F8:9B:68:81
            X509v3 Authority Key Identifier:
                keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d4:24:a4:0e:30:08:5a:18:ef:9c:66:88:de:b4:39:9f:fe:
         9d:e7:55:31:e4:87:18:20:45:39:aa:5d:46:d3:4a:01:ce:5b:
         13:dd:dc:5b:aa:ed:7d:31:df:a6:17:c9:72:4e:3e:22:3d:d4:
         72:a2:d4:b4:39:6a:62:d4:a0:07:66:c4:f8:99:ef:e3:3c:e0:
         ac:1d:b9:bc:8e:b9:9c:f3:84:18:e5:eb:64:46:9f:60:f6:45:
         2e:9c:15:dd:e9:d4:fb:93:9f:44:51:db:3c:d7:3b:52:de:f4:
         73:8d:26:b5:50:c7:5b:7c:d2:19:ae:5e:dc:60:b0:cf:c5:e7:
         31:8a:07:09:4b:de:c6:8a:64:4b:5b:de:20:cb:ec:24:ff:52:
         17:39:9c:c4:cf:08:c1:84:81:86:86:dc:3d:c9:02:9a:4c:44:
         c4:79:93:df:3e:13:ff:94:3d:38:75:89:a4:7b:3b:1c:1e:c7:
         97:68:bb:23:1a:f4:24:ff:ed:30:48:b3:09:57:b1:ca:50:38:
         cf:45:d4:de:d9:a0:36:6e:69:4e:77:92:af:b7:f8:dd:c6:f4:
         c5:b0:f8:18:91:82:79:71:83:3c:eb:e6:c5:4e:af:fa:3a:53:
         0c:37:0b:81:8a:61:77:ab:f4:31:18:f5:ad:12:86:6f:a1:df:
         be:32:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:33:39 2025 by rpki-client