Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
File:                     7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json)
Hash identifier:          2heP7jaA/qklMA4HK+yDYHkJKlM/EJ+6EhMJoX+IdGY=
Subject key identifier:   17:0C:87:C2:DF:F1:4C:49:1C:38:B7:38:AA:C1:2B:A8:50:25:05:92
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Certificate issuer:       /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial:       01976929CDF7B6CD2A84AABB4EF4C55C9286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
Manifest number:          03E8
Signing time:             Fri 13 Jun 2025 12:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:36 +0000
Files and hashes:         1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: pruZvJiqLI92xBOzsYEDfyucWPWD3iSnaRT48Ax9h64=)
                          2: kMswko4ElKY06SDhGpfueJq34D8.roa (hash: kJ3gz3NOtbD3WpAXsJWsntX+DKlol8R3qkfnxa7rQtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:cd:f7:b6:cd:2a:84:aa:bb:4e:f4:c5:5c:92:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
        Validity
            Not Before: Jun 13 12:00:36 2025 GMT
            Not After : Jun 14 12:00:36 2025 GMT
        Subject: CN=170c87c2dff14c491c38b738aac12ba850250592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:b9:68:a9:69:97:07:98:9b:23:89:23:c0:
                    0b:71:8f:4c:0e:11:fc:8b:6e:0e:65:66:3e:f7:a6:
                    2d:26:fb:a6:56:79:cb:64:2e:bf:8f:44:ed:74:43:
                    5c:56:77:82:6f:68:9c:ea:36:46:75:04:12:28:ea:
                    18:59:d6:10:62:d4:67:38:63:f8:6b:43:2e:a8:33:
                    ef:7e:86:0c:25:21:a5:f3:df:6b:1e:fe:48:f4:a1:
                    70:7d:bd:1f:e3:a5:36:cf:40:5e:42:fb:4a:24:63:
                    e8:5b:b1:13:cb:75:c0:e3:4c:fa:a9:77:cf:2c:e9:
                    c3:04:fa:9d:02:f7:fc:83:31:eb:2d:4f:46:75:45:
                    70:ad:c8:2c:b3:db:32:84:d7:d4:3f:58:bc:5f:cc:
                    77:0f:6b:af:e9:4a:02:7d:5a:ee:c5:4f:61:e2:b1:
                    e3:7e:a2:eb:6c:2c:ad:f4:5a:42:37:f8:fa:c5:8b:
                    9e:3a:75:40:f5:82:f2:a7:5b:7c:26:17:5d:2d:60:
                    63:92:2c:ce:05:51:ac:3b:7d:97:08:3b:6b:d7:1d:
                    33:e6:4f:7c:37:3d:ef:b6:81:40:e9:eb:08:97:56:
                    41:a7:d7:47:1d:b0:43:aa:5e:df:ca:06:1a:8a:90:
                    b0:fe:64:45:b5:c1:14:da:13:84:f1:10:c2:95:91:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0C:87:C2:DF:F1:4C:49:1C:38:B7:38:AA:C1:2B:A8:50:25:05:92
            X509v3 Authority Key Identifier:
                keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:80:0d:6d:dc:b3:6f:ea:2e:46:a8:dc:e3:75:40:cd:d7:40:
         8f:91:77:d0:df:56:49:fe:9f:bc:2d:df:aa:56:af:91:35:97:
         67:27:ac:02:42:81:f0:45:df:7e:d9:0f:ee:81:b2:f9:64:1c:
         20:f6:d2:b4:16:ec:5f:75:b7:53:e9:68:a9:ef:86:e3:7d:d2:
         b7:d4:60:3f:63:85:32:31:f4:09:fd:42:00:96:5b:43:81:9c:
         2b:b4:dd:51:24:2b:44:80:6f:59:40:c7:2d:08:a9:b1:f7:cc:
         30:cc:29:3c:80:36:e6:40:e4:d6:2d:bd:40:49:35:3b:85:8a:
         0c:b1:47:48:e5:75:df:67:23:48:8e:45:24:ea:b3:6c:8d:b0:
         ed:18:a1:ee:cd:e4:98:af:21:2a:c0:ad:57:39:0a:00:84:53:
         fd:b0:4f:69:50:d4:09:47:03:42:f8:f3:be:82:15:69:0f:10:
         0c:e6:aa:32:25:07:44:4b:5c:a1:4b:0b:ab:be:89:07:78:79:
         c7:76:64:ef:cb:e9:15:77:6f:05:04:25:86:d3:e7:57:9d:d0:
         64:2e:51:aa:04:12:af:ab:d9:e5:77:5f:3b:ef:9c:04:fe:ea:
         0d:ae:46:48:c1:89:18:75:61:56:b5:6e:06:ab:dc:de:f7:15:
         f3:31:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:08:35 2025 by rpki-client