Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File:                     erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier:          36UGAWyfr79lRL7lz28sVAWvp0GHEFW7/UtXQ/JrFuk=
Subject key identifier:   6F:F7:0C:04:4D:59:BA:CE:55:E3:66:4A:93:6C:65:1A:A4:4D:3C:7D
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer:       /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial:       01974FA106AECFA77F0BF597948E7B8518C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number:          102B
Signing time:             Sun 08 Jun 2025 13:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:42 +0000
Files and hashes:         1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: m2CVKKTc6fxZ913+fhsvWftUAs0qPzzbfep5acAjbCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a1:06:ae:cf:a7:7f:0b:f5:97:94:8e:7b:85:18:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
        Validity
            Not Before: Jun  8 13:00:42 2025 GMT
            Not After : Jun  9 13:00:42 2025 GMT
        Subject: CN=6ff70c044d59bace55e3664a936c651aa44d3c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:cd:e1:29:9f:80:51:95:09:5b:72:b3:f6:
                    5a:d1:f7:52:cd:98:5c:7a:f7:6f:d1:9d:67:f6:51:
                    0e:f8:ea:6b:24:96:db:0e:40:8d:05:9b:d6:6e:9b:
                    f6:6e:f6:3c:90:3f:0c:78:17:f4:b0:b0:0e:62:d4:
                    f1:98:d4:36:fe:59:4e:d5:38:25:b8:16:10:a9:df:
                    6a:20:33:5c:56:50:f0:76:be:b6:59:80:23:e1:46:
                    6b:25:d7:60:b3:a0:ef:7d:5e:35:bf:36:69:b4:29:
                    cb:36:b8:22:99:fa:4d:5a:e9:21:52:18:62:ef:30:
                    7b:ed:74:61:2d:3b:5b:ab:60:b8:99:06:2c:5e:07:
                    1b:f7:c6:61:a3:53:6a:99:29:05:c2:27:cc:29:24:
                    17:e3:7f:58:ac:5b:6c:88:ff:e2:69:9b:02:fe:58:
                    c1:a3:ce:20:1d:fa:af:f6:0c:4e:34:c3:8f:41:04:
                    57:fe:04:24:e8:75:60:b4:ca:e9:5a:c8:9e:b2:16:
                    86:d3:6c:4d:de:8f:7a:4c:ca:3c:8f:12:c8:2e:8f:
                    23:aa:52:3b:f7:e3:01:a5:10:db:6b:af:09:1e:43:
                    52:a5:5f:d3:42:7d:ef:ee:87:e6:9a:0a:c6:96:dd:
                    69:c5:cd:fa:3a:2c:b4:cc:46:05:d3:37:4a:91:53:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F7:0C:04:4D:59:BA:CE:55:E3:66:4A:93:6C:65:1A:A4:4D:3C:7D
            X509v3 Authority Key Identifier:
                keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:cc:4c:e8:5e:44:ff:71:71:9b:0b:33:c4:a7:42:ca:63:
         5c:59:0c:b1:69:fd:9f:20:f3:af:9b:ff:e8:a0:ea:44:66:58:
         13:85:a1:ef:b2:74:73:6d:94:af:8d:82:85:10:30:ad:9d:bb:
         33:39:6b:ab:fd:e5:c0:3f:0a:18:8c:53:f6:42:bb:0d:e0:c1:
         e4:1d:89:78:1d:17:7b:d1:e4:96:b7:75:2d:f9:e8:51:8c:bb:
         da:bc:74:51:71:95:d6:89:8d:2f:9c:db:42:7e:e5:a2:b2:ef:
         05:fd:9c:56:01:5a:ba:55:46:80:af:b9:5e:bb:ea:b7:a3:39:
         b8:f4:ba:a1:f4:5a:5b:42:5b:1b:bc:1f:32:d8:b6:65:62:9d:
         93:e0:dc:18:cd:f4:f9:f0:fb:2f:10:32:8e:bf:5c:2b:05:cd:
         71:cb:ca:45:a8:c1:dd:66:9a:4c:a0:25:3f:1c:19:3f:c4:d5:
         3c:fa:12:b2:9d:61:89:f7:3a:ab:82:4f:21:a5:6e:1c:ab:74:
         66:c1:96:ac:dc:52:17:1f:ef:a5:10:0a:2c:82:20:a3:08:78:
         c7:ec:4e:26:06:b5:12:b7:33:6e:92:e4:d6:af:5c:11:bb:89:
         fe:a7:a6:34:d7:4c:ab:9d:03:5a:e3:1f:6c:ea:44:04:9a:3b:
         a2:76:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:06:05 2025 by rpki-client