Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          8UL/vmxuA6MECdf0bBaZ19qBShBErVJhwwwJs2/xWJM=
Subject key identifier:   A7:E1:88:60:BA:67:44:62:61:ED:2E:C1:37:20:58:EF:B3:BE:32:1F
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       01974B5611C2C9B7969FAB46E33C00F69EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          0F3B
Signing time:             Sat 07 Jun 2025 17:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:21 +0000
Files and hashes:         1: 1J3XFfkD_kgt0cIOeJk8XXDDsy8.roa (hash: AP/u0xAGOiTwGCk0a0xRx1BeOTsEHzjmgZ5lrGRtErA=)
                          2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: 2/ayIGBfXOgsqlABGKvzZwz49Zs7j5pYpO+eOe10vpI=)
                          3: V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (hash: WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=)
                          4: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (hash: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:11:c2:c9:b7:96:9f:ab:46:e3:3c:00:f6:9e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Jun  7 17:00:21 2025 GMT
            Not After : Jun  8 17:00:21 2025 GMT
        Subject: CN=a7e18860ba67446261ed2ec1372058efb3be321f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:47:c8:f2:96:17:79:7e:10:c5:90:2a:a7:
                    9a:f5:57:68:d6:8d:4f:06:20:eb:76:28:b1:d1:c0:
                    12:46:c9:be:5d:94:15:ad:f6:26:75:bf:2e:36:05:
                    ec:83:f7:aa:33:a2:c7:ea:7b:68:c9:b6:c6:8b:a0:
                    59:9d:e2:fb:8a:bc:60:10:66:b7:5a:f5:5f:df:89:
                    b3:e5:50:0b:6f:0a:85:d9:58:f9:53:47:f2:b5:52:
                    2c:b4:c4:68:0f:e5:8d:55:13:02:3a:11:8d:47:5e:
                    4c:c3:95:42:1a:53:95:05:ae:a8:d9:79:36:09:61:
                    23:73:c3:0a:bd:82:c3:bd:a2:9d:63:a8:89:39:a2:
                    ae:a5:5d:e8:b7:95:26:58:9e:f1:3c:1c:b8:37:db:
                    a6:77:9f:ae:f2:7e:57:1a:a0:4b:4b:63:c8:53:37:
                    30:a5:29:f2:ac:48:10:0a:6c:14:df:17:e4:71:96:
                    f9:87:d9:f8:17:30:e2:d5:ab:9a:f5:bd:c9:1a:01:
                    f8:a8:fc:49:42:25:ae:63:b3:f6:5d:09:73:c3:b0:
                    c1:af:fa:d1:cc:54:02:28:73:25:28:a5:ea:7e:bd:
                    b7:47:b2:4a:f9:54:f5:9c:14:82:ac:21:f9:88:b2:
                    af:25:19:3a:00:18:40:c5:52:1b:a0:fb:72:16:07:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E1:88:60:BA:67:44:62:61:ED:2E:C1:37:20:58:EF:B3:BE:32:1F
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:44:ed:b9:89:04:39:ca:24:29:8c:c5:a3:20:6c:c2:cb:c2:
         9a:33:16:66:4b:81:e4:cf:85:e0:4e:d9:0d:59:53:80:23:54:
         6c:5f:19:f8:26:85:27:fa:7a:71:e1:1d:f4:73:a3:49:0f:92:
         71:24:e8:5b:80:77:29:2f:aa:80:ea:08:f1:12:31:10:61:e9:
         ca:8b:93:3b:ef:1a:18:e8:93:76:29:b1:2e:c4:4a:a6:d3:1d:
         62:e5:ba:cd:9b:38:35:f8:ca:d8:5f:b3:fa:2e:86:a2:f2:62:
         77:5b:70:54:c9:bd:a5:d2:3d:71:88:6f:f4:cc:1f:73:e2:bd:
         db:74:3e:5b:17:81:55:00:da:a2:5e:80:f6:da:a2:2d:10:71:
         03:c3:cf:1c:18:44:d5:8e:b3:ec:d3:7e:ea:a8:d3:db:f7:1b:
         58:31:84:01:85:c4:0d:31:6c:d8:e2:95:b0:db:ca:a8:9d:81:
         67:60:2f:33:2f:9f:67:77:b3:02:9b:74:3e:a6:94:9b:e9:2b:
         44:32:e7:4b:84:8e:73:47:26:17:89:14:8c:f7:39:2f:4b:4e:
         c7:94:55:3c:da:d9:1d:8a:b3:55:e2:c7:29:4a:ed:e1:44:71:
         eb:c8:92:94:61:a5:c1:9c:e8:24:77:90:53:7e:4e:0e:d3:a1:
         9d:e5:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:39 2025 by rpki-client