Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          uQOXvU0NJRlCeSTlJPwnMzDmkmMI3iNSeAtEQwVL9eo=
Subject key identifier:   77:F1:C7:AA:CC:99:40:47:F1:B3:EF:1F:24:06:3B:D2:89:0F:10:A2
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       019749315A7F894044B901AAC920286C7B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          0FD1
Signing time:             Sat 07 Jun 2025 07:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:00 +0000
Files and hashes:         1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: TAh+qwTYzbUwn+Xrj4BkqwHzB1DMSoCSenQc7XhSy+M=)
                          2: CsRueG1b5ZzTZPTlBKokydQc2qo.roa (hash: jHCi91UlnFNtz2stcUbYlEZWNgg5fJNyW8RNXHw0CG4=)
                          3: m-lcsx8_GYaqbqhzBpdxya1zkS4.roa (hash: pN7Wu63YBque4WVgZwPaa9m/kwpOD5syMxKGwDLwefI=)
                          4: uhJ-XIVNq77fWXsLmAjcO82hF0c.roa (hash: /Yf7GSbjy7jBNyAQCFoiblzDBo0DTRvflVo58Ipv4OQ=)
                          5: yVrQ3Ged2FsAZHuyhUIqmxL0_HE.roa (hash: heQJwpouLwsKxWKG0olSeDKYbngN2NrPz+JJTgLlRd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:5a:7f:89:40:44:b9:01:aa:c9:20:28:6c:7b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Jun  7 07:01:00 2025 GMT
            Not After : Jun  8 07:01:00 2025 GMT
        Subject: CN=77f1c7aacc994047f1b3ef1f24063bd2890f10a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:b7:6d:28:83:62:40:dd:b4:44:c0:96:89:
                    eb:72:de:4a:43:b8:67:d0:12:64:9c:2c:02:cf:13:
                    44:68:2a:a6:7a:d8:91:9b:99:87:54:f9:1e:9b:55:
                    59:a5:cf:8e:1b:f8:c7:f3:12:00:b6:18:88:59:cd:
                    11:90:36:2a:a0:da:d2:d5:82:3c:97:2f:01:0c:b8:
                    81:bc:de:90:7e:de:f8:b0:72:4b:27:0f:f4:18:76:
                    1a:33:e3:fd:82:69:12:da:ec:38:1f:7e:f1:26:35:
                    5c:b0:55:5f:a7:2a:61:6a:e9:0d:b1:ce:6f:5b:1b:
                    2e:d8:cd:24:fc:5e:fe:61:df:7b:a0:5e:78:c9:f5:
                    60:7d:d3:e6:ae:d7:fe:44:dc:6c:c2:e1:0c:61:4a:
                    aa:9b:ed:86:30:0f:9d:9c:98:f7:3f:9b:00:b6:3f:
                    40:e1:ea:b0:76:d4:6b:69:60:fc:41:df:ab:86:6b:
                    e9:6e:c4:b6:43:1a:45:0e:f2:b3:21:cd:b3:82:ca:
                    69:cf:48:0a:85:00:6b:c4:4a:7d:9d:c6:0e:11:c5:
                    6b:53:a7:db:6d:9d:6e:5e:e3:59:99:d3:b0:98:03:
                    5f:a2:4d:ea:63:64:be:9e:01:e5:24:c7:42:fe:62:
                    ea:46:0b:ec:3f:06:2a:d7:9e:cd:14:a1:27:80:c3:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F1:C7:AA:CC:99:40:47:F1:B3:EF:1F:24:06:3B:D2:89:0F:10:A2
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:33:7d:a2:7b:8b:39:dd:31:18:c8:78:de:df:5c:b2:41:c3:
         ab:28:01:90:52:9f:c8:66:32:15:30:55:d9:9c:e9:77:be:ef:
         96:9f:aa:4b:c6:21:20:4b:c6:0f:b6:3c:0a:6d:66:2f:e3:58:
         6d:60:f5:fa:a9:8c:b1:a2:70:ed:d1:63:f1:e0:01:15:33:89:
         17:c3:d2:35:d1:9a:60:9c:2d:1a:2f:d4:7f:21:cb:3d:bc:fb:
         54:87:bc:86:29:88:58:9c:25:96:16:ff:fb:85:6d:0f:65:03:
         ef:d0:82:3a:34:ea:f8:a7:87:8b:27:69:c1:6e:20:94:34:b0:
         86:54:03:e8:85:5f:03:f6:4e:12:b7:b6:ce:3d:d8:97:07:3b:
         10:c5:04:51:e2:0a:ac:6e:ac:93:82:e4:a6:19:f2:bf:3c:55:
         97:45:a9:3f:0f:59:de:8e:79:a6:0b:bc:dc:4d:f4:d9:a5:30:
         ff:94:ef:9d:ee:18:17:2e:77:a7:79:62:9c:3a:a2:19:aa:cc:
         e2:c9:c2:60:56:7c:94:17:5e:6b:95:81:b7:3e:fc:15:36:4d:
         41:ad:a0:0a:c2:c4:7a:8f:48:6f:b2:de:cd:00:62:b2:d1:2a:
         11:c4:31:3b:3a:4d:e5:15:b0:32:26:bf:b6:9b:9e:15:9b:c3:
         bd:ed:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:16 2025 by rpki-client