Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          QD2ILjV/KY/EsdpsJPBvLYmFPKrC2v2oqZd1MFfQ+xQ=
Subject key identifier:   35:CB:BF:31:95:9D:CF:2E:9A:D2:E6:A0:73:AE:23:3A:3E:85:1B:BD
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       01974AB13A68EF45C72E589D35D969CAAB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          0F77
Signing time:             Sat 07 Jun 2025 14:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:18 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: vmMB/qpJsHDnl4PTUhu3zbvs5hYNByfeGzDSXRfA9EQ=)
                          2: zrwokDU3FhdB7_q1CXdcMR9bnVs.roa (hash: GD4RouuFMqAMeF041Js/nVB0Sr40yt7mYWnED87KOPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:3a:68:ef:45:c7:2e:58:9d:35:d9:69:ca:ab:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: Jun  7 14:00:18 2025 GMT
            Not After : Jun  8 14:00:18 2025 GMT
        Subject: CN=35cbbf31959dcf2e9ad2e6a073ae233a3e851bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:da:f7:4d:78:21:5d:1e:76:b5:98:fe:7e:
                    b3:20:d1:f1:77:b4:b9:7b:d0:6a:76:3e:79:33:0d:
                    25:4a:c1:d3:f1:75:aa:8d:ad:de:24:8c:fa:67:fb:
                    dd:b6:51:b1:87:8c:58:35:2c:ba:68:b3:d7:c1:a3:
                    69:ff:ac:14:49:35:56:6e:10:a4:b0:fc:30:30:9a:
                    e4:8e:fb:fa:40:f5:a3:1e:5e:cc:ad:f1:39:2e:a9:
                    f8:c3:4a:27:a7:ef:9c:43:f5:5d:db:cd:2f:b7:c0:
                    5f:10:47:d6:15:bb:8a:6e:75:db:81:3b:47:29:2b:
                    32:6c:39:95:bf:49:6e:0f:2b:da:0c:74:f9:0c:61:
                    7c:63:e4:b9:56:9c:f9:16:c2:68:7d:73:c9:74:b1:
                    e9:c4:fd:c3:c1:53:28:04:2d:bd:73:19:a9:3f:6a:
                    5b:79:49:d1:b3:f1:04:00:44:c5:67:80:31:bc:1c:
                    d3:a8:0c:ec:ba:ec:01:0c:93:54:18:e4:e0:10:97:
                    f7:b1:fb:98:86:d9:37:f0:af:0e:e0:ea:5f:c8:83:
                    2f:c9:17:91:ca:b0:49:fc:04:bd:80:cd:90:c4:91:
                    df:14:be:b9:3f:4f:12:b4:ec:e1:73:2f:ce:0f:bd:
                    cf:ad:38:de:de:d3:2d:a0:2d:50:21:d5:ae:f8:ef:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:BF:31:95:9D:CF:2E:9A:D2:E6:A0:73:AE:23:3A:3E:85:1B:BD
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:51:00:94:e0:c7:14:f1:08:b2:fd:27:3b:85:f6:8e:26:b6:
         1e:8e:15:18:6b:ed:55:11:95:66:6f:13:98:2f:89:57:81:79:
         a3:7f:66:06:5a:6c:13:d7:9a:e8:26:e3:9c:24:52:02:7a:0b:
         22:5d:8a:f5:2e:30:c1:68:00:a4:2b:0d:b7:ec:00:da:21:8b:
         65:68:ae:6c:22:ac:25:ba:43:de:81:bc:88:8d:24:d1:a3:b8:
         52:3e:50:48:b0:ca:b2:8d:5e:ad:72:e7:b1:6b:cd:f6:f2:34:
         da:52:87:ab:25:d6:3b:c6:04:58:f2:1d:e9:e7:62:dd:5e:92:
         24:fe:5e:10:f2:16:8e:f5:90:71:1a:2e:cf:f8:4c:51:46:0e:
         4a:2e:7a:b7:a5:fe:54:d4:b0:1c:64:ba:62:20:03:f6:c8:02:
         e2:f3:cf:86:17:00:25:bf:5a:4e:ef:08:d6:a1:fc:74:8d:a8:
         b1:1d:be:b0:97:ad:90:f2:f7:20:5f:2a:a4:4c:78:67:e8:d9:
         a1:5f:cf:1a:b4:34:57:8a:c3:d3:a9:94:8d:87:0a:8f:f6:f5:
         58:2e:b5:32:68:87:70:10:55:58:b8:c2:70:b4:dd:f8:84:2b:
         07:ca:c1:a7:7e:e5:d9:62:cb:0f:92:5b:14:c3:bb:40:cb:b9:
         52:8a:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:17:23 2025 by rpki-client