Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
File:                     59CqrsABapJr7tz991g1gVW3G-8.mft (raw, json)
Hash identifier:          MSSJjQpw1pLrPvZD6NgXkbi07zWKQhCG42ipKpYafm0=
Subject key identifier:   40:EE:DD:B7:19:0E:78:01:DC:76:F5:B6:4C:3C:8D:DF:84:7B:8B:57
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Certificate issuer:       /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial:       0197CA5EC7578A71F8D1DBE881CC6E7393C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
Manifest number:          084D
Signing time:             Wed 02 Jul 2025 09:01:38 +0000
Manifest this update:     Wed 02 Jul 2025 09:01:38 +0000
Manifest next update:     Thu 03 Jul 2025 09:01:38 +0000
Files and hashes:         1: 59CqrsABapJr7tz991g1gVW3G-8.crl (hash: +6KkRALZvfL4tFnLfHyL4kkqKE4cLNGG6ynW0U73A3Q=)
                          2: TWbavJSlzl0yvrhE4VudASOWZFo.roa (hash: ur2N9sV1aoXG7CrT2cW2W2OoDmeobx2g2/VRIr5D2Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:5e:c7:57:8a:71:f8:d1:db:e8:81:cc:6e:73:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
        Validity
            Not Before: Jul  2 09:01:38 2025 GMT
            Not After : Jul  3 09:01:38 2025 GMT
        Subject: CN=40eeddb7190e7801dc76f5b64c3c8ddf847b8b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:0c:b6:6d:e0:1b:3a:10:25:27:e3:58:99:
                    c8:80:d5:8e:47:bd:df:6f:06:3e:e0:ff:b4:50:76:
                    b8:26:d2:f0:53:48:99:a0:ca:2f:d7:64:7d:55:ab:
                    02:18:92:9e:0c:68:7e:8d:3f:51:bc:05:59:5b:3e:
                    63:b6:d0:56:d5:69:8b:78:41:b9:bf:19:92:49:da:
                    9f:f8:68:58:13:61:9a:4d:67:78:fb:d3:b7:b3:af:
                    8a:c3:98:58:0a:18:24:59:92:33:d8:d1:10:3e:81:
                    15:7b:95:3a:18:ea:86:f7:e4:26:ba:a7:c2:20:5f:
                    c4:b4:5e:dd:c7:20:da:1f:8d:42:c4:b2:30:50:89:
                    62:76:89:bf:e1:ec:e7:90:ec:fa:df:66:93:79:c1:
                    25:b4:04:ae:e1:ff:cb:74:d7:b1:6e:3f:c5:03:eb:
                    b6:87:fa:5e:74:fb:66:da:bc:34:7f:19:82:85:29:
                    17:6b:58:37:ca:f5:0d:cc:8d:03:3a:b2:41:33:b5:
                    a2:0d:0a:ea:39:41:34:a5:8a:ea:23:a3:83:f6:7a:
                    61:5f:02:ba:fa:aa:df:9e:44:5c:ce:ce:33:2e:ba:
                    df:9a:e2:45:12:4f:68:60:61:03:83:c0:0f:b1:a4:
                    9c:18:cb:9f:03:d6:89:d4:47:a6:2b:c2:41:ca:29:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EE:DD:B7:19:0E:78:01:DC:76:F5:B6:4C:3C:8D:DF:84:7B:8B:57
            X509v3 Authority Key Identifier:
                keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8e:e3:0e:a2:0b:33:73:76:9a:44:bd:99:a1:61:e6:61:98:
         a0:29:a0:30:5e:d8:6a:78:4b:27:39:c5:d3:60:04:d3:b0:8d:
         a3:23:ff:4d:1a:65:84:a3:b4:6e:b7:93:ad:15:d1:d2:6c:e8:
         e5:4c:58:ed:bb:e3:81:4e:ad:23:ce:8e:ee:9f:ef:11:ec:46:
         55:58:21:64:67:a4:f4:06:20:48:8e:f4:61:28:74:2a:d8:fc:
         bf:b2:69:3d:16:78:fb:78:db:7e:f4:49:bd:3d:31:30:cc:ba:
         5b:64:f9:e9:37:1b:b2:e5:2c:14:b6:98:bc:1c:84:d2:f6:79:
         0a:42:32:11:60:e5:c4:89:ac:f7:54:e2:66:ed:40:08:15:3b:
         e9:5a:c5:d1:7b:d1:4b:29:83:cc:ad:7e:8d:a4:f5:3b:8f:8a:
         ad:ec:95:0b:d5:d7:45:e0:ee:84:67:b9:d2:36:f0:cc:6e:de:
         2e:af:2e:96:b5:cd:7c:36:26:61:4b:29:4e:30:47:9d:55:85:
         d6:02:d5:69:94:cc:e3:14:4c:ad:26:55:3c:a9:0e:7b:4e:43:
         33:b1:b2:2a:74:ca:c2:1d:7e:28:22:64:e3:a1:c8:4e:20:95:
         12:87:79:e8:de:37:dd:db:d7:09:2d:9a:63:74:0a:05:e8:9e:
         4d:af:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:08:50 2025 by rpki-client