Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File:                     7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier:          6XNpJ0Mp/sCaPPHPSlRIh9oQ6Xo0J6ZKL4FFm5A3Axg=
Subject key identifier:   87:90:F0:F7:72:F7:3D:96:B3:C0:84:9C:B8:96:FD:79:BF:A8:5D:10
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer:       /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial:       01976403E9045C74017B33734739028A16FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number:          124B
Signing time:             Thu 12 Jun 2025 12:01:07 +0000
Manifest this update:     Thu 12 Jun 2025 12:01:07 +0000
Manifest next update:     Fri 13 Jun 2025 12:01:07 +0000
Files and hashes:         1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: wigqazFumA7sYZw9NjFF7t5u90DDUNL32MB6vefldAQ=)
                          2: XiTX8PRRbjXruYbuuuJUYnL12Hc.roa (hash: 9YQjgU1UXlyr6JjfJF2PAwxgn/9h4L92vADp3ZCOwiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:03:e9:04:5c:74:01:7b:33:73:47:39:02:8a:16:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
        Validity
            Not Before: Jun 12 12:01:07 2025 GMT
            Not After : Jun 13 12:01:07 2025 GMT
        Subject: CN=8790f0f772f73d96b3c0849cb896fd79bfa85d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:fd:66:1e:f2:66:01:16:f0:00:ea:2b:c0:
                    8c:7c:63:9d:06:26:cb:d4:3c:37:31:2c:40:90:55:
                    5f:28:8c:2f:cc:f4:96:51:a9:44:ac:df:ba:a3:bd:
                    da:85:5e:d2:cd:e9:77:74:a2:a5:a3:8d:8d:f5:78:
                    99:6f:36:e3:2b:01:c3:76:f6:c9:ba:9b:e7:e6:23:
                    39:68:34:fe:9b:c3:16:5b:7c:f0:3b:4a:10:2f:a7:
                    1e:5d:52:ee:18:44:30:59:78:f7:df:d2:99:ae:3b:
                    ac:e1:6f:5f:60:c8:64:be:c3:05:d8:bd:ec:ae:81:
                    fb:d3:31:91:ed:1b:32:da:54:f7:26:01:aa:d7:77:
                    59:bb:da:40:87:1f:aa:86:9a:ef:e6:ad:d8:a1:33:
                    d4:cb:57:8a:04:8f:bb:90:81:b3:05:3d:1c:98:7a:
                    94:7c:98:9f:fe:c9:c3:17:60:0a:fb:1c:1e:b4:85:
                    5e:18:df:a5:18:ee:d1:08:03:96:85:0d:87:c2:a2:
                    0f:e0:f7:90:12:b2:66:9c:96:f3:1b:b5:a8:6f:f3:
                    f7:c7:23:20:cd:5c:c8:9a:8d:d8:4f:3c:0a:0b:94:
                    7b:7f:ea:de:ce:c1:4a:b4:1e:fa:57:39:76:c7:a4:
                    12:2d:04:93:01:1a:c2:ae:46:12:f5:2c:15:6f:25:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:90:F0:F7:72:F7:3D:96:B3:C0:84:9C:B8:96:FD:79:BF:A8:5D:10
            X509v3 Authority Key Identifier:
                keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4f:35:73:c2:1a:a3:ec:0c:09:27:02:3b:0e:bf:84:fb:d4:
         d2:16:b4:9b:dd:00:55:a8:bd:1e:b8:bc:ee:9d:1b:50:a4:b9:
         30:d5:8a:fe:60:7e:3b:09:ed:e0:4f:9d:b1:fe:8b:cb:33:38:
         a4:90:03:da:df:0f:1f:e1:3d:4d:88:ea:1b:1a:b6:57:c5:ec:
         1f:73:09:42:c0:a9:e6:81:2c:ff:33:35:a6:ca:2a:a2:1b:38:
         8f:47:14:85:25:1c:ae:67:c0:66:88:02:82:54:0f:3b:74:d4:
         80:a4:15:ba:88:ab:64:f7:1a:d6:46:7c:68:63:bf:8e:0c:89:
         9d:5b:17:4b:d7:80:8d:de:d8:6b:9e:d6:ba:06:d0:69:d1:33:
         23:f8:ba:06:e6:ec:d2:19:9b:c7:df:89:88:05:51:30:0c:d6:
         21:0c:61:95:d7:b3:60:a4:c4:2a:4d:cc:5c:b3:31:e9:aa:87:
         47:3c:2e:7b:f8:48:c5:f6:4b:26:13:5c:14:52:6d:cc:35:df:
         6d:3c:f4:42:eb:43:d3:29:30:60:ef:79:2f:e3:32:15:ff:90:
         6f:51:96:2b:fc:25:81:48:72:61:c0:5a:45:d8:c8:24:5e:42:
         43:51:f9:6c:fb:4a:55:4d:88:b7:13:00:0a:00:18:22:82:f3:
         6f:49:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:44:13 2025 by rpki-client