Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File:                     4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier:          c7b6yB9TsZ2lJ0fOpuoUUibOUYQyb6/w7SSRcpOXFDA=
Subject key identifier:   A6:A8:20:DF:A4:4A:38:97:4B:C0:35:3F:FF:E0:44:D4:1E:7F:CD:08
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer:       /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial:       0197D029AE0932D02369A1DDCBA931EF1E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number:          0C7E
Signing time:             Thu 03 Jul 2025 12:01:21 +0000
Manifest this update:     Thu 03 Jul 2025 12:01:21 +0000
Manifest next update:     Fri 04 Jul 2025 12:01:21 +0000
Files and hashes:         1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: RT4V4qF2h3WDPZWwurq7NTro0FETLrYLAXoOtfQbduQ=)
                          2: Q8-T8rHgFoT7CVxsMFqUQCc8JdY.roa (hash: RshmXbtDnZ3rOqJWlQSI0/TW/t+laA0v6rWUW/sLLhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d0:29:ae:09:32:d0:23:69:a1:dd:cb:a9:31:ef:1e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
        Validity
            Not Before: Jul  3 12:01:21 2025 GMT
            Not After : Jul  4 12:01:21 2025 GMT
        Subject: CN=a6a820dfa44a38974bc0353fffe044d41e7fcd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:5b:0d:81:7a:e2:f3:d2:6b:27:ab:da:1b:
                    4f:d3:24:b8:c1:0c:bd:19:b5:3b:88:53:2f:23:4a:
                    d9:e7:6a:7c:5e:b7:88:2f:6d:77:a3:ab:61:dd:45:
                    88:1f:d1:14:cc:0e:dd:98:f1:84:f5:c8:aa:30:b0:
                    1d:3b:57:b5:bf:a6:28:ec:f0:fc:77:49:e2:ca:b2:
                    fc:ca:69:35:8a:2c:38:b2:24:ae:d1:75:ef:01:da:
                    21:73:8c:4b:82:62:c2:2f:5e:d9:7a:43:9a:b0:a6:
                    18:d4:4c:0b:16:2c:15:95:21:89:0f:c7:05:c2:45:
                    b8:b9:f6:1e:ba:3f:26:d4:0f:89:f4:b7:8d:40:38:
                    71:7e:91:d1:7d:c0:51:1f:14:9e:56:ba:b4:a0:21:
                    32:aa:46:4a:90:29:14:5e:1e:cc:c0:0d:48:2f:0d:
                    d8:c6:4c:53:dc:62:28:c0:1c:6b:a6:2d:4b:89:17:
                    8f:65:d5:7b:97:5f:29:4a:74:2d:63:f1:63:23:90:
                    85:d1:62:e7:ae:f3:25:b2:11:16:01:4b:5a:6e:0b:
                    6c:cb:d4:26:69:99:6d:48:72:82:ac:77:ea:43:ca:
                    60:d0:67:3b:53:82:a8:a1:8f:bb:47:ba:86:50:71:
                    3d:fd:08:9e:e5:2d:28:f0:33:0b:1a:f4:72:9d:01:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:20:DF:A4:4A:38:97:4B:C0:35:3F:FF:E0:44:D4:1E:7F:CD:08
            X509v3 Authority Key Identifier:
                keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:47:40:22:7c:f5:86:98:30:61:67:76:b8:b0:91:b1:44:c0:
         e4:fe:6c:1f:0c:6f:64:77:64:bc:14:bf:b4:b5:1c:26:a0:13:
         6f:9c:1c:85:80:10:c0:35:f7:02:34:c5:45:ef:ed:5d:f0:ab:
         ee:62:d4:7a:4c:84:b7:99:9f:80:9f:b3:2c:00:da:0c:20:3b:
         8c:44:dc:57:fc:ef:8a:25:32:5f:2c:30:b3:90:eb:d8:b9:37:
         57:b5:a0:87:fa:36:cb:15:d2:9a:01:84:41:8e:55:e8:ef:e4:
         6d:0a:20:54:b2:9b:a4:0e:2f:b6:60:ee:a9:e2:80:c3:49:a5:
         98:51:7d:f7:e6:6a:f4:31:95:9a:2f:a3:78:24:22:d3:e9:b4:
         c2:c8:8d:74:0c:00:d2:3c:72:29:1e:cf:75:0a:6b:7e:56:af:
         68:86:3a:3c:f3:57:31:30:0d:14:ab:df:62:3b:e9:4e:e0:fb:
         14:32:1a:bf:58:8c:c7:d5:87:bc:6f:c6:aa:92:36:48:92:79:
         c6:1f:50:72:3f:25:de:93:4a:10:2f:87:fc:7f:dc:01:e9:0b:
         2c:ca:04:d1:40:f4:99:ba:78:e9:89:d7:36:7d:f4:c9:82:da:
         e6:7b:9d:ce:55:4b:90:59:ae:2c:ed:5d:1e:28:55:b5:94:59:
         03:60:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:37:01 2025 by rpki-client