Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
File:                     s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft (raw, json)
Hash identifier:          gRFEdi1UoLWOMf6KDvQyvRtb0r5LbUm8U3DPDQaa21o=
Subject key identifier:   50:F2:AF:F3:17:69:AB:01:EB:C2:C8:C8:A3:F1:58:B2:06:E1:C5:CB
Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80
Certificate issuer:       /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
Certificate serial:       01974B560841B423695384B7320DFA87E012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
Manifest number:          06EC
Signing time:             Sat 07 Jun 2025 17:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:18 +0000
Files and hashes:         1: s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl (hash: bnfEJ/zhgt9Ak/Pyz9tkCruiBvKKca41HTFsKzVNk4U=)
                          2: sGUfZNonYxZsb_xTxnb3H4Yu91o.roa (hash: s4fR6r2ByqMIr6sZhA9/b2xFuO1KrvktMupAhaQVN8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:08:41:b4:23:69:53:84:b7:32:0d:fa:87:e0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
        Validity
            Not Before: Jun  7 17:00:18 2025 GMT
            Not After : Jun  8 17:00:18 2025 GMT
        Subject: CN=50f2aff31769ab01ebc2c8c8a3f158b206e1c5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:cb:d6:90:a1:05:0b:e6:a5:01:fb:f6:ea:
                    45:60:a5:b6:30:0a:2f:a3:92:bd:9e:1d:e1:23:8f:
                    66:34:8b:bf:ad:a7:d6:9d:f4:b4:ec:f6:5f:7f:d0:
                    83:ce:a5:10:61:73:86:3a:fe:38:c9:17:42:42:05:
                    4e:4e:fa:e9:50:03:05:b9:bc:4a:1f:57:4f:cc:04:
                    ec:fb:6e:e5:76:bc:4a:4c:05:68:d7:0f:02:0c:ea:
                    5e:30:9d:99:64:80:db:24:92:a0:a1:e8:7f:18:30:
                    63:9d:ae:ee:94:e7:54:62:e7:44:89:3a:61:93:05:
                    0a:de:70:9f:75:4d:6b:e9:59:a4:76:0c:47:4a:21:
                    91:e0:4e:8b:49:89:1c:1a:74:f8:94:8d:40:dc:d7:
                    e9:5e:35:bf:f7:82:ee:10:b1:a0:74:01:9b:99:f1:
                    22:e1:95:b2:d3:af:91:55:ce:68:60:62:c5:b2:4c:
                    d9:88:1c:35:45:bf:e4:ea:56:bd:8d:9b:51:21:be:
                    06:52:67:4a:2a:da:9b:02:e3:a3:18:47:fd:ec:4b:
                    58:3a:33:1c:ed:ed:97:9f:b7:26:9e:14:95:16:b7:
                    52:29:43:68:89:56:ad:92:4c:91:b0:11:a7:fc:e2:
                    28:de:af:90:2e:ed:e0:25:b9:07:a0:ea:f7:17:3c:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F2:AF:F3:17:69:AB:01:EB:C2:C8:C8:A3:F1:58:B2:06:E1:C5:CB
            X509v3 Authority Key Identifier:
                keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:db:e5:7a:4e:e4:aa:a6:ce:3c:c3:b3:b5:dc:0d:9d:2e:
         17:92:39:18:a2:30:32:3a:63:9e:eb:ae:aa:8e:5d:91:4b:af:
         53:82:62:a0:e2:1d:58:49:70:ea:42:bb:a6:03:27:7a:cb:a6:
         ac:53:01:23:9f:e2:92:0f:78:1e:5d:b8:31:53:d6:1f:0e:90:
         9c:bf:19:31:ab:4f:c5:98:c0:3d:45:21:05:a0:fb:8e:d4:dc:
         3f:74:19:52:b3:36:45:96:80:11:63:f8:78:33:e7:47:d8:73:
         06:70:7c:e4:6d:9b:1e:41:73:3d:c1:c0:54:3d:a9:4c:df:f7:
         db:44:de:14:94:39:2e:c7:05:ed:75:9c:65:29:ab:e5:12:45:
         a4:7c:3a:97:2f:2f:d5:1f:4a:34:be:07:0c:c6:8f:a2:a0:18:
         4c:d9:2b:1b:27:18:25:db:69:4f:2a:89:57:63:1f:41:87:51:
         aa:1a:2e:fc:06:65:f0:eb:b4:31:8e:35:74:93:a6:1a:46:91:
         b2:b5:e4:71:c6:a9:9f:e3:2d:9e:7b:c7:d2:dd:94:14:bb:62:
         3d:e9:75:31:15:dc:60:4f:58:63:16:48:8c:4a:87:d2:b4:3c:
         d9:38:23:52:05:2e:ec:2e:02:58:6b:83:43:0b:a4:77:33:d3:
         78:e7:69:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVghBtCNpU4S3Mg36h+ASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjc3ZTUyY2M3NzdhMWVhZmU2OWE1MTdmOTVkMmMyMTlj
MTkwODAwHhcNMjUwNjA3MTcwMDE4WhcNMjUwNjA4MTcwMDE4WjAzMTEwLwYDVQQD
Eyg1MGYyYWZmMzE3NjlhYjAxZWJjMmM4YzhhM2YxNThiMjA2ZTFjNWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpPL1pChBQvmpQH79upFYKW2MAov
o5K9nh3hI49mNIu/rafWnfS07PZff9CDzqUQYXOGOv44yRdCQgVOTvrpUAMFubxK
H1dPzATs+27ldrxKTAVo1w8CDOpeMJ2ZZIDbJJKgoeh/GDBjna7ulOdUYudEiTph
kwUK3nCfdU1r6VmkdgxHSiGR4E6LSYkcGnT4lI1A3NfpXjW/94LuELGgdAGbmfEi
4ZWy06+RVc5oYGLFskzZiBw1Rb/k6la9jZtRIb4GUmdKKtqbAuOjGEf97EtYOjMc
7e2Xn7cmnhSVFrdSKUNoiVatkkyRsBGn/OIo3q+QLu3gJbkHoOr3Fzz+IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDyr/MXaasB68LIyKPxWLIG4cXLMB8GA1UdIwQY
MBaAFLO3flLMd3oer+aaUX+V0sIZwZCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUt
YjRhZWU4YzVkNDhlLzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUtYjRhZWU4YzVkNDhl
LzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4zb5XpO
5KqmzjzDs7XcDZ0uF5I5GKIwMjpjnuuuqo5dkUuvU4JioOIdWElw6kK7pgMnesum
rFMBI5/ikg94Hl24MVPWHw6QnL8ZMatPxZjAPUUhBaD7jtTcP3QZUrM2RZaAEWP4
eDPnR9hzBnB85G2bHkFzPcHAVD2pTN/320TeFJQ5LscF7XWcZSmr5RJFpHw6ly8v
1R9KNL4HDMaPoqAYTNkrGycYJdtpTyqJV2MfQYdRqhou/AZl8Ou0MY41dJOmGkaR
srXkccapn+MtnnvH0t2UFLtiPel1MRXcYE9YYxZIjEqH0rQ82TgjUgUu7C4CWGuD
QwukdzPTeOdpXA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:22 2025 by rpki-client