Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
File:                     7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json)
Hash identifier:          JG7A99luC1IpnS6tq+sbMex4LFJzo+htLLitLtQRPJ8=
Subject key identifier:   28:5E:10:12:78:64:17:94:47:9F:CD:44:4E:B3:87:7E:00:9E:62:03
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Certificate issuer:       /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial:       019761DE423BEFC1DFEF02FD23D63A2EB1A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
Manifest number:          0C70
Signing time:             Thu 12 Jun 2025 02:00:45 +0000
Manifest this update:     Thu 12 Jun 2025 02:00:45 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:45 +0000
Files and hashes:         1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: SBqny8JIMBczN61KB4Y9l5kS5F+MNoaUNt6bwmPH9ko=)
                          2: _VrWIzeeb6E8sDSdAStFjFktgds.roa (hash: XW7KS/0ycwvajLuTV4nzdbjjjJAo77rPpbsld42wLs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:de:42:3b:ef:c1:df:ef:02:fd:23:d6:3a:2e:b1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
        Validity
            Not Before: Jun 12 02:00:45 2025 GMT
            Not After : Jun 13 02:00:45 2025 GMT
        Subject: CN=285e101278641794479fcd444eb3877e009e6203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:19:96:9d:c6:6d:2c:46:05:94:f8:ee:d5:
                    87:af:90:dd:bc:8d:73:56:2b:7a:a1:15:c5:e2:28:
                    4f:8d:33:96:bf:52:72:16:2d:67:3b:fa:6b:76:9f:
                    2f:ad:78:eb:f6:47:58:2c:2a:83:1f:be:98:33:9b:
                    33:1e:3f:98:ac:9a:75:6d:50:09:d0:4c:bf:ff:66:
                    f5:0b:e8:5c:ab:26:47:94:ce:86:fc:5e:e3:84:cb:
                    11:4d:2f:a0:cb:20:19:7e:67:bb:95:08:28:d8:44:
                    b4:4a:e6:23:0b:8c:41:13:9c:fa:1e:2c:45:6c:5e:
                    c5:c0:a7:70:51:59:ea:11:ae:39:e4:78:c9:a9:4a:
                    eb:f0:19:73:be:1c:d7:07:59:e2:2d:30:ab:41:f6:
                    22:7d:cf:ae:4e:ca:90:f3:37:df:c3:c5:c0:07:da:
                    ca:49:37:4a:77:dd:27:3b:48:05:77:20:6f:0c:a5:
                    8c:71:de:d0:1b:67:bb:59:6e:22:c9:50:a2:c4:12:
                    b5:da:f3:41:89:0c:c1:e4:02:31:a4:ad:1e:f1:cd:
                    42:66:e6:86:08:ca:fd:d9:83:1f:40:d1:fd:aa:f8:
                    76:aa:79:7f:26:bb:91:e3:0b:2d:df:13:71:01:5c:
                    77:e2:ca:59:30:33:b6:8b:91:ab:61:8e:41:ff:e3:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:10:12:78:64:17:94:47:9F:CD:44:4E:B3:87:7E:00:9E:62:03
            X509v3 Authority Key Identifier:
                keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:fc:82:ca:52:82:62:99:1c:2f:39:70:25:9b:16:c2:85:
         6b:70:67:f4:75:58:5b:da:22:30:d3:97:84:a8:d3:6e:20:90:
         f0:de:4f:e1:9d:70:c4:14:c1:0e:08:23:05:87:27:5d:01:4a:
         21:4a:8c:84:2b:b6:23:b4:f5:e2:48:1a:8e:73:aa:ec:97:de:
         1d:f0:fb:7e:6f:47:1e:f9:cd:1d:97:e7:d9:4b:c6:c9:17:a1:
         47:82:05:86:d8:0e:0d:12:8c:a2:db:6d:30:32:2c:c8:0f:85:
         47:70:39:08:33:ed:97:44:53:ae:5c:d0:ec:6c:1b:1c:b6:d0:
         57:f0:2f:40:15:4f:a7:c8:ce:ee:17:a2:7b:70:aa:44:11:f1:
         a5:3e:16:dd:61:22:a1:49:0d:93:55:2f:cf:34:9b:01:9a:b0:
         1a:57:f3:1c:18:fe:c1:3b:64:59:80:33:0c:15:c7:25:cf:8d:
         b8:eb:82:d3:56:15:da:06:49:37:f0:77:80:85:7b:79:9f:85:
         94:72:53:e8:be:56:f6:6c:4c:be:43:2a:6a:d2:80:28:c7:ac:
         d6:e3:95:67:7c:39:b8:ec:db:8a:58:43:f3:bf:2b:44:1b:19:
         9b:de:24:7e:e6:3b:b8:7e:b6:75:d0:3a:35:b8:99:b3:8d:2f:
         16:82:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:10:02 2025 by rpki-client