Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File:                     7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier:          8r0Fl6mCF+fdEkWcWaY7tcjm0hR05nFQw2Y2Ndq3/Mw=
Subject key identifier:   C6:4A:AE:A5:BC:54:8A:18:14:AE:05:67:6B:56:B0:58:1C:88:90:8C
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer:       /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial:       0197493193572AE7D8F982905F58E171A311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number:          0848
Signing time:             Sat 07 Jun 2025 07:01:15 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:15 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:15 +0000
Files and hashes:         1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: ipBMgVtAN0zrz5XfGYpHLP5dykofheeS5iNbEopy7qI=)
                          2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:93:57:2a:e7:d8:f9:82:90:5f:58:e1:71:a3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
        Validity
            Not Before: Jun  7 07:01:15 2025 GMT
            Not After : Jun  8 07:01:15 2025 GMT
        Subject: CN=c64aaea5bc548a1814ae05676b56b0581c88908c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:e4:8b:b4:9b:3d:06:4d:e2:0a:f1:be:da:
                    b3:80:50:ca:03:a7:85:9c:35:3b:2b:7b:f0:50:2f:
                    d6:b9:f9:71:bc:57:d1:24:b6:6d:54:b7:06:76:ec:
                    53:52:1a:f3:9b:ce:23:d3:48:51:bb:35:8f:54:26:
                    07:ee:34:45:c9:ff:9a:f1:f1:50:dd:04:fb:39:97:
                    73:ec:2c:bf:f2:6b:81:d0:40:44:a4:e2:e5:57:39:
                    44:8e:49:26:0e:ff:02:e4:17:73:69:24:c8:f2:6c:
                    cf:cd:d9:d3:b3:6d:59:e3:81:29:94:e8:e8:cc:46:
                    b9:95:ee:ec:76:13:4e:4c:ba:d0:81:4a:18:19:69:
                    48:d5:db:ff:c4:16:06:ea:03:72:6a:f6:74:9e:52:
                    63:ac:d8:fc:12:15:36:6c:f2:50:00:74:62:ad:df:
                    6e:4c:fa:b0:e7:ec:91:3a:a0:da:9b:a1:42:c9:37:
                    93:39:4f:f5:ec:22:b9:ce:77:06:8a:c9:b6:af:41:
                    e7:97:1f:a8:7a:ff:62:b1:25:cd:5d:09:62:82:25:
                    b7:84:70:fd:6d:d1:4f:7f:c9:68:7b:22:ad:e3:04:
                    bd:2d:51:79:b6:9d:67:b0:ed:99:dc:b3:bc:70:63:
                    83:53:7c:e2:c6:9e:8b:68:0c:33:ba:2f:04:7f:54:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4A:AE:A5:BC:54:8A:18:14:AE:05:67:6B:56:B0:58:1C:88:90:8C
            X509v3 Authority Key Identifier:
                keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:83:bd:83:ac:cc:c0:04:0a:8d:e2:d0:b4:33:29:e6:ed:eb:
         67:97:bd:60:d3:b2:d8:d2:6e:e6:c5:7e:c6:ec:34:7c:2d:37:
         00:7b:5a:53:dd:c7:02:bd:97:60:8d:70:3f:f8:45:83:df:d6:
         0b:2b:90:ea:2d:4d:55:13:c5:98:41:e1:be:b6:83:25:9a:5d:
         6e:70:6d:5d:68:8f:4c:3a:ce:ca:5a:a2:6a:42:f6:ca:97:a5:
         3c:da:95:d6:b6:7f:03:0e:97:cb:15:79:66:7e:3c:10:fd:60:
         8c:2c:b8:2b:a9:ed:5e:39:c1:3c:9f:d9:71:62:06:0f:e7:5f:
         ee:fa:36:e4:79:af:19:33:02:6b:83:58:c8:74:ad:bc:4e:ab:
         66:1a:67:93:36:f9:ff:16:3b:58:0a:80:c2:49:ae:a7:3a:9c:
         44:b9:26:f0:12:b0:5b:a6:c6:a4:15:a4:64:5d:93:da:a0:2d:
         22:1c:8c:a4:e3:54:7c:2b:70:62:c7:c3:42:71:c8:99:42:d4:
         f6:29:01:82:e5:48:72:46:18:f7:39:aa:14:16:6f:1b:17:a3:
         de:4d:7d:ff:3a:33:bd:b7:ed:7f:ab:cd:28:62:3c:1c:a6:af:
         04:1d:98:63:d0:66:e6:b8:c0:9b:c8:0c:89:59:df:81:c9:54:
         04:b8:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:59 2025 by rpki-client