Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
File:                     R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft (raw, json)
Hash identifier:          TMI2xlDWCP77ISd0CS29M1tn0GeKKjp8qkPXr/H/jeE=
Subject key identifier:   1B:DE:55:49:23:3C:43:FC:02:06:EF:80:0F:F6:56:29:1F:A8:B6:F8
Authority key identifier: 47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
Certificate issuer:       /CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Certificate serial:       0197474253A2C3F04E0DAE4802896D397FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
Manifest number:          0C0B
Signing time:             Fri 06 Jun 2025 22:00:18 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:18 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:18 +0000
Files and hashes:         1: R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl (hash: sG7bWXpfACbdkfM/akrf1nbwlW9F5JchwFVmgRzOA1k=)
                          2: lW8QARrIK7UIW4M3JIEGPijJ8cI.roa (hash: zRjbJkcUZy131TXsOeG5uokZGrH6fU95s3m8Z3kzb+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:53:a2:c3:f0:4e:0d:ae:48:02:89:6d:39:7f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
        Validity
            Not Before: Jun  6 22:00:18 2025 GMT
            Not After : Jun  7 22:00:18 2025 GMT
        Subject: CN=1bde5549233c43fc0206ef800ff656291fa8b6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:6b:7e:df:31:26:01:96:b9:21:40:95:73:
                    be:04:75:b8:e3:5c:ba:4d:7c:c2:64:4b:1c:61:12:
                    17:5a:2b:1a:5f:13:49:da:c5:c0:d5:f8:0d:9c:6d:
                    6b:d1:cb:04:9c:3a:cf:6b:ed:fe:2e:5b:91:17:f8:
                    76:90:97:6c:88:29:87:f8:bc:95:f8:17:c9:55:c5:
                    fc:e8:18:b4:c0:f2:ee:4b:46:2e:41:91:90:0b:55:
                    3f:70:09:52:52:9a:3c:75:5b:6a:7c:c1:59:0d:7f:
                    0d:fe:62:65:29:ec:42:f1:d5:2b:df:4c:6c:3d:8f:
                    18:e3:99:a9:22:d0:62:19:e1:6a:03:f7:6c:a8:58:
                    5e:67:42:cf:7f:68:16:1e:65:e3:9a:dc:8e:f8:97:
                    5a:bc:99:d1:c5:a4:86:9c:9a:ab:84:dd:46:2b:e9:
                    b7:51:3b:12:83:06:8a:ac:80:59:e5:a3:7f:67:13:
                    9f:c1:86:69:ba:20:48:ab:78:59:37:26:2c:e6:99:
                    86:d4:02:49:c5:26:59:4c:fe:89:de:b8:0b:d6:37:
                    c1:2d:d0:23:5c:de:6e:fc:f8:20:07:95:43:26:b0:
                    36:e0:b6:d4:28:a4:b6:50:b3:19:b7:a3:04:d8:e8:
                    66:d4:6d:5b:2d:89:a4:3f:31:9f:30:86:ef:d5:1b:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:55:49:23:3C:43:FC:02:06:EF:80:0F:F6:56:29:1F:A8:B6:F8
            X509v3 Authority Key Identifier:
                keyid:47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:a3:f5:d2:40:56:83:1e:6a:a9:ac:ea:b8:2f:11:f6:b4:
         de:21:b8:4f:99:73:40:a1:67:13:7c:bc:15:dd:b1:5a:86:aa:
         c0:05:a6:ef:b3:60:cf:7e:a8:65:29:fd:1f:39:f1:0b:af:52:
         e3:be:37:2a:39:58:d3:f0:40:05:09:f4:9e:c2:1b:d6:e7:66:
         77:1f:14:59:6e:3a:1a:bf:a0:65:c7:9f:8e:94:20:72:4f:d5:
         a0:fc:c9:0e:29:e6:66:c4:6d:89:72:2d:25:17:29:1b:12:17:
         a4:2c:a8:93:de:fb:d9:67:7a:72:5b:db:92:b6:47:50:7c:57:
         5d:2e:a9:42:b6:6e:b0:ab:2f:e8:35:68:f6:9f:ee:65:27:67:
         30:4a:5c:b0:fd:d1:18:8b:df:f1:ba:f2:60:13:44:f8:bd:e2:
         dc:2f:82:a2:18:21:d4:f4:54:c5:a0:6c:54:4f:6b:28:f9:76:
         89:a7:c8:d0:49:21:86:77:b7:02:27:40:5c:07:62:be:1b:8f:
         c0:06:1a:e2:2e:8f:ce:d1:c5:e1:c5:91:d5:f2:5b:56:90:40:
         01:71:60:fc:06:9d:58:8c:49:19:31:ee:3f:c5:61:ca:fd:5c:
         1b:93:d0:9f:f9:4a:c9:68:6b:b3:76:9a:ff:4f:df:f5:bc:79:
         a7:6e:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:18:39 2025 by rpki-client