Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
File:                     x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft (raw, json)
Hash identifier:          tIKMfag/ZuhLdk7dbXVQfUkWEFICCO8wDd/ozSNLJWU=
Subject key identifier:   5F:17:41:6B:54:7F:EF:A2:80:21:16:79:43:2D:B0:BA:10:51:08:D4
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       019746300B33C2A8A6E382BB2E16D878B1F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
Manifest number:          0471
Signing time:             Fri 06 Jun 2025 17:00:43 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:43 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:43 +0000
Files and hashes:         1: 6-bbeNLNkmIuyu3Lo5b34863iOM.roa (hash: lZJjYseqmXABz+2OUcMEvZWapoY92B+aQI4gDW+iLHY=)
                          2: EDJJIlUMrCN3cPb4YyplYaUa4mY.roa (hash: xSeFXRQr0ff+ENa0I7t8r/hMXg9ue9s9da6FSArG9HI=)
                          3: UY4B6ai0IUqpic2uyFBbXClXwVs.roa (hash: EpiSZtVV+62huL/J924f304WF/rHjhsYoh5R56nHB5w=)
                          4: Yq2uZcc2qRRP7aZ2CUk5bhls2PI.roa (hash: agQEn6bOXbJu8VUCvK5DiwKHmR8d/UEd/+IhzGxQaIo=)
                          5: x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl (hash: T63JWQP393hqlz1tMcQUmvO97Etwem33ZOCDCU+GVas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:0b:33:c2:a8:a6:e3:82:bb:2e:16:d8:78:b1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Jun  6 17:00:43 2025 GMT
            Not After : Jun  7 17:00:43 2025 GMT
        Subject: CN=5f17416b547fefa280211679432db0ba105108d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:53:c0:97:a9:4e:2a:0b:1a:aa:59:c8:15:6e:
                    70:f4:1c:9f:30:8e:f1:08:16:a9:89:e6:d7:89:dc:
                    c0:07:fb:51:40:89:dc:2b:b9:64:03:cc:9a:52:a3:
                    b6:8b:68:01:d5:72:31:db:ba:80:36:9f:c4:25:a5:
                    27:91:4f:89:08:80:48:f7:50:18:5d:bd:41:f6:ec:
                    66:d2:ef:c1:a8:0e:95:47:b5:ca:97:36:87:52:13:
                    61:e7:e6:6d:a7:b1:d9:0b:cd:f0:46:5a:26:cd:b4:
                    04:7c:72:cb:31:95:a5:ad:6c:9b:80:8b:ae:0a:42:
                    36:bc:69:f9:43:18:6a:56:e7:2b:4e:3c:d6:af:dc:
                    ea:b6:bd:f7:99:86:d2:5e:9a:b1:c0:83:c6:a7:48:
                    64:62:c2:0c:8f:df:8b:4d:ec:e9:b7:1f:2d:69:c6:
                    3a:83:4c:5f:67:7a:b2:44:7a:c7:9b:0e:e6:d0:d3:
                    98:06:0c:03:a8:49:44:20:2d:2d:d9:29:1e:f9:94:
                    4b:cc:2f:0a:c9:0f:1a:28:ab:ee:8b:bb:ea:0c:a5:
                    a8:0c:7a:48:84:f3:6b:71:72:06:64:79:9c:ea:52:
                    1c:97:e9:c5:ec:51:a1:97:a2:2f:25:6f:86:70:70:
                    a8:95:c5:60:97:61:b6:90:1f:0a:e4:ef:72:a2:5b:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:41:6B:54:7F:EF:A2:80:21:16:79:43:2D:B0:BA:10:51:08:D4
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9e:fe:c7:9a:31:08:79:e7:92:e9:db:d5:1b:89:46:03:73:
         a6:11:7c:a3:68:d8:40:b3:66:77:3b:33:88:b8:f0:91:af:d0:
         18:ba:72:74:69:ed:32:e2:49:36:4b:17:ac:95:15:b8:29:ee:
         45:e3:9d:7e:3a:32:38:dd:f7:ca:b2:56:b3:9d:e3:62:54:ed:
         07:62:7f:f4:89:57:b0:61:4a:cd:a9:58:1a:d8:81:be:f8:09:
         0d:e7:b1:66:00:fd:4b:74:18:ff:cc:78:44:c0:8e:6f:c9:3f:
         5c:4b:a5:84:2d:c6:c8:98:af:08:e4:a4:5e:67:49:74:59:58:
         ca:b2:ea:78:a7:18:d2:e5:63:77:48:4e:c3:73:a6:85:78:33:
         7c:15:da:6a:1e:c9:56:89:a5:32:90:a9:9e:54:4c:6e:ea:c0:
         61:06:cf:a4:f1:bd:bd:34:31:f4:8b:fe:33:4d:dc:43:73:4b:
         92:4f:0d:df:7d:aa:2a:6b:f2:9e:12:e0:e9:b1:06:7b:f2:9a:
         43:ce:9f:77:d0:02:76:19:2a:6e:46:d9:52:f2:b9:15:3c:f1:
         ff:12:b3:61:7a:f2:f5:a3:fa:4e:cf:0e:b8:3b:e0:51:4e:2f:
         cc:ec:61:94:65:f6:3b:d7:37:bb:d3:c9:c1:b4:8f:83:ec:4f:
         3e:73:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:46:03 2025 by rpki-client