Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          BZYTciCTOEpC3WNm3zgCQpj34Jl0ZYnjBV//OH93yBg=
Subject key identifier:   6B:8A:5C:E5:9D:B2:D6:CA:45:36:66:EE:14:AD:B9:71:6D:BF:E2:25
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       01974BC4A025EE76E0CFF6C70AD3026CB709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 19:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:06 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: uDHj5iVOByLZKIfs9rvecwRKYsNYbQo2cftv6pvyJkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:a0:25:ee:76:e0:cf:f6:c7:0a:d3:02:6c:b7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: Jun  7 19:01:06 2025 GMT
            Not After : Jun  8 19:01:06 2025 GMT
        Subject: CN=6b8a5ce59db2d6ca453666ee14adb9716dbfe225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:74:0f:9b:cb:9d:1d:ef:af:0a:4e:03:bf:
                    a2:f7:ca:8a:ff:0e:26:48:c4:52:b8:82:79:44:bb:
                    ec:2b:10:bf:bd:55:32:c9:b0:06:ca:8a:74:6e:2a:
                    b8:8e:9b:f3:00:9a:b2:53:58:a0:8c:32:5d:8c:36:
                    1a:05:83:ca:0f:eb:b2:ed:4a:ac:4c:3d:63:57:9e:
                    d7:b6:b7:a3:ba:41:5e:f9:e5:f5:13:42:7c:fb:2e:
                    2f:b2:ca:79:f7:e0:63:d7:49:be:f9:13:2e:9a:d5:
                    23:24:09:66:12:43:1d:76:20:a6:33:42:d1:ec:38:
                    85:60:d2:5b:99:d6:7a:0c:0b:c2:35:e3:f0:91:c2:
                    70:11:b9:7e:9d:15:f9:f0:c1:b0:25:70:4f:12:57:
                    20:82:81:27:06:8e:7b:f5:75:03:b2:29:43:ee:89:
                    0e:79:5b:e7:60:fa:94:89:7c:f5:87:07:51:0c:8e:
                    33:9f:fc:73:14:c1:b6:36:48:6e:dd:6b:73:93:66:
                    d4:8c:e9:65:a2:d7:bc:ae:da:0b:4c:94:aa:66:d6:
                    df:c5:15:15:41:2c:b2:cc:2f:1e:3e:e8:af:5f:af:
                    80:98:3e:a8:41:30:ae:c4:eb:ad:b8:e9:74:52:7c:
                    17:6d:5d:3c:70:d7:31:d9:32:42:b5:fa:b9:f9:f2:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8A:5C:E5:9D:B2:D6:CA:45:36:66:EE:14:AD:B9:71:6D:BF:E2:25
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:f8:1d:f8:6d:7d:06:2a:3d:08:68:ee:88:5b:56:80:4f:
         c9:27:86:df:e5:07:d5:de:60:5a:cb:a6:a8:34:9d:5d:69:72:
         0f:e1:c3:5e:d6:c5:e3:9f:f2:a6:29:f0:dd:d9:5f:13:15:c1:
         49:87:aa:10:39:b1:26:7c:41:31:6b:b2:fa:16:59:c5:77:5d:
         13:68:dc:9c:b3:fc:33:97:7d:70:82:cf:70:de:8e:01:bb:46:
         b8:c8:f4:6b:93:15:46:02:75:7c:58:75:ab:9f:4c:10:d7:52:
         ee:6f:ce:0f:0b:c1:04:47:bd:ec:41:4b:d7:4d:d3:1b:f4:59:
         c5:f0:38:dc:73:60:7f:72:fc:7b:0e:2b:29:87:53:7a:fa:4c:
         1e:70:90:64:09:aa:a2:dd:89:5d:aa:e2:52:0f:ad:d1:50:56:
         d3:3a:ed:11:f6:2a:ad:3c:9c:34:bb:20:85:ef:64:d0:8e:61:
         1a:87:8a:91:b8:c4:2e:7a:79:41:eb:67:15:82:60:84:67:56:
         9d:27:c3:82:f8:1b:43:8e:d7:7f:7d:30:eb:11:87:63:a8:25:
         3a:93:31:02:97:98:67:67:fd:29:73:a5:46:dc:40:2d:a5:ca:
         8a:f8:2f:d6:70:27:03:29:14:b4:0a:e0:fb:c7:e7:84:ab:18:
         fd:6c:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:50 2025 by rpki-client