Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          WGjiCDbOXZNaT8Ixb3VHRZfDdDGeZL9njjc9K52j1Mg=
Subject key identifier:   02:9A:8A:31:51:EA:D3:95:DB:DA:ED:C9:A7:75:C7:CD:33:35:6A:EB
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       019758DB416602A81C24F87120DB1DF27335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          1585
Signing time:             Tue 10 Jun 2025 08:00:53 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:53 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:53 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: vL75Vy2Pmn3xgyDUMCOA0Ox87Xivwy4X9IgylHVu/5M=)
                          2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:db:41:66:02:a8:1c:24:f8:71:20:db:1d:f2:73:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Jun 10 08:00:53 2025 GMT
            Not After : Jun 11 08:00:53 2025 GMT
        Subject: CN=029a8a3151ead395dbdaedc9a775c7cd33356aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:07:b7:57:9a:14:4c:c1:81:ea:4b:99:ec:
                    e6:fc:95:a7:76:44:6c:e6:43:93:44:f4:74:d2:f4:
                    48:6d:fd:1a:29:9e:bd:bd:66:ee:f5:d6:38:ea:89:
                    ea:ce:d2:d0:1b:53:43:1c:3e:05:eb:d9:e7:6c:da:
                    90:75:2c:ef:8e:03:68:d1:b4:54:cc:2f:7e:66:a8:
                    9a:e9:5e:a8:d6:7f:75:0f:f9:ba:fd:42:cf:55:16:
                    09:5f:c4:f2:77:13:a6:68:e0:ef:ff:bc:f1:f6:72:
                    0d:b2:d8:91:eb:00:a3:80:7c:16:84:41:8e:99:85:
                    7d:85:8e:a2:4e:d8:e3:42:8d:06:c2:3c:0b:e9:f9:
                    3f:cf:8a:fb:cc:4d:fa:6c:30:0d:53:6b:09:34:42:
                    b2:e0:a0:68:f1:41:84:6d:e2:3f:d1:11:f6:69:57:
                    cb:a8:7f:16:bd:1a:3d:4d:27:bd:36:74:dd:4a:0b:
                    a5:fc:6c:1e:5c:40:91:4c:41:9f:b6:68:58:40:69:
                    0e:b2:3e:ee:38:60:4d:47:e9:ec:7a:c1:dd:b3:82:
                    1d:59:cd:c5:3c:05:16:f5:11:c9:ed:ab:b1:c6:41:
                    47:f6:36:1a:8c:1e:46:9f:ba:04:11:92:7e:1d:ad:
                    00:02:a6:16:a3:9f:28:24:22:5b:2c:d9:ca:db:21:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9A:8A:31:51:EA:D3:95:DB:DA:ED:C9:A7:75:C7:CD:33:35:6A:EB
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:c6:d7:ae:49:05:c4:93:72:ba:39:a4:e9:70:85:7e:31:
         24:a7:de:db:49:45:cf:2c:36:04:d3:d9:29:94:d1:37:e8:1f:
         95:07:fd:3e:80:10:01:38:a8:32:78:cd:c5:68:e7:6d:c0:c9:
         df:ed:f5:7b:d5:6b:3b:70:8d:7b:38:32:63:a5:5d:c9:13:4b:
         da:63:47:ab:53:f5:7d:b3:41:cf:67:d5:f2:cc:6a:b3:d9:cd:
         af:18:c4:7d:59:2e:89:6a:fb:29:ff:35:d7:f5:66:c6:80:04:
         85:c4:27:e2:5e:ae:ef:8b:9d:f6:83:e2:07:8c:75:7b:28:05:
         f2:47:21:4e:96:b8:d8:5b:55:da:bc:db:13:0a:62:bb:f2:e0:
         8e:68:b0:17:f2:31:e3:81:bc:d1:53:c7:89:5d:6b:23:9d:cc:
         ac:7f:ac:d3:66:69:05:29:f0:53:e7:90:6c:c1:f3:fb:66:be:
         63:25:51:fa:82:9e:bd:68:db:2b:06:d0:e8:f7:30:5a:a8:2b:
         8f:92:4c:e5:a4:1a:80:65:e0:ca:9a:0e:0b:13:02:79:38:18:
         99:54:f7:2e:0d:48:ec:7c:b8:14:f8:54:0e:dd:1f:05:89:a6:
         b6:3d:92:e2:3e:4a:c1:75:49:b8:81:8a:b6:0a:8f:c6:0e:05:
         04:eb:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:51:24 2025 by rpki-client