Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File:                     x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier:          ZE8oGNFFzdCVNm64Oe1UJGxaToKgOuJNSNXiEUL0VIA=
Subject key identifier:   67:01:7F:7C:1E:73:A3:3B:48:D5:9B:F0:45:45:F6:18:1E:A5:7A:DC
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer:       /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial:       01974C31E025BD83F07B8D919814E661713D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number:          0F79
Signing time:             Sat 07 Jun 2025 21:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:26 +0000
Files and hashes:         1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
                          2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: oFhM1Dy4JwstXWos0bM+I5oDGy1EoSQ20MWbQbofcjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:e0:25:bd:83:f0:7b:8d:91:98:14:e6:61:71:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
        Validity
            Not Before: Jun  7 21:00:26 2025 GMT
            Not After : Jun  8 21:00:26 2025 GMT
        Subject: CN=67017f7c1e73a33b48d59bf04545f6181ea57adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:e8:96:f0:13:9b:67:f5:cf:89:37:9e:b5:
                    c5:7c:26:4b:09:d0:22:c5:7b:8f:6c:25:c8:fa:09:
                    65:76:ac:ae:fe:3b:da:59:87:cd:3a:a7:97:4f:34:
                    bf:75:78:31:bb:c0:61:10:c2:cd:91:77:ec:5f:2d:
                    e4:87:2d:38:bd:99:81:ad:89:de:e5:a7:51:8c:bf:
                    b1:3c:cf:e7:6d:4e:b4:76:ff:7b:8b:f3:91:6c:92:
                    73:08:9e:5b:e3:d8:e2:1b:b7:31:c2:8d:53:99:b9:
                    d8:f2:dc:a5:7e:ab:1f:46:80:f1:8a:ac:3f:d1:73:
                    95:a2:f4:02:c4:b3:03:82:f5:f4:47:eb:b8:dc:31:
                    58:ca:62:a8:77:1e:25:03:83:e4:a2:65:56:48:ee:
                    e9:19:83:e6:80:89:51:a3:77:2e:7b:da:77:57:f2:
                    c6:6e:b1:89:4e:7b:fa:f1:93:cd:45:ca:f2:f6:33:
                    a1:9b:00:05:e6:9c:27:04:59:19:78:0b:1f:84:a1:
                    0c:14:41:a4:cd:c5:2a:b0:67:98:d3:d4:cb:83:de:
                    3e:fc:41:fe:09:1f:44:08:6e:69:ee:0c:e6:1b:78:
                    78:9e:f5:ff:78:24:e8:2e:08:95:32:75:36:00:83:
                    6b:9b:2a:18:b5:98:9c:ca:b6:2f:db:2c:80:ae:f0:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:01:7F:7C:1E:73:A3:3B:48:D5:9B:F0:45:45:F6:18:1E:A5:7A:DC
            X509v3 Authority Key Identifier:
                keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:03:3f:a1:da:b5:3c:53:c9:38:a2:d1:c8:58:d5:50:f5:b1:
         c7:3a:22:8e:02:e9:ff:30:4a:d6:76:77:67:44:29:2a:e0:b9:
         0f:03:98:91:e8:24:b5:d1:13:b5:a7:3b:ef:ed:07:bf:c5:07:
         c3:ab:1a:6b:16:c4:93:47:d7:5e:7b:9d:24:71:8d:42:1b:fe:
         2c:a2:99:d6:b2:f9:53:44:55:da:72:c9:79:b1:2e:76:81:88:
         b5:1c:0c:e5:dd:cf:10:03:2e:36:72:5d:90:cc:09:ac:25:f5:
         5f:7c:5a:fd:c6:9a:8d:79:98:0f:0a:b7:e6:c8:6d:4a:38:e1:
         95:55:d3:48:17:17:75:e5:3e:46:c6:2d:ba:d5:2f:36:b4:fe:
         19:d3:95:1b:ff:7c:86:cd:1d:51:48:95:f1:12:75:39:eb:ee:
         00:4b:69:36:be:16:a5:d8:de:9c:06:31:bb:55:91:c9:7c:ac:
         93:a3:1c:8e:14:a2:f2:3d:10:35:80:9d:3f:1c:f5:19:c5:64:
         17:f9:88:c7:b0:2b:f0:88:36:a0:6b:11:42:a7:2a:ea:b6:79:
         d8:9d:6e:5b:f7:50:c3:cc:8b:18:be:8d:6a:cb:98:b0:94:27:
         1e:01:05:36:9b:f8:ca:b1:9f:e6:a8:b2:13:87:3e:f8:f6:89:
         3d:90:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:29:07 2025 by rpki-client