Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          5u6va+rVxiYX6QeXy8fskRSy0vr+LPcYjmiGBqUD400=
Subject key identifier:   E1:C2:CE:5A:68:D4:52:B3:EB:58:0C:25:E5:76:5C:7E:5A:22:BF:0C
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       019748FA4F7D44988F2241F7B70DD5A2351E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          10C1
Signing time:             Sat 07 Jun 2025 06:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:53 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: 29dngTFZlEI7tNyPEymvVf8Wf33FijNiTCV5138O4Wg=)
                          2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:4f:7d:44:98:8f:22:41:f7:b7:0d:d5:a2:35:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Jun  7 06:00:53 2025 GMT
            Not After : Jun  8 06:00:53 2025 GMT
        Subject: CN=e1c2ce5a68d452b3eb580c25e5765c7e5a22bf0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:91:a6:3a:40:59:20:6c:f6:c4:6c:8d:b1:
                    fe:8e:ae:bc:1e:8d:41:9a:f5:db:36:fe:e0:44:ac:
                    90:20:5c:c6:43:ec:61:e9:ec:18:bc:30:a7:ca:2a:
                    83:5a:ff:42:1a:bc:db:8a:ea:f1:49:45:bf:55:6e:
                    75:b6:39:42:ae:f3:db:70:e9:53:1a:16:60:e5:f1:
                    f1:1e:55:86:d0:31:78:e5:69:de:86:19:96:28:5c:
                    e6:52:09:69:f4:0d:d1:9c:61:de:7c:4d:49:63:dd:
                    05:0f:cb:16:51:6f:92:3a:1d:d7:f1:c5:9b:d2:20:
                    ad:02:d9:ca:20:a8:02:91:4c:bb:0d:99:c8:f1:7e:
                    89:a3:a5:ff:cf:1b:07:87:e9:15:07:d0:8b:83:f1:
                    53:9c:8e:ed:85:c0:eb:f2:4f:16:b4:8f:d9:9f:fb:
                    f5:ff:a5:8b:73:ea:7a:9b:0e:01:f7:a2:b6:e9:69:
                    2b:9a:9d:05:46:c9:1c:5e:33:5d:20:30:a3:41:19:
                    cd:e9:fd:c3:26:78:e4:53:13:61:b7:45:f9:17:a3:
                    fd:af:a9:b9:27:0e:81:36:96:64:49:36:1d:76:2a:
                    92:80:9d:5f:a3:3e:dc:fc:e4:3e:07:88:53:cb:3c:
                    2a:f0:75:0a:6c:2c:bc:44:94:fd:20:b7:f5:52:f2:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C2:CE:5A:68:D4:52:B3:EB:58:0C:25:E5:76:5C:7E:5A:22:BF:0C
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:4f:55:1d:1c:fe:e2:9d:54:ee:e0:52:a6:94:8c:c3:30:cc:
         e6:0c:57:13:4b:6d:e1:4b:ad:9b:d2:98:47:dd:e8:3c:c1:5a:
         b1:21:8e:87:f2:f6:f7:1d:ba:02:81:dc:44:e2:a6:0f:2b:57:
         6b:80:49:e1:71:bf:26:0e:93:3e:2e:e7:08:6b:6f:71:10:d0:
         67:9f:95:3e:84:fb:35:a4:18:9b:36:7b:e4:55:7c:9b:9f:e3:
         88:a3:4a:0d:ee:38:b9:50:bd:c7:4e:88:e8:5d:cc:18:1b:2c:
         34:e1:7b:68:05:b6:1e:74:89:8b:07:a0:7d:c3:da:d0:9b:0f:
         9d:93:62:b0:4a:26:5b:f8:84:f8:54:55:ea:ba:b2:51:9e:9a:
         3b:90:9f:87:7e:d8:d7:8c:86:a4:94:ea:69:07:55:0f:a1:c9:
         bb:e7:5f:de:7a:fc:5d:08:74:a9:93:d4:fc:45:42:a5:e1:c2:
         5e:10:15:9c:85:41:46:e7:67:87:00:c1:62:ad:4a:a2:84:c9:
         4b:c9:53:b0:7b:8c:ca:a3:61:a2:74:34:a6:c2:67:a5:8d:d0:
         6c:e0:51:ac:fd:b6:a2:ea:ca:40:79:18:ba:8d:2f:2d:4a:f5:
         19:a6:77:9e:43:98:2e:44:93:ca:cb:b7:0e:87:df:59:d4:51:
         c0:bf:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:38 2025 by rpki-client