Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File:                     7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier:          lub9QGXiZwGRRv09hKoWWgFlEstDESW4rROIkeeSmFc=
Subject key identifier:   00:3E:26:A3:D8:E9:EB:57:8B:87:7E:4D:1C:86:41:12:43:54:F6:85
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer:       /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial:       0197470BF87B46D87A6901A25DACB71F9A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number:          114B
Signing time:             Fri 06 Jun 2025 21:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:56 +0000
Files and hashes:         1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: E379gnBK5QwuuaXU9n1qKGaDgvvVZNHnOQXIazOLC0g=)
                          2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:f8:7b:46:d8:7a:69:01:a2:5d:ac:b7:1f:9a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
        Validity
            Not Before: Jun  6 21:00:56 2025 GMT
            Not After : Jun  7 21:00:56 2025 GMT
        Subject: CN=003e26a3d8e9eb578b877e4d1c8641124354f685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:b4:46:6e:0e:fe:e4:79:6c:15:04:59:a9:
                    9d:42:b8:40:61:a0:2c:54:02:57:c3:bd:87:08:05:
                    af:8d:cb:58:3a:fa:10:40:30:3e:53:34:43:b3:fe:
                    13:97:da:61:aa:a8:ac:20:45:f7:a7:ba:c0:eb:99:
                    7e:1c:b3:0e:3b:05:54:9f:81:41:27:5c:2d:29:64:
                    19:93:4b:c3:73:7b:53:77:5b:b7:3b:e9:dc:e6:23:
                    06:1d:f4:85:62:a0:a9:40:76:12:e3:37:db:0a:18:
                    7d:11:ff:f7:e5:1e:28:d7:b5:0e:fa:47:65:17:d1:
                    f5:fd:c5:bf:e4:dc:5f:3b:3c:2a:26:f4:17:b3:2f:
                    54:c0:4f:46:3a:f6:fd:49:4b:f1:8a:99:a9:a7:5e:
                    10:1d:76:fa:a8:b3:1c:af:61:bd:ff:f0:89:e4:84:
                    d3:bb:4b:3c:ee:af:cc:a5:21:c4:50:72:6c:44:61:
                    2f:d7:9c:d4:9e:1b:b9:8c:6b:97:f3:2f:a0:35:9b:
                    f3:1e:1a:98:f4:e8:69:cc:c9:18:48:89:3e:a2:b0:
                    d1:30:e5:65:56:20:e9:52:85:b3:eb:33:b5:51:c9:
                    39:7c:2e:25:9c:14:5a:3c:0d:69:e1:24:37:d5:26:
                    e6:bf:5f:67:f3:2a:39:1f:1e:92:93:ce:70:80:05:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:26:A3:D8:E9:EB:57:8B:87:7E:4D:1C:86:41:12:43:54:F6:85
            X509v3 Authority Key Identifier:
                keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:43:01:00:68:8c:ec:03:e5:61:64:e6:2f:d7:e5:f5:d8:
         79:19:58:31:6b:2a:0f:48:75:aa:ac:a4:b6:3b:65:c7:b4:f3:
         90:63:55:a9:48:36:ba:f4:9d:67:d7:a4:6c:ee:4a:2b:6b:a6:
         06:6d:6b:e0:2d:b9:08:51:e8:af:94:29:c0:ca:c2:d3:db:fa:
         95:35:16:b2:de:98:5e:d3:7a:7e:e2:1f:e7:05:0b:5c:2b:59:
         a0:78:8b:6f:0a:53:ed:12:58:1e:1a:5c:b7:61:db:8b:7a:36:
         4e:d9:05:21:82:0c:43:e5:df:fe:33:46:8b:eb:e7:26:f2:59:
         ce:62:f9:4c:17:c4:94:6f:1d:1c:9a:5f:79:0a:e9:23:12:dd:
         9d:ad:70:5e:0e:d7:9e:b2:3e:cf:c9:f9:cb:91:76:43:e0:93:
         e0:8d:83:c1:7b:3d:96:c2:50:44:09:1c:19:f5:7b:a9:00:5a:
         4b:21:ce:c6:2a:c5:c8:f8:16:7b:62:75:4e:ad:9f:72:31:77:
         cc:d7:93:4a:26:4f:40:bc:7e:f8:15:7c:af:ec:26:46:e9:51:
         c6:1a:c3:97:49:08:5c:77:a6:1e:6b:25:32:ef:87:0e:75:3a:
         00:e7:15:07:47:17:b8:55:64:5e:73:44:a4:43:cf:8a:cb:d2:
         cf:e9:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:47:45 2025 by rpki-client