Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File:                     7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier:          JHSeYDES/2FddPj6jbjak4lWpinNBY1KS1Hi1nRWuqk=
Subject key identifier:   9C:CD:8E:BA:1E:FA:63:47:4F:E5:C4:CE:A9:0B:31:75:48:88:17:B2
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer:       /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial:       01974E58480643430A6B5F49938390624F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number:          0907
Signing time:             Sun 08 Jun 2025 07:01:37 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:37 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:37 +0000
Files and hashes:         1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: 4wOGgicZNeJ3k8VjfbjePqR88CjD0ERyf3ukP6DOGdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:58:48:06:43:43:0a:6b:5f:49:93:83:90:62:4f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
        Validity
            Not Before: Jun  8 07:01:37 2025 GMT
            Not After : Jun  9 07:01:37 2025 GMT
        Subject: CN=9ccd8eba1efa63474fe5c4cea90b3175488817b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cb:20:94:36:fc:a3:d6:18:09:21:2b:4a:9f:
                    38:cf:8e:cb:fb:fb:22:b3:19:3c:3c:d1:bc:73:e9:
                    b6:41:3c:ba:9e:8d:0c:a6:e4:2e:b6:41:ef:93:1f:
                    6c:2a:4b:ba:6e:8f:22:3e:b6:1c:e5:68:36:43:7c:
                    5b:a7:2e:b4:10:08:7a:54:64:2e:b4:a3:ed:de:8e:
                    0d:45:c5:fd:37:25:d7:14:fe:2e:f6:33:6f:38:c3:
                    7c:11:95:5c:73:6b:d8:42:75:eb:4f:80:08:52:e5:
                    6a:2d:e2:b2:19:b2:ef:44:8b:05:ab:f2:76:18:dc:
                    ea:d0:2e:42:3f:85:14:66:ec:e0:6e:06:19:be:ff:
                    e8:de:de:78:f8:f4:07:08:5b:ed:f3:50:74:9c:b8:
                    60:6d:8d:0a:4d:29:92:4f:e9:8e:05:12:07:0f:3c:
                    a1:82:90:9c:a2:24:e2:8d:90:1c:1d:c8:9c:97:b2:
                    00:50:93:60:60:da:2e:59:ff:72:94:e5:d8:78:3f:
                    8e:27:59:03:0e:0e:1a:16:91:92:ea:c8:d3:53:ff:
                    2d:e7:fe:2f:75:83:dd:e5:6d:9d:43:49:e4:bb:fe:
                    54:90:0e:73:13:cf:3e:9b:be:9e:a2:9d:13:85:a7:
                    10:66:42:30:e2:74:a3:79:65:ec:d8:91:5e:37:28:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CD:8E:BA:1E:FA:63:47:4F:E5:C4:CE:A9:0B:31:75:48:88:17:B2
            X509v3 Authority Key Identifier:
                keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:92:71:1c:e3:c1:b0:4c:9a:2f:fd:df:6c:85:07:54:27:
         97:4b:4f:c5:79:75:1e:08:28:e3:63:b9:ed:da:e2:44:85:1b:
         2e:5a:d4:27:30:23:65:de:3a:34:39:33:1f:93:3d:d2:60:a3:
         ea:ba:e7:30:44:a3:f0:53:eb:2d:fa:d6:0e:47:c6:b2:a5:91:
         8f:87:a1:54:68:01:39:98:06:62:c7:47:9d:85:51:52:a8:c9:
         05:5e:20:0e:5b:a4:2e:e5:3b:6a:2f:1d:27:5b:27:54:f1:e8:
         0c:14:68:e3:c1:9f:cd:c6:00:e7:11:27:54:ac:3b:98:b3:e8:
         7b:c6:12:64:5d:b2:19:e1:d8:49:32:b0:11:86:f6:97:d0:2e:
         88:48:ed:d2:6d:ff:91:00:e8:d3:c9:49:29:c3:4f:d9:71:ce:
         00:4c:cc:c5:ea:62:30:76:06:f7:27:d4:24:ee:e3:cc:2d:0a:
         d4:ab:92:be:57:cc:e1:ed:6c:1a:c8:92:43:4a:39:e3:81:72:
         ad:ae:99:e8:ff:8c:9e:36:69:67:0f:d1:38:50:a9:3e:de:c4:
         c2:6b:0f:3a:2e:e9:7d:fd:68:d0:9f:b6:35:76:0e:63:72:66:
         8b:79:c8:90:13:ab:ab:aa:f5:f4:62:78:d9:af:ec:3b:41:56:
         e5:b9:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:25:29 2025 by rpki-client