Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File:                     7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier:          7LsGVmzuw4Qtw4agsviZDwii6JwyV4XYwSRu7dfIb7E=
Subject key identifier:   FB:92:1B:8F:8C:AD:54:96:95:04:AD:13:54:4B:3F:B7:F3:7B:46:7F
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer:       /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial:       01974DE979F9BE99259FCD9EC3A2CAC952C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number:          0C4B
Signing time:             Sun 08 Jun 2025 05:00:35 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:35 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:35 +0000
Files and hashes:         1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
                          2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: z8ZGkXG+PVaDA92BPC6EucxnB0U/A/8G+vs+Bodt7SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:79:f9:be:99:25:9f:cd:9e:c3:a2:ca:c9:52:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
        Validity
            Not Before: Jun  8 05:00:35 2025 GMT
            Not After : Jun  9 05:00:35 2025 GMT
        Subject: CN=fb921b8f8cad54969504ad13544b3fb7f37b467f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:0c:13:d4:d1:e6:de:1a:03:20:c8:e0:c7:
                    ab:ee:33:21:ae:c8:80:f2:fd:67:14:34:95:88:dc:
                    cc:75:7c:b8:e8:ba:7f:82:53:2b:6f:ca:39:17:45:
                    46:12:48:8a:f9:73:99:28:7f:93:a0:9d:4a:3b:c3:
                    33:5f:d9:b8:1f:ff:48:4b:ef:96:b9:c8:27:67:9f:
                    4c:8d:b1:46:16:4c:29:73:c8:73:28:36:bb:19:41:
                    66:a6:ee:da:81:bb:e4:89:43:bf:8a:d5:a6:36:34:
                    69:23:93:0c:0b:66:fa:4d:57:65:d2:c1:44:87:21:
                    a2:dd:eb:16:71:27:4b:0d:c5:c1:c9:ef:d1:f1:61:
                    87:5f:e4:13:61:ec:e8:4f:6e:a6:57:6b:05:08:5a:
                    4d:c5:9b:10:6f:e6:62:c8:22:fb:22:24:3c:e5:95:
                    cc:a9:d1:b5:3f:c3:55:f7:58:db:b7:60:9a:3f:b6:
                    01:0d:f5:f3:42:b2:7c:b5:de:b9:e0:d2:2c:0d:d0:
                    d9:a9:e2:c6:b5:f1:7c:30:61:b5:09:69:05:47:97:
                    48:e9:b0:75:ac:4b:b4:1f:79:08:7f:d8:6a:71:98:
                    a6:35:60:06:e9:a7:82:0c:63:07:92:aa:ae:6c:e2:
                    0c:25:17:66:95:98:fe:ac:93:ce:c0:b0:79:37:81:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:92:1B:8F:8C:AD:54:96:95:04:AD:13:54:4B:3F:B7:F3:7B:46:7F
            X509v3 Authority Key Identifier:
                keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:6e:2a:92:da:d7:af:3b:53:f8:93:29:3e:31:b1:39:ee:
         ca:5c:8b:da:b6:3f:92:75:de:72:02:bc:dc:cf:b7:7b:ea:d8:
         d5:5c:a4:ba:16:e2:0a:00:a9:06:2a:30:c4:aa:d9:45:9f:8a:
         5c:83:4b:50:46:7f:f9:2e:3d:e7:37:0e:b2:17:9a:00:64:27:
         01:0f:8c:ff:78:57:2b:74:79:8f:e6:59:aa:1d:89:22:95:0e:
         a4:1c:4e:b8:bc:c1:f5:89:af:58:51:de:4f:4e:07:cc:a3:c9:
         00:10:17:72:f9:05:11:7e:e0:6f:4d:20:22:66:63:02:7b:18:
         0e:96:99:af:59:80:c4:6f:8f:9a:37:3e:71:c2:10:0f:20:93:
         7b:f2:28:c4:e9:8c:1d:cb:c2:c5:3d:c4:52:f1:62:d6:94:16:
         3e:35:42:be:13:fe:4b:40:e0:81:8d:90:48:cb:86:39:ba:82:
         44:01:37:f9:a1:2b:f6:f6:9d:ec:9c:ae:6a:22:2b:03:76:bc:
         05:50:e9:9b:6e:a7:d6:04:8b:11:6f:77:3f:60:45:95:fb:21:
         b1:3e:5b:6f:79:0d:50:ab:51:63:80:c8:f6:fd:41:f4:36:ef:
         f8:03:08:8e:91:d1:cf:05:fe:c5:93:0b:c3:4d:71:0b:4f:d3:
         0d:ef:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:51:52 2025 by rpki-client