Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
File:                     MeD5m83M1__nK9NcNEvNAy_3T3M.mft (raw, json)
Hash identifier:          etZNyedKjud0wTcn6+mGNkYiODWl+thgDsJ2KuvIY4w=
Subject key identifier:   0C:4E:5E:E9:7F:BC:CE:76:32:6D:29:E0:45:58:9F:20:1D:DA:CB:62
Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
Certificate issuer:       /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Certificate serial:       0197B8C5E80F0504DF3CF3D66A9DDD94BCAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
Manifest number:          07AA
Signing time:             Sat 28 Jun 2025 23:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 23:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 23:01:07 +0000
Files and hashes:         1: MeD5m83M1__nK9NcNEvNAy_3T3M.crl (hash: Q1CAQyadMFjRL/SZ2mAuv/DuuKXH7jbWo1SMOHk2IDw=)
                          2: QErrhrzU2U7UlCrmA1T2T22i6Ew.roa (hash: ACC19M63SD4NWKmr69RvxEazwjXMuUP+D1rGLIBn6no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:e8:0f:05:04:df:3c:f3:d6:6a:9d:dd:94:bc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
        Validity
            Not Before: Jun 28 23:01:07 2025 GMT
            Not After : Jun 29 23:01:07 2025 GMT
        Subject: CN=0c4e5ee97fbcce76326d29e045589f201ddacb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:70:6e:b0:2c:f9:17:92:d1:e1:be:b5:02:
                    8a:44:7e:20:fd:55:9c:d8:47:b2:ce:12:da:17:ef:
                    40:64:8c:5e:cf:9d:74:76:63:b6:02:7b:bc:00:3c:
                    e6:7b:cc:92:4f:1b:b3:c5:ce:f5:60:0b:14:18:fb:
                    d9:78:1f:1d:0f:97:e6:91:7c:b1:c4:74:9d:3a:33:
                    17:6f:b7:5a:c9:58:8f:cc:c6:92:5b:b8:0f:c5:0c:
                    53:95:57:ea:be:b5:92:97:b8:43:9b:ed:b8:58:b5:
                    d9:8e:29:e2:6e:96:5b:2c:9b:ed:1c:9f:36:ef:1d:
                    32:8c:cb:84:7e:4d:40:a7:4c:0b:8d:24:2f:78:99:
                    68:e6:a3:a9:c6:eb:59:34:eb:fe:6b:ce:f7:7e:c3:
                    1b:de:40:9f:83:b4:59:b6:f6:fb:70:b3:e2:96:92:
                    ca:65:72:55:3f:d6:00:4e:4f:b8:1e:fe:d4:2b:9a:
                    51:85:cd:06:d5:57:58:d2:6d:30:f4:a2:30:19:c3:
                    a8:8d:86:d0:d9:8f:aa:19:c2:b2:fe:9b:04:ce:c4:
                    10:52:61:a1:cd:30:21:86:7e:e1:01:d9:ca:17:5b:
                    a9:96:e6:ff:d2:e1:43:bb:df:bf:58:95:bf:49:ea:
                    bc:fa:c8:f7:20:1b:03:81:c7:de:20:af:47:7c:80:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4E:5E:E9:7F:BC:CE:76:32:6D:29:E0:45:58:9F:20:1D:DA:CB:62
            X509v3 Authority Key Identifier:
                keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:05:90:a7:45:c1:ad:a2:80:9e:2f:06:81:99:eb:df:16:fd:
         49:fd:bf:e3:80:f9:b4:87:56:53:2a:a5:57:a3:57:f1:0d:b1:
         52:66:45:f4:a0:ec:1c:9c:6b:d5:e9:03:0c:7d:cc:9e:34:21:
         8f:75:1d:44:28:4b:51:dd:ab:54:4b:fd:f2:b1:d7:ae:b4:59:
         32:62:d6:47:02:e5:bf:db:14:fb:c4:b6:40:a2:e4:78:90:34:
         cb:2d:af:f8:ed:7c:fc:d7:8f:8a:75:f3:1f:cd:d7:e8:1b:86:
         57:c2:1e:c1:e9:b2:ce:a8:e1:40:2d:77:64:9b:fa:68:74:3f:
         3a:71:35:fd:00:24:50:69:67:27:f8:b2:9e:0a:fc:b8:33:2c:
         a9:cf:e9:28:1c:19:d5:e5:b1:ce:a0:1e:bd:2d:e4:c4:0b:de:
         63:ba:82:e4:bd:f0:70:54:73:9d:91:a4:3e:a8:3d:a4:71:98:
         ba:7f:f7:7e:a3:21:57:27:fd:d9:af:ae:66:a7:fe:51:96:ec:
         be:3d:c2:b3:ec:3d:f9:02:42:95:fb:ce:cd:44:af:50:02:8a:
         57:d5:d7:d5:70:5c:4c:98:74:5f:d9:d5:27:91:01:b3:dd:7a:
         38:3b:f6:6e:75:1d:aa:76:a1:c2:f7:43:61:58:87:f8:92:f8:
         8e:82:b3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:57:12 2025 by rpki-client