Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File:                     zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier:          D1igNOh5j2Humhg2h31/+MhHtmPCbVzksA1A0FghLi0=
Subject key identifier:   E3:5A:A0:22:E1:40:BE:13:E3:9A:BF:1B:F9:B3:8A:D2:BA:A0:47:7B
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer:       /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial:       0197B77C8377DFA4B92F8C96A9FE1999A0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number:          0726
Signing time:             Sat 28 Jun 2025 17:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:20 +0000
Files and hashes:         1: 7d2f98bHzqHWx5M7oEXVyJyz8B4.roa (hash: WP0mtIYc1sSiT/bxjFMuO4V87PtcesycNrQ76Yhzw5U=)
                          2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: NRqAEIvYpCYSEpWWxiRr/vC1adXAqqnGswe0R8trkXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:83:77:df:a4:b9:2f:8c:96:a9:fe:19:99:a0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
        Validity
            Not Before: Jun 28 17:01:20 2025 GMT
            Not After : Jun 29 17:01:20 2025 GMT
        Subject: CN=e35aa022e140be13e39abf1bf9b38ad2baa0477b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:88:a0:63:66:9a:59:05:19:be:6b:84:7f:
                    dc:c6:8c:3f:a2:88:e2:a8:a2:97:6b:81:c5:b9:a6:
                    a7:5c:63:3d:28:88:3c:32:2c:6f:2c:ee:b1:0d:6a:
                    90:48:88:c8:61:da:24:29:49:55:85:c3:fb:fe:09:
                    ea:3e:8c:6f:ff:3e:c8:e3:11:0c:81:dc:3d:a0:f2:
                    69:07:28:a6:eb:a5:80:7d:76:1e:10:4b:86:55:d0:
                    29:59:27:39:f9:3a:11:4c:09:a5:38:33:5d:de:af:
                    b8:e9:77:ea:e8:60:47:0f:d9:31:70:f9:a0:6d:8f:
                    28:13:ab:fe:b5:9d:19:49:1f:c0:86:ed:37:e3:20:
                    a7:a5:f5:5f:1a:04:e7:04:cc:a9:18:a9:67:19:47:
                    bc:d0:ad:dc:23:62:49:29:ea:e8:03:66:84:7f:34:
                    b9:62:d7:9d:ef:b5:07:f9:e6:a8:61:51:49:d6:8e:
                    d0:f3:df:c0:23:c0:70:a8:e6:ee:60:6d:ad:40:3b:
                    01:71:f8:81:70:e1:3f:47:64:38:48:ea:02:db:e5:
                    b5:dd:ee:06:d2:5b:fe:15:64:1a:54:c0:74:37:32:
                    c6:bc:e9:7c:bf:e9:e1:ef:d8:86:ef:c2:9b:4b:91:
                    69:6b:a8:a7:4f:bc:dc:39:09:8a:29:89:41:08:e8:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5A:A0:22:E1:40:BE:13:E3:9A:BF:1B:F9:B3:8A:D2:BA:A0:47:7B
            X509v3 Authority Key Identifier:
                keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:c1:a8:67:00:51:c4:38:95:75:ca:35:23:12:2d:73:10:
         35:dc:4a:22:c1:19:dd:b0:e0:3a:ed:6e:97:70:be:82:15:6f:
         b2:43:60:8c:a2:e6:b4:19:7b:09:d8:06:96:10:a8:21:ff:35:
         57:5c:f4:74:64:4a:8c:d3:96:83:ac:59:b2:1f:a3:3e:c4:53:
         e3:57:ba:bf:a6:ae:0a:ce:8b:54:5c:45:c9:3f:94:74:a8:4e:
         f1:44:57:dc:13:f9:75:6b:ec:b2:84:fb:7c:d5:15:21:c3:e2:
         87:4a:f4:00:fc:21:fe:fe:91:4e:df:c2:ac:e1:29:83:a9:8a:
         ab:cc:ed:40:bb:c9:06:59:63:99:40:b7:0b:2e:5c:57:8d:08:
         0a:92:b5:57:11:1d:9c:86:a5:c3:f2:a0:89:d3:eb:7a:94:10:
         8f:20:ef:89:3a:47:f0:ce:2f:91:2b:b1:95:48:bc:aa:51:a3:
         ea:05:f0:69:66:3b:fb:10:68:d4:22:0f:65:d4:d2:00:cf:b6:
         e5:ff:b1:72:47:78:f2:ca:f7:0f:30:46:e9:e2:c4:d9:a5:56:
         80:16:64:2c:67:30:c5:5b:8d:de:e2:b5:22:a9:85:83:64:f5:
         a8:2e:35:b5:3e:30:21:19:09:af:74:86:d0:c3:86:ba:ee:e5:
         f7:ed:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:10 2025 by rpki-client