Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          l9hllc+lCEQMJoSWREenQQMjTauY/qBXQOs8qdhFFj8=
Subject key identifier:   62:D4:43:7A:C5:27:CF:DE:9F:7B:F6:EC:0F:0E:76:F3:6D:FA:3B:2F
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       0197B6A238E418744C4BB4F1989A2EB91156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          06FA
Signing time:             Sat 28 Jun 2025 13:02:54 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:54 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:54 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: UGUtKLRsMtYLywJj5SqbyrGM951QMOPnW8d1RZVDbpw=)
                          2: kF-CXYhPs4TYflqMBcCGyzwLA7o.roa (hash: gnSWn3nUIqjsFFoH6d5rK0RwdbfhLh+8DTBzXarX5Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:38:e4:18:74:4c:4b:b4:f1:98:9a:2e:b9:11:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: Jun 28 13:02:54 2025 GMT
            Not After : Jun 29 13:02:54 2025 GMT
        Subject: CN=62d4437ac527cfde9f7bf6ec0f0e76f36dfa3b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:21:9d:60:94:44:f4:4c:4c:a0:3b:34:7a:
                    14:81:49:32:23:cb:29:ae:f8:a2:e1:b5:14:f8:07:
                    53:8e:f4:f3:33:a3:ed:cb:c4:37:94:c0:a3:fb:7d:
                    6f:f1:65:b5:8b:4f:2c:79:26:70:c9:0d:c5:c4:cb:
                    8e:37:72:88:e9:fb:07:74:7d:8a:0f:dc:e9:d5:93:
                    0f:bd:86:23:80:35:21:af:ed:04:0f:9e:82:54:02:
                    1c:47:ed:68:2f:7a:e2:ed:ff:d4:84:e4:f4:ae:f6:
                    8f:63:1c:b6:dd:a1:c0:74:1f:c3:38:48:44:90:c8:
                    21:a4:d1:30:0d:d8:12:3b:ef:7d:30:b3:f7:45:e2:
                    ad:04:e5:cb:9c:39:cb:b6:07:cb:19:76:a4:7c:53:
                    2d:01:3a:25:3e:23:9c:96:a3:bc:a9:92:49:ca:96:
                    d3:eb:76:d9:f4:3a:f2:78:e4:a7:b5:50:8b:be:ab:
                    79:ff:af:d3:19:9c:a4:a3:11:51:cb:16:b8:5b:ab:
                    44:6d:23:bc:a6:3b:67:ee:cc:f5:db:7d:cf:5e:3e:
                    4d:0c:18:bb:44:9d:df:fb:1b:cc:c1:81:23:19:cb:
                    0e:dc:ad:53:3e:ef:36:de:99:22:d7:6a:80:25:34:
                    65:b2:77:4b:d8:da:31:e3:b2:04:b4:61:fc:f9:48:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:43:7A:C5:27:CF:DE:9F:7B:F6:EC:0F:0E:76:F3:6D:FA:3B:2F
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:b8:83:a4:09:b7:b5:6e:2e:a5:e6:65:5e:2c:bd:36:63:
         7f:e3:09:a9:ff:54:6c:f8:f0:f6:61:7c:9c:c2:e5:d1:49:4c:
         43:20:14:6a:5f:fe:30:eb:e6:73:ee:ac:58:a8:64:78:31:bd:
         77:2a:5a:ab:ea:f5:a2:ff:1c:4b:1c:06:e0:2b:d4:02:61:de:
         4b:df:90:33:50:f4:44:b5:db:83:7a:32:42:cd:e5:c6:52:c9:
         53:56:10:5e:8a:89:17:c6:de:19:a2:94:d4:bd:58:1e:b8:44:
         19:a4:35:ac:fb:e4:a0:4f:55:c7:94:00:f9:77:55:7a:43:82:
         09:09:cd:61:f3:e7:1b:1f:c9:34:47:95:84:ad:41:5a:49:1d:
         ce:15:79:c6:32:bf:55:8d:28:f8:e0:8b:2f:6f:52:53:7d:1e:
         b5:e3:24:86:40:35:6b:e3:18:6a:8c:10:b8:c8:98:ec:14:66:
         13:dc:80:cf:e4:7f:73:04:33:1d:55:a8:ff:c9:da:0c:fc:be:
         3e:0c:29:1b:1b:47:42:24:b3:41:0a:41:ca:e0:38:0c:eb:52:
         68:29:3a:ae:e3:55:66:f4:a5:ec:35:9f:6c:2c:9d:f7:91:cc:
         bf:c9:aa:13:45:0b:f5:3e:07:db:8d:74:74:e6:0e:c1:b1:52:
         3a:e1:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:31 2025 by rpki-client