Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File:                     7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier:          Y0cF6ZAjr1xb2BczlbfTRIA2NkUUZnsHEjPFKje18O4=
Subject key identifier:   E4:A2:DE:8B:89:8D:D8:A0:17:D7:95:2A:75:46:A4:BE:EA:A8:7F:EF
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer:       /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial:       0197B96AF70F15100288BDC50D8D16B46759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number:          0C96
Signing time:             Sun 29 Jun 2025 02:01:24 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:24 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:24 +0000
Files and hashes:         1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: pJb6dgSAzFhzi6fJ4s3qcgvGsUbwPW4Tfp0XIolZQgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:f7:0f:15:10:02:88:bd:c5:0d:8d:16:b4:67:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
        Validity
            Not Before: Jun 29 02:01:24 2025 GMT
            Not After : Jun 30 02:01:24 2025 GMT
        Subject: CN=e4a2de8b898dd8a017d7952a7546a4beeaa87fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:fc:8e:9d:ad:de:f2:18:e7:b9:52:e8:ad:
                    96:48:2c:97:6f:8e:1f:b6:37:64:ca:16:c1:e4:31:
                    c3:04:fc:37:e9:34:ab:d3:2e:ff:c0:89:7d:29:29:
                    6b:b5:47:d1:b1:74:7d:4b:b7:00:df:62:f6:c3:a4:
                    b3:1f:23:45:dd:3c:b8:35:f3:82:60:4b:cd:e4:65:
                    31:84:13:80:c8:f2:f0:26:39:1a:92:5c:c1:8a:41:
                    69:79:23:98:11:a9:45:74:e6:1b:c3:45:18:10:b9:
                    53:2f:03:1c:f7:21:0a:6c:45:9f:10:b6:03:bd:08:
                    b4:c5:da:76:09:b7:b7:04:5c:cb:c1:f8:c1:10:cc:
                    08:13:be:10:22:05:11:37:de:44:0e:b1:ac:7a:ff:
                    6e:d4:d1:07:56:59:46:db:18:ab:1c:93:64:ca:83:
                    0b:97:ed:ea:b8:53:0d:ea:4a:bb:af:77:ee:ca:0f:
                    e8:14:48:8d:63:75:8d:82:7f:eb:b0:8c:68:7a:9d:
                    43:e8:02:e9:44:31:07:c6:bb:22:48:2f:5e:2f:6b:
                    25:37:bf:81:f2:f6:a8:41:f5:8c:d3:f6:f8:b5:9f:
                    03:de:36:7c:ae:0c:88:75:ee:85:6b:68:2b:2a:de:
                    a5:b5:26:75:4f:e8:06:e1:04:e7:91:66:40:0b:83:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A2:DE:8B:89:8D:D8:A0:17:D7:95:2A:75:46:A4:BE:EA:A8:7F:EF
            X509v3 Authority Key Identifier:
                keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:42:a0:b4:06:65:f6:0a:fd:91:57:f8:2e:53:20:78:52:17:
         d4:c8:36:b1:8d:b1:4f:7e:e7:7b:0a:7c:af:2f:96:87:2f:05:
         40:c7:69:de:c7:5a:f6:89:3a:5e:9f:a0:86:77:4e:a6:c8:25:
         76:59:4c:88:12:c6:68:b6:51:90:d8:c8:da:9c:66:4e:e1:68:
         38:10:53:ec:74:49:30:02:01:4e:98:32:58:0b:a1:ec:7e:b7:
         b0:0d:a7:6a:e3:48:8e:4a:a5:a6:bf:e2:5d:df:97:4d:a0:e4:
         73:ba:f6:ad:7c:e7:3e:0a:38:84:4e:f3:62:73:5c:d4:03:6c:
         09:42:ca:f9:7c:cc:35:27:71:0a:26:fd:01:3f:44:27:c1:8b:
         07:00:4d:3d:3e:f7:e3:6e:61:ed:75:c1:c0:38:06:c2:c4:ef:
         97:1a:b9:44:62:5e:1d:96:a7:d7:59:24:0d:90:65:45:ed:5e:
         2a:07:9e:48:4a:94:18:24:23:da:68:88:cb:f3:82:a8:4a:91:
         bd:db:5c:64:0d:f3:03:74:28:d8:29:be:02:80:03:14:bb:03:
         ed:8d:39:4c:f0:64:ce:bc:7e:f3:ee:60:06:bd:a1:7f:8d:ee:
         9d:39:81:39:a9:0e:78:36:74:28:60:fa:40:cf:55:ae:f1:76:
         4a:6b:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:07:10 2025 by rpki-client