Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File:                     aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier:          AS4Ey1EPJR+5WKplGISgnx/ngEIH0zvjPIm0RhnzbHA=
Subject key identifier:   7E:AB:F9:CC:27:06:EF:1D:79:C6:C8:1F:E6:9A:F9:AB:39:62:D7:3E
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer:       /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial:       0197B6A17403CDC5D1E8DB3C33F98D20A06C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number:          10E7
Signing time:             Sat 28 Jun 2025 13:02:03 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:03 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:03 +0000
Files and hashes:         1: 4BPgPazxL-0_7TACTrAAB2vKcvM.roa (hash: ByHJvADYtVUpx6K/7n+qZ80ogn6pFEeZiZMcZkXwguI=)
                          2: DnTRig2ZHULz3p9wZNouYmsC9jo.roa (hash: t4VZBdK9Uss3nXT5qelMDtPowMN8UI5/vISGQexu/1w=)
                          3: FiGOQGJVQzUX0AI-kIcMSlyL5Jw.roa (hash: iNn6sg9mF+PuqzA3VDumFe63FkMkR+FoX25ZFTkc1KE=)
                          4: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: rW1CvJraYm49BoGeoIJc1id53yxkcUWDqXFLkgSKMuI=)
                          5: psb7_FoF9tBnDB6tY5GqWOvVJFk.roa (hash: VNe9Mli14Tvo817wNnFl35Vg2+YLvG6cgRRigjOYMS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:74:03:cd:c5:d1:e8:db:3c:33:f9:8d:20:a0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
        Validity
            Not Before: Jun 28 13:02:03 2025 GMT
            Not After : Jun 29 13:02:03 2025 GMT
        Subject: CN=7eabf9cc2706ef1d79c6c81fe69af9ab3962d73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:72:87:8f:50:91:a8:b4:15:e6:66:97:42:
                    d5:c3:25:04:90:ed:aa:2f:31:60:51:91:8f:f9:22:
                    2b:ef:5c:88:dd:0f:66:3a:d0:70:0c:a6:81:2f:a7:
                    d5:3e:22:b3:d6:3b:d8:30:1e:61:4d:69:75:f5:34:
                    f9:db:ff:25:0b:04:75:0c:3a:b1:22:40:5b:3a:23:
                    b7:91:97:6d:62:07:1a:bd:95:a6:61:61:56:83:ef:
                    8b:0f:a8:dd:51:fb:bc:e8:d6:69:2b:89:b5:76:d7:
                    1e:2e:4b:13:72:49:d7:89:be:e1:97:0c:bb:30:18:
                    48:ef:c9:19:46:3e:7f:77:23:74:c5:8b:c0:73:a2:
                    b8:94:6a:69:5c:23:e7:6f:25:70:1e:35:93:68:88:
                    54:b5:76:fc:97:41:18:dd:54:be:29:64:4b:c3:68:
                    4f:aa:2d:18:e4:03:bd:22:4a:eb:e8:b9:67:20:24:
                    68:90:f5:d6:e7:5e:1e:d0:d9:2d:e1:35:6c:22:9d:
                    c9:20:52:10:12:f4:d1:ac:d5:b9:13:cf:c2:c1:18:
                    54:b7:5a:a1:bb:2f:c9:95:62:de:1b:9c:be:e7:e0:
                    31:a8:6d:f6:49:88:86:3a:52:58:3c:e4:dd:05:a1:
                    e8:66:23:c2:82:8e:4a:2b:38:2f:c8:12:14:d6:a1:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AB:F9:CC:27:06:EF:1D:79:C6:C8:1F:E6:9A:F9:AB:39:62:D7:3E
            X509v3 Authority Key Identifier:
                keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:43:15:0d:10:c4:ee:b9:a9:11:4c:33:36:7d:60:ab:d3:51:
         28:35:75:d9:67:a3:fa:d3:ee:89:bb:e4:54:b4:3f:0d:9f:73:
         ad:a4:bc:66:65:da:44:d5:11:0e:72:f3:56:5a:9e:db:f4:2c:
         70:df:98:b6:89:62:92:fb:ee:dd:89:a6:0b:bf:2d:9e:e1:3c:
         84:2e:ab:4d:9a:5e:99:e5:2a:85:ad:dc:79:d5:61:66:c1:5a:
         b1:70:0a:e6:ab:7e:8d:db:27:e4:bd:0c:2c:32:78:52:16:ca:
         16:f0:b7:15:91:a7:a9:ff:74:4e:ca:3c:c5:2a:60:95:d3:c8:
         48:65:b5:23:20:7d:cf:0d:48:a5:bd:b1:34:1d:9d:ed:4b:16:
         83:19:49:dc:0e:49:bf:7e:65:00:56:e7:54:63:1d:cd:ef:76:
         1a:9c:21:9a:ff:b1:17:db:a9:44:fb:7d:94:5a:b1:2b:fd:1b:
         bf:35:55:2f:1d:dd:26:79:ac:d1:0c:b7:e4:c7:36:da:24:7a:
         cc:a6:cb:70:ef:ad:30:eb:6f:c5:60:f9:3c:7b:54:3b:bc:19:
         61:bb:65:63:d2:a4:0e:dc:d2:76:5d:d0:f0:24:6b:f4:e0:59:
         e1:81:68:2b:2c:bc:eb:97:a9:7f:42:25:a1:4a:cc:0b:a7:7c:
         10:5f:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:19 2025 by rpki-client