Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          PR2Izsbx/z25g6auPL26W12j++R8RkOy3tTwdf6sPX0=
Subject key identifier:   7B:EC:C9:38:80:81:33:A3:E2:B0:DF:2D:86:D4:23:9A:2C:98:D9:8F
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       0197B6A12CA578A690883ED482B4436F46E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          055D
Signing time:             Sat 28 Jun 2025 13:01:45 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:45 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:45 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: BbHK23Cw0wsIg0ETmF0xCvIzyIGBbZ/MaOCRIqT4m6c=)
                          2: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (hash: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:2c:a5:78:a6:90:88:3e:d4:82:b4:43:6f:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Jun 28 13:01:45 2025 GMT
            Not After : Jun 29 13:01:45 2025 GMT
        Subject: CN=7becc938808133a3e2b0df2d86d4239a2c98d98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:10:2c:34:f9:31:13:24:6a:9f:59:f2:c7:
                    c3:7a:c3:50:b4:16:58:34:80:e5:1e:10:ec:67:8f:
                    26:22:f1:9a:5a:94:50:35:a3:08:ee:66:65:ac:f8:
                    ad:8f:0f:66:08:df:2e:e0:d1:36:eb:81:76:f5:47:
                    e7:bb:7e:89:d5:e3:d8:82:a2:43:f3:f1:97:c4:71:
                    de:03:28:b3:3c:29:f6:e9:fd:b9:a7:7b:1a:14:6f:
                    14:89:ed:32:b2:ee:6f:00:ad:16:cf:e8:d4:dc:14:
                    12:83:b2:67:3c:0a:02:ed:02:33:ec:e6:9f:79:67:
                    67:9d:2f:ed:0f:4d:ce:67:e3:d1:9f:67:12:99:01:
                    74:e8:80:a5:ae:a6:9e:3d:4d:7b:4e:ac:e5:c3:68:
                    14:6c:33:4b:88:72:95:09:ae:32:b9:40:ed:f0:81:
                    e2:4e:42:81:d2:78:3f:76:3d:7f:22:75:64:28:87:
                    48:9e:ec:27:11:44:79:b3:22:bc:f0:65:08:37:7e:
                    fe:93:52:7f:32:71:6c:28:ca:88:52:90:ee:b0:8a:
                    b4:22:03:89:8b:51:bd:50:5c:de:b9:9d:9f:80:84:
                    e4:ed:c0:84:8e:df:d9:2e:41:dc:24:7d:5c:e3:39:
                    fe:dc:9a:a5:93:4f:10:d3:0d:7f:50:2c:9d:9c:18:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:C9:38:80:81:33:A3:E2:B0:DF:2D:86:D4:23:9A:2C:98:D9:8F
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:06:03:90:e5:18:13:63:f0:d0:36:b6:f9:c6:1e:ff:2c:a2:
         0b:4b:39:5a:8a:a9:cc:c7:0c:8e:f9:3a:ab:7a:b8:75:6c:84:
         05:80:49:17:e9:2f:aa:a4:37:3a:a7:f0:29:bd:32:2e:cd:9c:
         e9:eb:03:a9:35:eb:bb:8e:13:b1:fe:a5:39:c1:c4:c6:db:a1:
         45:ca:e5:e9:3e:63:95:f3:fd:ad:3e:1a:37:68:52:43:e8:b9:
         36:1a:c7:1e:7d:07:01:9b:d1:a9:9e:14:73:2b:cc:cf:24:65:
         b5:c1:07:9d:93:89:c9:b8:b2:3a:c1:ac:38:c9:99:51:97:4c:
         f2:0f:56:ed:39:5c:d6:1f:b6:a4:51:b7:d4:4d:66:be:2d:b7:
         2c:ee:d2:69:5f:c4:d7:8d:f3:7d:47:33:3f:f5:9c:79:c5:42:
         c2:89:90:fa:ad:85:97:e2:e8:bb:a4:fa:ce:16:a0:45:f1:67:
         6c:02:46:48:65:f2:53:30:93:67:ec:1d:30:2e:0b:93:07:7e:
         09:5d:78:0e:a2:a0:9a:ef:b7:a2:9f:38:df:d5:01:70:bd:41:
         2a:5e:48:45:c6:18:fa:89:d1:4b:1a:fd:b4:36:af:3e:56:68:
         75:1e:ec:37:bc:da:e0:df:32:19:65:a0:38:65:d7:c0:4f:75:
         99:8e:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:12 2025 by rpki-client