Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier:          qdSl3LCqRrJGWa+mi0Cyek6T4Np4bYHGR3rKeKNijhA=
Subject key identifier:   00:E6:F7:EB:0C:70:3B:E4:D1:DC:D9:B2:F7:FF:FC:4D:18:0F:7D:3A
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer:       /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial:       0197B6D77889AFEDD8B042E8B180E0B642AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number:          0511
Signing time:             Sat 28 Jun 2025 14:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:03 +0000
Files and hashes:         1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: H9X+XnTtB5pUaBCBGckAo1G0sHOxg8tnnz9GlCsEbX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:78:89:af:ed:d8:b0:42:e8:b1:80:e0:b6:42:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Validity
            Not Before: Jun 28 14:01:03 2025 GMT
            Not After : Jun 29 14:01:03 2025 GMT
        Subject: CN=00e6f7eb0c703be4d1dcd9b2f7fffc4d180f7d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:ab:83:6e:5c:2e:3a:9f:93:09:c1:52:bd:
                    df:6c:0d:df:09:a0:1c:a9:b5:f0:7b:1b:5d:c4:99:
                    d2:99:8b:ff:72:bc:62:28:76:7a:1b:de:b5:76:46:
                    b7:df:33:58:7d:9e:1b:cc:45:e3:08:6b:de:58:7c:
                    db:16:57:07:82:b0:5a:f5:ea:a8:30:64:5d:19:e4:
                    aa:0b:95:d6:8f:26:d0:d6:92:8d:36:57:0a:9a:fb:
                    98:a3:a3:54:da:e5:0c:c0:56:55:b9:d3:02:65:a5:
                    0c:57:79:62:4f:5f:2e:24:cf:cf:f5:6e:99:22:37:
                    9b:e5:35:d3:d8:9e:05:d9:60:af:75:fa:66:8f:fc:
                    81:a7:6b:ed:9a:8b:d6:5b:08:ca:70:e8:65:bf:92:
                    51:27:6f:f8:dc:fe:11:b9:66:6d:78:c1:8b:06:6b:
                    c0:ac:04:25:0a:0b:fd:06:b6:bd:88:0e:c7:89:4d:
                    35:ee:79:4f:3a:0b:09:aa:a2:09:35:1b:ee:ae:78:
                    ca:c5:89:26:8d:11:6a:16:62:f3:23:1f:d5:c0:62:
                    22:1d:9a:28:3b:be:e7:34:dd:c9:82:28:38:e9:70:
                    52:33:f8:fe:ab:07:77:03:b5:c5:4a:b4:50:2b:fb:
                    1d:6b:f3:18:c1:59:06:91:d0:d3:17:f0:1a:65:1a:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E6:F7:EB:0C:70:3B:E4:D1:DC:D9:B2:F7:FF:FC:4D:18:0F:7D:3A
            X509v3 Authority Key Identifier:
                keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:06:7d:60:fb:cf:5d:e2:b8:aa:7f:6a:f7:97:0c:30:a4:
         e9:1e:0b:ed:a9:66:68:9d:49:9a:7b:c7:df:41:74:64:bb:fe:
         6e:f7:08:11:db:b1:cd:84:74:ab:d3:da:62:f2:ed:ac:97:33:
         7b:37:1e:3f:ca:e3:c3:85:ce:48:94:5c:7a:63:1a:7b:c1:71:
         29:6a:ec:d7:a5:08:a5:d1:d4:7b:4a:f2:4a:44:75:d4:ff:82:
         a0:d0:05:4c:73:cf:ba:d2:fb:fa:c1:9c:8b:ed:d2:ef:17:77:
         a8:b5:11:89:f1:87:22:3f:2d:b1:5f:f8:f7:e8:d4:d2:96:37:
         14:86:b9:21:cd:53:28:a8:21:8c:51:76:c6:c5:c9:88:0d:e6:
         8a:13:35:0e:7a:29:bb:69:62:7d:02:58:20:73:8e:f1:85:4c:
         5e:4b:63:aa:90:3f:e6:9d:1c:66:ef:58:62:12:0b:bc:76:08:
         4b:60:34:ec:c7:4f:0e:73:6e:34:17:8d:ca:b7:cc:9a:29:23:
         77:84:e8:10:7d:aa:a2:19:28:c7:3b:53:36:bd:89:90:14:3c:
         67:b6:90:89:25:15:86:ef:65:ff:b2:db:df:e2:e1:55:43:91:
         63:d7:2c:9e:c4:ae:44:b7:86:98:94:e7:f7:e7:12:b3:e4:31:
         04:82:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:31 2025 by rpki-client