Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          Q6GFiFlP+GLEy1pOx1ZV11B6lHD3F9FJfnUdmSEpNNE=
Subject key identifier:   97:00:91:08:FF:24:3F:FA:4D:61:44:2A:26:AB:C2:B3:2A:FC:A1:02
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       0197B6A0573A05E1274D156EA8BDD27E49EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          0612
Signing time:             Sat 28 Jun 2025 13:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:50 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: FbB/hPuvzxcuHoqmDUHj3HEnWrHvxod103q/GhkIDcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:57:3a:05:e1:27:4d:15:6e:a8:bd:d2:7e:49:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: Jun 28 13:00:50 2025 GMT
            Not After : Jun 29 13:00:50 2025 GMT
        Subject: CN=97009108ff243ffa4d61442a26abc2b32afca102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:6d:42:b0:ca:6c:3c:83:d1:12:11:98:00:
                    f0:ad:e4:69:ac:69:8a:08:11:5d:f4:45:94:fe:7d:
                    dc:b3:c1:83:6f:4c:40:a8:98:5b:dc:39:4a:0d:f9:
                    b2:ff:40:73:e9:6e:2a:d9:52:4a:a3:28:a6:14:a3:
                    0a:e9:54:5a:e9:3b:8d:58:b7:c5:10:f2:d9:83:a3:
                    09:18:5e:6d:d2:5b:df:0c:ee:08:13:85:80:51:f0:
                    06:eb:54:26:b7:89:f0:34:7b:e3:5f:ce:e0:59:d9:
                    9c:39:6b:c9:c2:91:c1:dd:a5:6e:fb:41:f7:78:78:
                    cf:21:10:79:e8:cb:83:e1:5f:97:74:d0:a2:13:49:
                    b3:15:2d:ca:b2:7b:28:77:ca:c1:3b:b0:fb:9f:f5:
                    05:85:45:d9:e4:ca:c4:7e:e3:77:08:d1:d2:a3:f6:
                    d9:97:f5:4e:8e:c8:67:6e:c7:9a:68:71:4d:bb:a9:
                    40:2b:19:db:a3:63:97:d3:e5:64:c6:bb:ba:4b:17:
                    6f:27:d4:ea:f2:1a:55:77:c2:af:05:45:26:3c:1c:
                    87:06:d8:b8:c6:15:c8:6a:31:23:a6:65:86:7b:9c:
                    e7:bd:89:54:4c:ca:c9:c8:28:90:ff:df:63:ff:8d:
                    69:72:6a:ac:9a:9f:b0:6c:ce:3e:ef:bb:ee:64:74:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:00:91:08:FF:24:3F:FA:4D:61:44:2A:26:AB:C2:B3:2A:FC:A1:02
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:e6:7d:cd:8d:d0:12:c5:86:fd:7f:15:e7:ca:2a:cb:c1:
         6b:40:a4:fe:e4:26:e6:c5:db:8e:8e:0d:2c:69:c3:05:15:76:
         9c:c2:ba:be:c3:17:bf:2f:00:46:4a:7b:a9:1b:f4:53:8a:72:
         bc:3d:2d:26:e5:79:65:9d:7b:c7:a8:c6:3f:d4:d5:b5:7b:81:
         6c:4e:1b:29:2e:14:8a:30:59:1d:78:bc:1b:44:b7:9b:3e:ee:
         4e:5f:6e:e3:d7:47:c4:e0:93:fa:90:f6:08:e3:21:eb:22:56:
         65:58:20:3f:95:e4:e4:7d:3a:93:73:58:9a:9c:08:a0:94:7f:
         a2:19:44:1e:f1:3e:13:6b:95:2a:04:d1:84:58:0d:18:e7:4e:
         44:d3:61:60:5f:09:06:4a:7f:57:34:56:21:d7:8b:8f:2b:87:
         f3:37:c6:6c:8c:2a:28:2c:da:34:e3:c0:11:f5:9f:08:63:b2:
         88:ed:b2:3c:0a:7c:c2:86:cd:37:c2:7d:66:57:17:83:6b:0a:
         da:dd:46:b2:ca:8a:66:4a:16:c7:50:18:70:73:81:9c:b2:50:
         0f:c4:6d:d5:87:db:d6:70:a8:f5:d6:53:86:2b:96:ac:cd:33:
         aa:0c:ec:2d:da:58:0c:d0:53:05:25:44:3f:9b:ea:39:57:6a:
         85:0c:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:15 2025 by rpki-client