Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File:                     7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier:          L5y+LcM8cI0F8xIVJvFJVy66l1pIKMjlHKTfo5iUSx0=
Subject key identifier:   57:C7:8B:C1:2E:20:20:3E:58:0F:96:6D:69:6D:81:39:3A:8E:08:B4
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer:       /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial:       0197B70E8F3421FAC6FD6BB0BB36A855165B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 15:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:13 +0000
Files and hashes:         1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: +hT7TJaRdGwNsWqWTQBaIdWhzd7L0UdBpn2bOOANNEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:8f:34:21:fa:c6:fd:6b:b0:bb:36:a8:55:16:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
        Validity
            Not Before: Jun 28 15:01:13 2025 GMT
            Not After : Jun 29 15:01:13 2025 GMT
        Subject: CN=57c78bc12e20203e580f966d696d81393a8e08b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:50:f8:15:0e:14:13:e3:52:60:53:38:7e:
                    6a:7d:32:1e:4b:07:24:ef:89:d3:35:2c:16:a0:00:
                    b0:be:a8:f7:d4:76:d1:d4:c4:b9:03:7e:b9:52:7c:
                    f7:80:20:b1:f7:c4:73:fe:75:3b:ee:0b:78:9e:ed:
                    42:c1:44:00:ca:db:9d:cf:05:f8:64:e2:39:a5:eb:
                    53:aa:8a:94:e1:fd:d5:19:fa:22:b6:7c:9c:61:de:
                    9e:81:7b:9a:95:01:42:6e:d4:95:0e:b9:61:f2:23:
                    83:23:2c:6d:8a:03:41:86:87:49:a8:ff:59:eb:db:
                    91:03:66:36:75:ac:6d:b1:45:0a:17:82:63:0d:75:
                    84:1a:91:a5:66:4d:d9:3d:c8:bb:61:39:e2:93:e5:
                    bd:02:8d:c7:aa:db:8c:d5:a8:39:34:73:1f:1a:13:
                    82:af:0b:b4:9e:37:70:cb:a7:63:27:3d:4b:8b:3d:
                    3a:72:75:fa:4d:a1:03:f5:21:67:36:3a:19:16:20:
                    e5:43:04:23:6c:e4:36:06:7a:d8:a1:a7:16:93:07:
                    ee:cb:b4:13:cf:15:14:d8:2b:14:dc:fc:cf:8b:25:
                    df:bd:a8:4b:9d:53:1f:a2:ed:02:17:3d:92:5a:55:
                    11:08:10:63:77:4c:e7:ac:e1:3b:ac:d1:8c:f4:8b:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C7:8B:C1:2E:20:20:3E:58:0F:96:6D:69:6D:81:39:3A:8E:08:B4
            X509v3 Authority Key Identifier:
                keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:20:cd:12:46:1f:d3:58:29:e1:e8:05:2e:4b:89:97:9d:3b:
         19:23:a5:f2:b6:49:a6:ba:c8:b2:00:00:71:cd:9f:de:7b:ef:
         7e:2e:df:1c:2b:b4:6e:fd:14:55:bc:16:10:e9:ec:e2:41:12:
         b9:7b:e8:f3:c2:2c:67:68:b4:50:0b:f2:6f:86:53:03:74:b6:
         55:db:10:61:ef:4d:49:96:38:3c:5c:02:7c:39:cc:bc:12:b2:
         56:20:9f:ba:2d:51:45:8a:4e:d8:16:db:1e:56:17:8b:be:22:
         6d:e1:8f:3e:91:69:67:b6:09:13:6e:f0:5d:93:f0:2c:ef:59:
         7b:5b:c8:5e:f5:a6:ef:da:b0:3e:36:77:54:08:69:fb:77:20:
         39:47:c5:14:12:37:10:26:02:db:52:44:32:20:e4:7a:d2:ed:
         31:36:6e:dc:51:56:23:6d:f1:1a:f2:b4:f1:e9:9d:29:13:32:
         a2:40:73:69:ce:4f:ab:2b:1c:8e:e6:c3:6f:cc:fc:8c:26:5f:
         77:55:1d:62:8b:7d:cf:da:b0:83:38:8b:c7:6a:9a:20:56:0c:
         d4:b6:4f:ba:94:b3:f9:da:aa:4a:c6:06:56:e1:13:0e:74:25:
         0b:b6:db:8e:5f:41:c7:70:ca:9f:cb:81:78:95:a0:66:dd:72:
         2e:c6:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:57 2025 by rpki-client