Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
File:                     7VSy51k1UxJ457rRV8SMiuxD7ug.mft (raw, json)
Hash identifier:          Ak8CCASMZNn58x+GwYZtZV3lYp9xiUGw3D+o9SCvge0=
Subject key identifier:   A3:07:CC:F2:B3:DA:C3:9A:3C:9A:5B:43:E0:58:85:25:7E:C9:D4:A3
Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
Certificate issuer:       /CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Certificate serial:       0197B890802B7A589A6A1B2F902BFBF73302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
Manifest number:          0596
Signing time:             Sat 28 Jun 2025 22:02:47 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:47 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:47 +0000
Files and hashes:         1: 7VSy51k1UxJ457rRV8SMiuxD7ug.crl (hash: CT8P3HilUP+2XA+UL1yy9fxPPd0hj2zG9M0f54fNgIc=)
                          2: lvckIph_fXtXurl5ym_WZRsaXmo.roa (hash: 5C1YRHd0ILljxfVn9Q8Mwd3r0vdxXZvngPftxEnCVwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:80:2b:7a:58:9a:6a:1b:2f:90:2b:fb:f7:33:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8
        Validity
            Not Before: Jun 28 22:02:47 2025 GMT
            Not After : Jun 29 22:02:47 2025 GMT
        Subject: CN=a307ccf2b3dac39a3c9a5b43e05885257ec9d4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:56:e1:b9:c0:91:21:62:d3:76:04:06:f4:
                    3e:6e:02:4a:8f:b4:b0:b8:5c:ad:fa:0c:c6:c0:b3:
                    30:15:91:aa:50:33:78:ec:4d:c8:d1:74:4e:b6:83:
                    8b:02:07:83:7d:cc:55:c3:31:c9:69:53:5a:f6:ba:
                    cf:d3:4d:fb:65:49:60:a0:f4:e1:d9:ae:38:15:a4:
                    a5:3d:08:e2:72:f6:35:61:36:c5:51:ff:e0:7e:0c:
                    f5:54:2d:4f:83:d4:20:ca:15:87:df:80:d4:2d:f7:
                    01:f3:ae:c1:d1:03:da:fa:78:b8:68:74:c3:04:8a:
                    31:0f:4e:5c:0c:ce:fc:af:44:3f:12:93:11:ce:4e:
                    16:a8:5c:4d:34:bf:01:ab:be:95:9c:83:c3:ac:a3:
                    e6:a1:a0:f3:37:dc:28:dd:90:3b:e0:92:c9:9e:76:
                    41:05:4f:49:b1:25:e1:1f:35:d4:0e:af:ce:28:fe:
                    46:24:e4:47:a1:6a:1b:94:62:68:a9:56:ec:b6:98:
                    b0:0d:10:97:e8:44:a9:b7:01:30:3b:cf:61:df:d9:
                    35:f1:23:c2:44:ed:f9:65:26:46:b0:7c:ca:5a:3d:
                    b9:43:57:18:0a:b1:13:2f:1b:32:e2:07:8a:b0:55:
                    fe:fa:9f:61:12:51:77:d9:40:78:fa:6f:76:17:40:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:CC:F2:B3:DA:C3:9A:3C:9A:5B:43:E0:58:85:25:7E:C9:D4:A3
            X509v3 Authority Key Identifier:
                keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c3:5e:0e:bf:9e:28:46:02:3c:69:60:5d:8f:e3:31:9c:76:
         97:e4:e2:df:4c:69:d1:c2:b1:e2:80:f4:c2:bb:7d:cd:99:e3:
         16:92:14:49:93:54:db:47:e9:30:ca:16:03:af:7a:28:c7:f0:
         6f:fe:5a:55:64:2e:36:db:22:95:cd:6e:e1:d9:b5:fb:c7:22:
         7f:12:ed:42:a1:1c:27:ba:d3:b9:8f:15:db:a7:be:b7:52:db:
         d6:13:8b:d0:5a:2d:6c:d1:bb:29:1e:2b:02:1f:5d:5a:72:57:
         08:31:d5:92:30:e9:72:4a:2f:2d:da:d0:7a:b4:00:33:3a:7e:
         ea:29:6c:32:9d:f3:45:18:29:51:c6:a5:ed:cf:04:b7:c0:8d:
         a5:be:1f:60:72:90:e7:7a:1d:3f:e0:91:bd:e4:bb:7d:f5:a3:
         26:d1:02:18:e3:88:f0:c8:25:96:43:2f:46:ed:3e:36:d0:81:
         fb:97:01:e9:19:f1:d4:2a:af:21:e6:d5:bf:9e:58:2e:03:8a:
         b0:93:6d:5b:2a:10:85:2b:79:96:33:76:18:f2:98:cf:a4:21:
         f9:4c:66:1f:fb:f3:e3:7c:e6:fe:1e:e0:7a:71:05:57:53:aa:
         4e:50:bb:65:b6:26:a5:67:21:4a:76:d8:0a:da:3a:54:36:56:
         bb:9d:8a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:35 2025 by rpki-client