Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          pD9XzTtsLQIekJ+4pTZgeEspdAX6JpBea3gn0LeCxCc=
Subject key identifier:   31:AA:26:FC:E2:6D:D5:BA:5F:22:84:17:2B:C2:A1:95:6A:B0:81:57
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       0197BB58C8E102CC2496DF4779916BC994DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          15B9
Signing time:             Sun 29 Jun 2025 11:00:47 +0000
Manifest this update:     Sun 29 Jun 2025 11:00:47 +0000
Manifest next update:     Mon 30 Jun 2025 11:00:47 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: 03AvRu2dfJzPyfp5Q3Cx5BNEnxKfQIu94cJFzgnQUow=)
                          2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:58:c8:e1:02:cc:24:96:df:47:79:91:6b:c9:94:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Jun 29 11:00:47 2025 GMT
            Not After : Jun 30 11:00:47 2025 GMT
        Subject: CN=31aa26fce26dd5ba5f2284172bc2a1956ab08157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:cf:fc:41:0b:f2:83:9f:4a:6e:12:38:a0:
                    90:2a:7a:cb:01:fa:8e:8c:fa:66:7d:3c:79:2b:17:
                    50:56:e9:12:9c:ca:33:1f:74:56:65:8d:db:07:1d:
                    6d:18:39:26:1f:17:2a:db:b2:75:9f:54:e4:14:bd:
                    e7:b5:5b:e3:ad:0c:6b:84:5e:b1:4a:bf:4c:da:00:
                    99:06:ee:45:53:93:be:b1:ac:c2:97:d2:a0:1e:1b:
                    38:59:ec:8d:8a:13:23:13:15:08:ce:47:2e:6b:d6:
                    26:9f:69:e7:6d:8e:ab:c7:a1:69:0a:75:9e:16:aa:
                    39:70:79:07:e7:62:36:b9:ed:b6:31:b0:9f:c8:3c:
                    c9:a7:a3:e5:62:44:95:ac:e3:56:32:76:2d:79:51:
                    3a:ca:41:1e:20:d0:2a:21:d7:53:fd:04:d9:e6:4e:
                    26:bc:0a:be:93:71:8b:3a:22:59:e7:ad:71:0c:37:
                    80:12:a7:43:2e:1b:7a:49:d8:68:45:48:cc:b2:36:
                    da:13:41:9c:d4:2e:01:da:98:e2:4f:16:5b:df:ba:
                    02:3b:b9:9b:10:b4:9a:66:c8:2b:3c:69:a8:f6:2f:
                    2f:8d:84:0f:f0:be:fc:12:7e:71:35:49:15:9d:e0:
                    e2:64:8c:49:63:84:47:b1:06:fa:7d:4e:d6:58:ca:
                    c9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AA:26:FC:E2:6D:D5:BA:5F:22:84:17:2B:C2:A1:95:6A:B0:81:57
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:2e:72:c9:45:0e:f5:55:16:03:65:b0:05:31:b4:cb:a4:bf:
         12:52:d4:67:cb:4e:8c:46:ae:b5:4a:24:24:2f:6b:3c:d1:26:
         6b:bc:65:6d:a7:c3:42:b0:16:84:9c:4b:b2:16:7c:2f:4b:34:
         b3:f2:c1:01:7c:70:44:41:03:42:5d:46:d2:8e:a4:af:a0:c8:
         fb:60:20:6f:e2:d4:07:7f:64:79:7f:f4:b0:2a:83:ea:bd:01:
         44:08:62:c2:45:20:04:15:73:04:8e:cc:49:79:3a:d6:43:40:
         2d:c2:ab:35:ef:c8:7c:36:4e:97:60:a5:d1:32:c3:df:c1:89:
         e9:0d:bf:e6:cb:75:ed:3b:00:ae:86:df:ef:44:9a:7b:29:ff:
         39:33:83:d1:4f:b9:56:f9:6d:74:20:f2:f8:b6:94:db:e6:01:
         ef:e6:1c:24:92:01:db:c1:87:88:c1:f9:5b:96:d9:a6:08:b1:
         92:c3:4d:47:10:a7:50:d1:e8:a2:31:31:be:a6:4f:2c:87:c4:
         ff:be:6c:27:9d:d1:53:32:ac:96:53:0c:d6:64:0f:34:b7:78:
         38:85:03:a5:36:45:de:1d:0b:48:3b:61:a4:01:67:04:88:01:
         f1:50:47:06:19:41:1c:da:18:71:a5:59:fc:df:32:96:2a:48:
         a2:db:8f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:53 2025 by rpki-client