Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File:                     exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier:          oYU5MCXtYqZpbsSww+XJEFCjedRhUUBD4fiAL3kS2kA=
Subject key identifier:   52:EA:CC:96:9A:F3:0B:98:AE:09:A5:92:B1:32:CC:16:F7:D4:84:BC
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer:       /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial:       0197B9D8DE8A2315DD311E59E2FBAECF47A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number:          0C97
Signing time:             Sun 29 Jun 2025 04:01:27 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:27 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:27 +0000
Files and hashes:         1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=)
                          2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: 5q/15iubTf2T5EWChoFeDOTKDQaGXFscRerfCAmYSAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:de:8a:23:15:dd:31:1e:59:e2:fb:ae:cf:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
        Validity
            Not Before: Jun 29 04:01:27 2025 GMT
            Not After : Jun 30 04:01:27 2025 GMT
        Subject: CN=52eacc969af30b98ae09a592b132cc16f7d484bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:5f:36:cf:43:c0:51:8a:b6:8e:ca:b9:35:
                    7f:ff:b6:ac:38:c5:60:11:0a:cd:73:c1:c5:3b:ca:
                    4a:ec:ee:ee:b7:54:ea:34:17:89:78:1e:72:f4:6b:
                    a4:fd:7b:bd:f2:a5:c2:06:bf:2e:ea:cd:a2:57:3f:
                    b9:ba:b4:2a:d9:11:f5:c4:72:f7:ad:23:29:f3:5b:
                    44:32:1c:52:26:3a:a8:1b:b7:b4:8f:47:77:63:d7:
                    9d:55:8b:71:5b:bc:1e:a2:91:97:af:54:55:c7:21:
                    07:3f:32:1e:0e:1c:be:e0:d7:66:22:45:7e:d0:0c:
                    f1:db:b6:33:be:44:ec:73:2a:83:a9:db:4d:96:09:
                    60:04:08:d0:dd:cc:26:0b:a2:d2:7c:f6:d9:79:32:
                    52:5a:0c:52:59:0f:4e:84:6b:e5:f8:20:23:08:1b:
                    7d:b6:f3:ed:cb:59:c7:e3:13:ca:e6:b3:c5:27:fb:
                    00:dc:d2:c9:d5:27:31:49:14:7b:96:7a:69:78:29:
                    e2:d4:36:6a:43:e5:fc:24:67:c1:c0:08:ae:58:33:
                    c0:69:73:d0:75:97:77:ba:09:32:66:a1:dd:ef:76:
                    f0:c4:37:0d:0d:30:17:aa:27:ac:ac:bd:6a:44:bc:
                    d0:ee:33:92:55:5b:46:ee:6c:8c:02:ef:45:45:43:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:CC:96:9A:F3:0B:98:AE:09:A5:92:B1:32:CC:16:F7:D4:84:BC
            X509v3 Authority Key Identifier:
                keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:ad:66:01:11:2d:ca:31:9d:ee:40:7a:b9:93:cd:46:e9:
         c2:15:aa:20:42:fc:4e:21:8f:8f:3d:eb:13:f1:22:86:d9:fb:
         2f:92:73:c7:d1:98:91:dc:13:fc:bd:f6:a8:ef:58:8c:d7:8b:
         df:7c:d4:b2:60:4c:0a:b3:66:13:23:dc:5f:5d:50:0d:f3:be:
         f5:c3:1e:cb:f6:10:d6:69:3e:25:69:a7:51:81:98:8c:ec:96:
         d2:29:cc:e8:c5:1a:d2:01:cc:07:97:42:05:18:ef:85:73:33:
         d3:db:eb:3d:fe:ee:df:53:a9:f0:a5:a9:96:f2:94:cd:f5:9a:
         22:db:47:37:18:d5:2d:5b:d1:4d:6a:04:92:33:49:66:e2:36:
         e0:05:fd:8b:e7:d0:53:83:b2:f5:21:c2:37:e8:43:82:cd:2f:
         d4:cf:b1:4d:ea:ed:79:b1:23:78:a4:84:23:d4:df:c2:a6:fd:
         f8:ed:13:8c:25:62:64:b1:2e:fa:ab:62:cc:60:cc:f1:b5:8e:
         07:45:4c:bf:51:ea:12:37:04:9d:fa:a8:9d:8f:0f:2f:24:9f:
         45:a6:88:b2:46:8c:4b:9a:48:0f:3b:8d:d0:9b:ff:67:7d:c9:
         30:7d:cb:a6:20:69:b1:29:3f:5c:12:eb:2a:0a:90:e8:e7:79:
         a9:67:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:34:18 2025 by rpki-client