Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          o11K4OhDqXYsuUtqYwh4/a1QcQ5WPOXeyXwHJ0lzV0E=
Subject key identifier:   75:1D:96:1F:45:3B:8A:5C:0A:57:D3:A0:38:94:07:42:29:7D:84:2C
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       0197B6D78FE4093F0ED2C3C9BCBA0E5B25D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 14:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:09 +0000
Files and hashes:         1: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: 7AL6TnrgBueioFIlADOa6ngm3LmVuyvtKX2ML3dBStA=)
                          2: O7lEAqmJ6RVW6ZUznCOtA8Wqr_U.roa (hash: 1bSxYn5Oc7EjOQaFfznp7ul3zLl0SKUWaiYKT6AxWVI=)
                          3: USGB4EfibArvmHzd6YayMlE_4Ts.roa (hash: QP2OBD46ZcKAmd7iDiZKVRRwOA0LwH3cIZJcmun1SiE=)
                          4: WfSIoxcGiNbq5oGvcE0eiwRzwaI.roa (hash: 4+ITlETEk/svEAAS/Kisuuoh14YPCP7V8PSGJ6x5Okw=)
                          5: lnnez22JWNJd2WeZ5gJhM-lXVrk.roa (hash: /nXGCYPW3MVBYSZbtf5SJkkLnnjwK5da+GKvEPkj/WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:8f:e4:09:3f:0e:d2:c3:c9:bc:ba:0e:5b:25:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Jun 28 14:01:09 2025 GMT
            Not After : Jun 29 14:01:09 2025 GMT
        Subject: CN=751d961f453b8a5c0a57d3a038940742297d842c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:28:3d:cd:ef:42:9d:52:c2:08:c2:dd:54:
                    5f:a2:53:86:cc:f7:15:23:98:5c:26:80:59:6c:a4:
                    95:80:5b:74:6b:c8:de:53:29:95:4d:f2:b0:d9:8c:
                    3f:94:34:aa:34:95:77:ae:9b:d5:8f:eb:d8:16:de:
                    fa:69:f5:a9:37:60:c1:99:ab:40:cc:eb:fd:c6:0f:
                    64:8f:9a:ff:82:5a:a7:73:7d:ef:46:f6:fd:db:d3:
                    53:03:73:8a:da:c4:11:e9:82:22:65:21:62:fa:8c:
                    77:f8:d3:0c:7f:19:3b:2a:33:5f:6f:89:83:42:95:
                    83:4d:07:6a:12:85:4c:03:77:66:90:db:ac:41:a4:
                    f0:d4:96:13:1b:b4:b0:52:ca:2d:4c:e5:d8:47:b0:
                    b6:86:53:d5:7a:47:5e:b4:8f:63:ee:dc:d8:6d:05:
                    93:22:9b:55:02:e9:2c:9c:f4:97:59:15:a7:f1:b3:
                    65:c9:11:23:f0:f3:67:17:71:cb:06:c6:d3:82:4b:
                    a1:37:f1:04:29:ce:2c:fc:d1:58:8d:7b:de:2b:d8:
                    0a:fb:30:ad:a4:10:f3:86:f5:71:a3:ae:d0:39:34:
                    84:63:b1:4a:aa:a4:d7:5f:3d:56:04:05:50:b4:b9:
                    ee:0a:43:74:ed:68:73:cd:49:69:d2:eb:f4:35:c7:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1D:96:1F:45:3B:8A:5C:0A:57:D3:A0:38:94:07:42:29:7D:84:2C
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:5d:2d:ec:f5:df:d6:5b:8a:42:e4:fa:3f:d4:4f:ca:0b:
         01:04:38:a8:25:37:9d:dd:84:7e:5d:39:9e:d0:2c:71:61:d1:
         4e:98:92:5a:35:7c:f4:26:a7:65:7c:8d:6b:87:33:da:c7:c2:
         0c:dc:77:a1:a9:14:d7:e4:a7:15:a2:15:58:ba:14:b5:6d:28:
         39:1d:48:6c:80:06:a6:a5:cd:52:c4:40:2d:69:92:8c:c0:da:
         49:05:96:65:a3:4d:73:4f:df:dd:93:02:8c:a1:f8:20:e0:07:
         73:6f:53:33:2d:ee:ee:b9:ee:52:2f:18:7a:74:87:f9:cc:a2:
         6e:f7:f8:90:84:36:47:77:db:fb:ef:83:16:a3:64:e7:81:52:
         72:76:e9:5e:67:73:8b:13:72:76:d3:c5:62:4b:23:1a:55:c0:
         db:63:98:ff:30:66:23:8d:e6:ac:91:66:14:3c:be:6e:da:4c:
         c6:7b:da:24:b6:56:00:aa:7b:7f:a4:ed:6b:1f:4f:36:30:ba:
         0c:a0:b7:d5:53:81:21:f8:f3:24:9f:58:6e:c7:1d:00:54:e5:
         33:e4:80:01:f5:26:bd:41:f6:fb:32:52:4d:32:f3:82:ae:87:
         87:f4:34:5b:59:7f:88:bb:50:16:10:d8:4f:e5:06:99:8f:94:
         f0:9b:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:24 2025 by rpki-client