Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File:                     f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier:          WraW714mV6PcCbtSX0vFxzLNB+EQQLLHFLkF4MRrtCY=
Subject key identifier:   D0:CE:F5:64:36:42:2D:64:BA:54:A9:2B:3D:BE:4F:F8:C6:8C:3C:4C
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer:       /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial:       0197C9F20B53DF390CE864F17BF639D96414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number:          0E6C
Signing time:             Wed 02 Jul 2025 07:02:52 +0000
Manifest this update:     Wed 02 Jul 2025 07:02:52 +0000
Manifest next update:     Thu 03 Jul 2025 07:02:52 +0000
Files and hashes:         1: 8Nz7pWuGzKddMGUQDfHKd23vSsc.roa (hash: 0Zij1MsWucwtgl3mjLbhutBq2eFIXVXGt5jqt0MvUbY=)
                          2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: QW1LI4mrgD3goukzyUbOzkfR1DsyWtWtMZlJgND98PI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f2:0b:53:df:39:0c:e8:64:f1:7b:f6:39:d9:64:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
        Validity
            Not Before: Jul  2 07:02:52 2025 GMT
            Not After : Jul  3 07:02:52 2025 GMT
        Subject: CN=d0cef56436422d64ba54a92b3dbe4ff8c68c3c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:53:fe:f5:40:47:a1:86:f4:47:61:0f:3f:
                    8d:6f:4e:3b:5f:35:e1:df:43:21:80:5c:ad:97:28:
                    0a:83:99:9f:e5:1a:99:a7:51:ea:6c:cb:1d:2e:70:
                    44:e7:1f:cb:ed:e3:59:7b:f0:64:f8:6b:26:c3:a0:
                    a0:07:d7:36:ff:50:e7:d4:06:13:15:d2:07:25:5e:
                    ef:4c:ef:a5:d2:ae:d1:3c:62:b7:61:3b:41:8d:59:
                    b3:37:9e:61:cb:bb:17:c8:1f:f6:4c:87:0d:90:fd:
                    61:25:37:b8:15:6a:45:9c:1a:8e:07:0a:73:33:da:
                    cd:b7:56:3d:3e:c8:41:75:21:d4:fa:bc:21:1b:a0:
                    17:c5:c9:32:bf:ab:5b:ce:2d:96:b9:c9:52:c0:69:
                    8c:91:51:aa:53:c6:10:0b:be:55:ab:bd:01:7d:1b:
                    90:7a:c2:31:7d:2d:d3:66:a3:12:db:c4:a6:12:2d:
                    4a:4a:89:d4:c1:f4:99:f0:c4:16:b3:4a:b5:3e:2f:
                    ee:fb:9f:f6:bc:96:b2:75:a5:2c:d2:84:7f:c0:1f:
                    a8:fa:83:3c:32:1d:14:ac:28:0c:70:d2:ba:34:91:
                    5a:e7:4d:61:e2:d2:47:47:81:81:a4:ae:dc:17:e2:
                    2d:80:ba:bb:54:3e:b9:8f:37:a9:c1:53:35:f5:18:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CE:F5:64:36:42:2D:64:BA:54:A9:2B:3D:BE:4F:F8:C6:8C:3C:4C
            X509v3 Authority Key Identifier:
                keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:29:a0:e0:3f:80:d2:a3:e5:93:e1:c3:fc:a3:de:ee:8b:
         91:fa:a6:59:6c:fd:20:50:1a:f2:e0:23:fa:6b:16:0b:95:8d:
         fd:6c:12:af:24:75:db:ff:80:ca:36:97:87:f2:df:73:f5:99:
         45:1d:7e:de:e6:c4:03:bd:e2:79:55:29:98:4a:ae:68:91:89:
         6c:e4:3d:5e:9d:0a:b5:d8:bc:78:3d:ab:f4:e8:23:46:ab:4b:
         75:25:68:36:6d:c7:99:ef:e3:d2:d8:61:30:e4:d6:32:29:be:
         20:ee:89:e6:25:e5:b6:fa:99:0a:94:88:fa:78:23:9c:71:53:
         f1:7a:68:c5:4b:46:ae:be:25:ee:50:4b:fe:07:55:ba:9d:39:
         c7:3f:4b:cb:fe:1c:4f:62:a4:b2:2e:3f:a6:d3:81:80:13:24:
         d8:bc:60:a2:d2:e6:34:5b:39:03:c3:b0:40:df:c0:23:33:64:
         79:88:01:c2:f3:04:1f:b1:01:e8:7c:3e:57:75:22:ef:48:74:
         d1:8d:82:d4:65:bc:ef:2f:a0:a3:d9:75:00:98:9c:88:31:4b:
         bf:66:6c:15:b2:bf:b7:2d:5c:0c:0c:3b:49:78:9c:19:43:9c:
         95:40:52:44:64:94:45:4c:57:f5:17:eb:17:5e:63:26:74:82:
         84:5d:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:43:55 2025 by rpki-client