Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
File:                     7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft (raw, json)
Hash identifier:          CL/mFIn4ESRsE71WOaWR/RHKW3faX8Qv3YCbrFFw7IE=
Subject key identifier:   CB:23:F0:31:03:B8:D0:A3:2D:AD:66:8A:97:B9:6E:12:5F:16:90:79
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Certificate issuer:       /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial:       0197B6A092187607F3DBAE4E0F1FF2EC2B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
Manifest number:          12A0
Signing time:             Sat 28 Jun 2025 13:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:05 +0000
Files and hashes:         1: 7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl (hash: hcEy7YH2HFoUAz1b/F5fC9pig0Qf1NvsJ6885qFyT+I=)
                          2: Alm1D_jWQV3HZ_xMIEfApNUj0bw.roa (hash: roFDOJ4zN70FlLWN8DtAuHmCiQQVdXLTUDn3OTUhXvI=)
                          3: KOMEO3ezWZumvxO1NtiiKTGYpqs.roa (hash: y/p4zYmrPrmcic5vga+4CRguxPQrr1LrQuRZ5F/An8A=)
                          4: ZqzdAs8yZ3FLdUhbYW7TTyJuHq0.roa (hash: bttROiRtaf17Ko3eqx0YmSrz2YkGK+csEYw+4Lostm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:92:18:76:07:f3:db:ae:4e:0f:1f:f2:ec:2b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
        Validity
            Not Before: Jun 28 13:01:05 2025 GMT
            Not After : Jun 29 13:01:05 2025 GMT
        Subject: CN=cb23f03103b8d0a32dad668a97b96e125f169079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:73:1e:9c:70:11:05:8e:12:1d:44:5a:58:
                    05:4d:66:58:3c:04:de:57:d4:48:bd:40:c6:76:10:
                    35:7b:f1:4d:49:2d:56:13:80:01:c0:32:f2:2d:dd:
                    d7:9d:db:92:04:26:83:43:57:f5:e6:4e:6a:d8:6d:
                    71:33:0a:03:dc:70:43:00:c6:65:d6:a3:49:11:aa:
                    e5:d0:42:20:1b:c0:45:82:a0:8b:a6:b0:e5:92:e2:
                    1e:0a:47:f2:b6:d0:7d:81:3e:43:ca:80:71:e3:3a:
                    f4:d1:80:65:f2:53:06:7c:2f:ba:47:44:f0:d2:fc:
                    dd:3b:72:08:4d:8c:bc:24:e6:70:08:b3:4b:55:6e:
                    51:94:47:01:f9:2c:c3:3e:9f:cc:76:9d:55:26:2f:
                    88:07:44:33:3d:05:4d:3f:93:eb:e4:d2:45:d2:6d:
                    39:c8:64:3b:4d:4a:e4:0c:c7:b6:db:3a:76:c3:98:
                    d2:40:28:72:df:9e:d4:98:8c:3b:39:14:d2:9b:f8:
                    f7:59:3a:56:cf:9a:3e:fe:c2:e6:bf:8b:79:cd:c9:
                    ee:31:eb:81:26:53:ef:85:dd:67:85:24:b1:52:02:
                    93:0d:dd:6b:49:e3:85:c6:85:01:6e:27:5f:c5:20:
                    4c:25:10:98:8f:d0:d9:73:d2:ff:11:b8:15:1b:64:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:23:F0:31:03:B8:D0:A3:2D:AD:66:8A:97:B9:6E:12:5F:16:90:79
            X509v3 Authority Key Identifier:
                keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:17:45:50:15:1a:53:0a:ac:f2:b1:75:f4:63:10:01:42:
         79:4d:ab:2a:4c:a4:41:d6:8c:25:54:91:a7:40:b7:de:ba:a7:
         64:f2:fa:2a:26:84:4f:3a:45:8e:07:2e:86:ec:2c:13:ad:18:
         2e:b4:55:7b:de:39:0f:76:ea:67:83:d4:1c:b5:8d:eb:5b:02:
         f2:a1:7f:0d:bc:3e:56:86:95:c3:81:fa:5a:08:51:80:a3:97:
         5d:39:de:5e:12:55:73:c1:20:82:4b:90:6b:07:12:b1:08:00:
         f4:74:ea:5a:94:89:18:86:f8:51:08:b8:f1:6b:bd:53:20:db:
         3d:92:b1:9a:96:59:d7:ce:af:4d:d8:01:8f:71:d5:62:7f:a3:
         77:d1:e0:4a:38:f6:80:05:1a:63:20:15:99:b2:df:18:32:fc:
         8a:57:25:9b:da:a7:2b:bb:6b:d7:4f:b1:70:fd:be:b6:7f:0f:
         db:69:2a:77:9f:38:db:57:e7:39:3c:ec:dc:f7:b4:60:32:d5:
         e1:07:3d:36:65:1c:70:67:c1:6d:71:78:cc:c8:f6:05:41:92:
         cc:74:86:e9:c1:e5:f6:df:39:63:6c:2f:c4:c1:6a:bf:9a:81:
         30:d8:fb:e3:99:c5:1e:ce:0d:b8:2d:6b:05:40:f1:7b:0c:56:
         c3:4f:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:07 2025 by rpki-client