Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
File:                     49CoS6s970HWqqkCjeekddMtEr0.mft (raw, json)
Hash identifier:          tvT+Y7G9LyPPLiV+ucfHdhge+SeKQP/A4lcz0hAGRag=
Subject key identifier:   79:A8:EF:D8:D5:67:E3:80:9F:F7:84:C5:06:58:C4:16:41:C5:68:8D
Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
Certificate issuer:       /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Certificate serial:       0197B7B2F8E184E0FD5495CE1AD269D06085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
Manifest number:          0777
Signing time:             Sat 28 Jun 2025 18:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:49 +0000
Files and hashes:         1: 49CoS6s970HWqqkCjeekddMtEr0.crl (hash: HpA8Gbu6Hw53L6Q3wRBiJi/WamSZYLFJX+ow+erMRNM=)
                          2: C2SAzy7mKgCswx8rNIKEBdaDIlQ.roa (hash: wG/EXCjH8YdNKE8/gDy3nKvr8/OTyii7rZL0CvSQyLI=)
                          3: OI7NNC-aK3Lu4B5oOeMvqliT7sI.roa (hash: aWqHIcw8FFa62kYu31jy3LFmVcZ+3N4ytjox/9f+rrk=)
                          4: dPqyZHQPjclEhoO6YFdX9DjRWHE.roa (hash: 9fpla0+AzxLAKXUZM+irYmUieOiP8DlrXLEQ0BQtpBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:f8:e1:84:e0:fd:54:95:ce:1a:d2:69:d0:60:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
        Validity
            Not Before: Jun 28 18:00:49 2025 GMT
            Not After : Jun 29 18:00:49 2025 GMT
        Subject: CN=79a8efd8d567e3809ff784c50658c41641c5688d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:da:74:71:b9:a8:18:61:b7:54:b6:d8:ca:
                    53:8e:9d:4b:73:73:78:3f:f5:16:51:26:03:c3:a7:
                    c0:ec:3b:84:32:d7:d6:32:23:48:be:cb:cf:77:98:
                    aa:00:39:be:d3:0a:cc:b0:82:79:7a:a4:a6:a7:42:
                    a9:3d:e3:79:5d:66:38:98:9a:93:fc:28:ba:07:1e:
                    b2:ee:71:4f:9f:33:bc:5c:4d:4a:2c:db:ac:f2:2c:
                    c0:57:cc:95:ab:61:88:6c:78:45:de:88:3e:0b:7a:
                    ba:ae:36:c7:10:fb:a9:02:d9:cb:28:32:87:01:15:
                    3e:2e:74:e2:fd:78:7c:0c:3f:39:56:f5:c6:ad:50:
                    98:08:f5:79:91:0a:ef:56:b6:0e:22:9e:eb:1d:c6:
                    6f:4f:ce:aa:80:6b:80:9b:81:45:12:a4:f9:a3:e8:
                    e7:4c:fb:f2:fd:74:69:fe:1a:61:85:c0:fe:b5:18:
                    92:83:92:d1:ff:0e:74:6b:4a:b8:31:0d:b0:da:32:
                    0c:35:50:b1:7d:2b:98:96:63:ad:d6:2a:33:63:09:
                    a7:0a:49:37:d6:d9:94:c4:46:67:80:82:3c:34:f6:
                    0b:92:2f:a8:04:2d:f3:df:85:19:23:4a:d5:d2:34:
                    b8:f6:da:e3:84:3e:e3:62:27:44:19:4b:49:11:90:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A8:EF:D8:D5:67:E3:80:9F:F7:84:C5:06:58:C4:16:41:C5:68:8D
            X509v3 Authority Key Identifier:
                keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:16:2f:0e:1b:b7:d9:68:7e:e5:fd:9e:5e:e3:c9:eb:79:d4:
         87:41:d1:1c:75:a1:17:39:27:29:7b:bf:49:8e:72:b7:28:45:
         43:49:cb:e2:4e:87:44:75:7a:58:56:ea:53:b5:b6:90:93:c7:
         73:7e:a2:86:44:e4:76:02:ae:80:e4:03:7e:32:70:d2:f6:d2:
         68:3d:9b:45:59:98:ad:e6:80:fa:8e:70:c5:9f:48:53:88:42:
         a7:13:42:15:05:94:56:85:f9:8e:84:85:ba:76:6b:e3:2a:fe:
         d5:5b:00:ce:95:0e:19:fc:92:9a:d0:e5:18:ea:fb:36:da:ad:
         2f:04:66:54:3d:b4:ce:1a:7a:30:3c:89:1b:81:c8:ad:bc:00:
         98:22:f2:de:e8:81:f6:91:a1:fc:be:c2:df:a5:cc:74:73:69:
         fa:c2:ba:0b:c1:b0:f0:12:62:8e:04:13:ff:55:3d:8e:54:d2:
         5d:be:6f:73:df:20:b0:a3:c1:71:7d:4a:88:c1:6c:63:bf:78:
         ba:64:59:f1:c0:c8:c1:99:93:60:e9:28:96:93:76:e2:29:1b:
         18:ac:fa:12:80:bd:3e:ab:03:a6:92:8f:9c:34:66:58:1b:e4:
         fa:ca:13:14:1c:a4:70:93:e0:9f:eb:15:27:f2:27:4d:8b:e5:
         a6:50:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:20 2025 by rpki-client