Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
File:                     7uNuuo1bP-lfMgGrLRFnXqAceBw.mft (raw, json)
Hash identifier:          PLL0pdi+V+rb4KIauWD1lmtmrXG+B4zjX/pjsRx6UOc=
Subject key identifier:   40:B6:48:E1:EA:74:64:69:D5:62:1E:0F:71:A3:06:C2:5B:9D:83:64
Authority key identifier: EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
Certificate issuer:       /CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Certificate serial:       0197B7B34E948D1CD376C62936139C5B914F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
Manifest number:          6E
Signing time:             Sat 28 Jun 2025 18:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:10 +0000
Files and hashes:         1: 7uNuuo1bP-lfMgGrLRFnXqAceBw.crl (hash: 2oS8AYqcx6CdM178XFkl9DIDLeACWaDP247jG4Fe0ic=)
                          2: qatCLbB1wt003ugiHLUeaH6Egzo.roa (hash: kqMRNz8HFIkfR5BK7WY1x5EiB+ZuSgywUlDGBzooYrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:4e:94:8d:1c:d3:76:c6:29:36:13:9c:5b:91:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
        Validity
            Not Before: Jun 28 18:01:10 2025 GMT
            Not After : Jun 29 18:01:10 2025 GMT
        Subject: CN=40b648e1ea746469d5621e0f71a306c25b9d8364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:1b:91:23:92:97:a7:c5:04:18:8d:38:06:
                    cc:7b:04:16:2d:a3:0e:29:e7:c2:df:e0:ac:a1:f7:
                    fb:9b:81:7d:4d:c8:6c:18:22:75:53:17:0d:25:01:
                    ce:08:2b:8f:c9:c8:28:1b:d2:db:5d:9e:46:2b:d2:
                    49:14:21:98:84:b3:b8:aa:50:ee:2c:6d:cf:e8:72:
                    d0:82:0a:26:e5:e1:44:0e:3e:fa:05:5c:8d:2f:81:
                    19:e0:d1:35:d3:4b:66:15:2b:2d:ec:1a:6d:1c:94:
                    db:7b:c2:03:c6:b7:28:da:11:35:72:f4:9c:9b:19:
                    c5:63:86:70:7a:2d:f6:8a:8c:34:d6:4b:0f:40:1a:
                    f9:2c:53:01:cd:93:c6:76:4e:1d:ca:cb:77:50:17:
                    9b:1d:1d:bc:c3:22:2e:80:d8:eb:02:74:bb:7a:d3:
                    42:96:ef:75:41:7b:24:70:15:70:b9:49:e0:4c:76:
                    36:c1:09:13:9a:fe:cc:16:04:16:29:c9:0f:58:00:
                    8e:b8:30:9a:57:a1:09:92:a0:25:85:d8:21:80:c5:
                    e9:bd:1d:8f:a3:82:de:5a:ed:a5:de:34:c2:fd:2b:
                    b1:31:9d:45:6b:d6:d4:b2:67:e1:ff:80:a7:07:1c:
                    31:cc:98:67:39:28:09:0d:31:51:37:4a:7f:66:f0:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B6:48:E1:EA:74:64:69:D5:62:1E:0F:71:A3:06:C2:5B:9D:83:64
            X509v3 Authority Key Identifier:
                keyid:EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:84:25:7a:1d:28:2c:af:e5:ff:17:e9:90:c0:9f:4e:f5:
         a6:d0:bb:5c:04:2a:55:81:d7:55:45:94:ca:5b:73:79:67:1f:
         49:99:82:c2:26:79:d9:05:53:0d:8f:2e:ac:2a:7b:84:1a:1d:
         44:ad:8a:84:87:01:9c:bd:f6:8b:cb:f5:1b:1c:81:71:02:fd:
         a8:9d:c1:41:52:f7:e3:07:48:3d:de:96:5d:bb:74:84:d7:99:
         73:15:ad:61:e7:6a:4e:2e:f4:ca:fd:45:04:4e:df:13:0b:ee:
         de:d2:63:29:e8:aa:6c:ad:8c:64:2e:68:63:67:e5:56:9b:49:
         86:0b:81:30:33:92:1a:74:db:5f:50:5c:73:20:c7:64:58:2a:
         b3:4d:48:0d:81:7d:dc:ee:2d:ac:5d:16:2f:92:68:6a:a6:a3:
         59:e8:4b:5e:6d:b4:d3:85:a5:eb:70:6b:37:2c:a8:a0:bd:6b:
         e2:7d:b7:a0:fe:5b:b0:b3:4b:06:b3:20:9a:f9:f1:d9:70:69:
         d5:8b:30:05:f6:64:0d:d3:93:c1:bf:ad:d5:e5:89:91:bc:dc:
         a1:53:c4:10:25:f2:05:a3:d3:a9:a2:b0:67:90:12:c0:08:42:
         78:fc:be:c6:ca:4e:ea:b0:47:2c:93:f2:5a:ac:65:59:da:11:
         de:41:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:12 2025 by rpki-client