Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
File:                     7600TrX36x3uS4-ENftbnYdmPp0.mft (raw, json)
Hash identifier:          TRTtHM09wt6z25jW9eon6Fj7Qt0MA2m2JeCbnE7zAUQ=
Subject key identifier:   6B:A1:FE:CB:63:CA:0F:11:85:5D:67:CE:CC:D1:97:C6:B0:5B:FB:5D
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       0197B70F63603221A0DB94FCEDE20B4479C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
Manifest number:          0D02
Signing time:             Sat 28 Jun 2025 15:02:08 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:08 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:08 +0000
Files and hashes:         1: 7600TrX36x3uS4-ENftbnYdmPp0.crl (hash: WP9h9EVYPSPmd9vkTJO9S7EVAjFryW58HwFxUiW9LFc=)
                          2: CpsNBPf3z13iAJuT2Uc6xn49v3k.roa (hash: aqK12du8rkPezSSK2zWASPAljBp90XN1tNxFt4RE07M=)
                          3: U_VYKpyLv0RVfRm74yG5a_Vrkf4.roa (hash: el4MUGQYFxb5aJybMsuuruh6kVWrWKqPLvaGeVjGVyY=)
                          4: WywaCMaoX-4Vjd6cVj-u89uGhyI.roa (hash: AYAIVJDWWfRtiSD4573Cq+miJDAAqjH32NCsFxgcKF8=)
                          5: ffazbT6AbJ_NkXPmtMeO7T90zvE.roa (hash: kXE92CHJw3Af4w1YJfdAvjGIp3FRE0AuqHI90/fFPps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:63:60:32:21:a0:db:94:fc:ed:e2:0b:44:79:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Jun 28 15:02:08 2025 GMT
            Not After : Jun 29 15:02:08 2025 GMT
        Subject: CN=6ba1fecb63ca0f11855d67ceccd197c6b05bfb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:c2:5f:3b:cb:45:fd:14:1c:5f:34:11:bb:
                    8d:13:7d:d7:bc:2e:51:7b:07:e9:9e:57:c7:1d:04:
                    73:63:bd:b5:4d:7c:cc:02:6b:ee:57:a5:c8:48:18:
                    ba:89:6a:e2:7a:ad:e8:ae:27:d9:99:bb:5e:2a:e4:
                    68:fd:b2:74:76:68:67:8c:5b:a3:cf:bd:15:50:e6:
                    14:f3:a5:0d:fe:5a:31:4a:c3:62:72:be:7b:c7:6d:
                    70:bd:76:f5:35:eb:2a:ad:ab:49:44:fc:1b:6b:58:
                    28:72:c2:0c:a2:73:81:0d:0e:fb:fa:62:9c:b1:6e:
                    44:ce:53:f7:c5:4a:08:70:9a:84:80:e6:eb:a1:a7:
                    f5:5e:50:b4:32:e3:73:21:f1:b9:81:b8:9a:40:dc:
                    22:45:91:0e:04:53:c2:4a:1a:c5:c4:49:4e:a2:8a:
                    6a:70:4d:37:c0:0d:a6:ec:9d:ed:94:a4:c0:1b:38:
                    9a:fa:1c:f2:2a:2b:7a:17:5d:a8:d4:91:c8:42:7c:
                    b9:0b:bc:61:61:d2:be:b3:25:0a:d3:b3:23:36:5d:
                    33:13:11:27:f4:31:84:14:5c:db:3a:fe:46:d3:d8:
                    df:09:01:a6:2e:b4:b1:52:7e:6a:8c:2b:a4:f6:1e:
                    56:a8:11:7e:a3:12:2d:b8:9b:24:65:d9:aa:72:b4:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:FE:CB:63:CA:0F:11:85:5D:67:CE:CC:D1:97:C6:B0:5B:FB:5D
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:66:ab:99:cb:1f:a4:51:91:be:8c:72:07:62:c3:70:18:63:
         4d:72:74:63:ea:0c:33:ed:24:ca:25:9f:79:ed:67:d8:85:90:
         f3:bc:d7:68:7e:81:66:b1:24:73:7f:01:af:d9:23:06:7a:f1:
         a4:38:38:02:1f:4f:44:9c:17:0a:87:16:1a:c8:55:45:e1:32:
         8a:9e:1c:37:98:1f:22:1f:06:7f:1f:24:22:37:62:09:be:9a:
         dd:33:ef:a3:3c:e1:28:9c:7b:1a:7e:f5:f1:5e:48:6f:ad:62:
         a6:50:db:6c:d5:50:55:20:75:5b:a4:d8:0d:2b:ad:9c:87:b9:
         88:98:01:f7:57:b4:ee:c1:2e:b9:88:0b:7f:79:df:74:62:6f:
         b8:b4:09:3c:86:47:1d:29:ed:82:72:48:1a:2c:80:41:b7:75:
         98:79:2e:78:2b:37:2d:f5:66:23:19:ea:2e:f4:be:e7:4b:a2:
         68:f1:40:a4:92:9a:3b:ed:3f:73:f5:be:2a:fd:86:c8:91:1f:
         ee:43:8c:aa:97:1e:e2:4d:50:96:7e:23:10:e0:fe:76:19:b8:
         81:08:d1:07:49:16:ea:5d:e0:96:a5:dd:f0:d6:b7:86:5d:ef:
         b3:e8:2f:0f:c8:29:96:bc:ff:26:47:a1:33:2f:b0:3f:55:43:
         6a:80:a6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:43 2025 by rpki-client