Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File:                     erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier:          P/8IhPVpSh/Avom9Hif3lO2pKse1I4NHcoJp6UuGbgY=
Subject key identifier:   C1:80:AA:73:A0:D4:B2:BC:28:13:F0:5C:66:DE:48:6F:25:23:5E:C4
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer:       /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial:       0197B9D8BCC4465C437C6F70ED571E8783D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number:          1572
Signing time:             Sun 29 Jun 2025 04:01:18 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:18 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:18 +0000
Files and hashes:         1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
                          2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: cYpOi0sNG0vmyTuh40o9TsVPgTXOCyVgVljGEcfdXdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:bc:c4:46:5c:43:7c:6f:70:ed:57:1e:87:83:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
        Validity
            Not Before: Jun 29 04:01:18 2025 GMT
            Not After : Jun 30 04:01:18 2025 GMT
        Subject: CN=c180aa73a0d4b2bc2813f05c66de486f25235ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:20:84:f7:95:ac:89:56:0e:ca:a7:13:84:
                    f8:58:cc:e6:d0:e1:a5:8c:58:d0:42:9a:82:5e:20:
                    41:ee:0c:68:ec:00:e8:57:a3:ed:6f:35:b4:2c:31:
                    90:83:0d:fb:bb:82:32:d9:50:17:58:da:9e:17:8a:
                    5a:b7:c1:e5:65:a6:e9:07:b6:b4:43:05:64:0d:d1:
                    c0:89:bf:ea:1b:b8:65:5c:c6:1e:90:eb:6d:c0:c3:
                    8b:1c:c3:4a:ea:57:a7:9b:4d:b0:ac:0c:35:0f:1b:
                    81:03:15:d3:28:6f:a8:af:a2:81:97:58:81:a8:65:
                    dc:a4:c1:c6:46:e4:a3:f7:84:9d:67:94:80:a2:35:
                    4f:14:98:e1:ed:f7:70:b6:be:de:c2:ac:73:58:e3:
                    43:e7:fa:6b:6d:5f:da:75:77:62:3c:29:7c:1d:a0:
                    c6:95:d2:e1:a9:73:24:6c:fb:da:4a:db:60:17:eb:
                    e5:69:24:d5:39:5f:69:26:81:0d:86:b1:ff:d1:ad:
                    2c:00:a3:08:d3:a0:79:12:f9:42:5d:62:c2:fb:e6:
                    ab:a2:0b:dd:a1:ba:7f:09:2e:79:a3:34:08:12:16:
                    09:79:5d:cc:6d:20:24:06:3e:e4:d3:2d:db:11:60:
                    fb:d3:c7:fc:2f:56:02:7f:7e:8c:3b:f1:ab:09:e5:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:80:AA:73:A0:D4:B2:BC:28:13:F0:5C:66:DE:48:6F:25:23:5E:C4
            X509v3 Authority Key Identifier:
                keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:7a:50:6c:f7:71:34:3e:91:75:d6:c8:f6:7c:a9:10:c0:
         42:8a:9b:35:0d:52:90:ac:90:06:a7:4e:53:85:80:63:bd:1d:
         b4:d0:17:4e:10:88:12:d8:7f:ec:76:ab:00:c6:7c:78:d4:ab:
         b8:55:3f:b0:9e:e0:75:4b:48:c8:65:14:6c:55:78:ad:5e:39:
         a0:f9:ec:60:a7:d5:f7:41:21:71:2a:bd:2b:27:77:82:b5:6d:
         79:4f:61:ba:d8:5f:51:c7:29:a0:c5:9a:1f:b8:f5:94:9e:bd:
         cd:22:d5:94:2f:0a:5c:51:9f:37:74:86:8b:3c:dc:2c:46:e3:
         a5:f9:57:b6:87:18:8c:9f:e4:97:aa:c1:15:b2:ab:bf:6c:62:
         93:66:da:e2:4d:a6:af:a4:4a:61:84:29:87:0e:18:54:42:cc:
         ac:50:4b:02:0b:c4:b5:fe:71:24:c8:3f:77:11:87:f6:16:6c:
         ed:9f:bf:ea:ce:e3:1f:74:46:03:30:f6:96:ff:06:12:18:00:
         18:6f:5f:1f:b8:ef:5f:43:24:28:05:60:36:53:24:98:1c:0a:
         c1:c4:ae:2c:2b:f5:8c:3c:a0:85:13:55:9c:56:7b:7b:6b:ea:
         be:26:19:b7:c5:e3:75:9d:8a:74:83:b7:05:cc:71:51:d2:35:
         2b:03:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:22:55 2025 by rpki-client