Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File:                     7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier:          B8iwHO3eoezeZSPzPZIknHLvr7O9iYXGObSBcd1WYuo=
Subject key identifier:   48:EB:4B:44:FD:52:1F:AD:45:DA:2A:E8:83:74:E5:86:D8:90:F3:D8
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer:       /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial:       0197B77C1A5CB2AD8BD4CCACA5DD58390D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number:          1546
Signing time:             Sat 28 Jun 2025 17:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:53 +0000
Files and hashes:         1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: KK1Qp4vcctqiN3FBpWsCqIVBWHQVb7m6F7JHL/RDDW8=)
                          2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:1a:5c:b2:ad:8b:d4:cc:ac:a5:dd:58:39:0d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
        Validity
            Not Before: Jun 28 17:00:53 2025 GMT
            Not After : Jun 29 17:00:53 2025 GMT
        Subject: CN=48eb4b44fd521fad45da2ae88374e586d890f3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:8e:32:7a:ba:9b:07:16:0a:f1:a6:ed:71:
                    fe:a4:6a:ff:59:bd:4d:cf:57:b5:e7:77:65:1b:7a:
                    7c:04:0d:6f:31:8c:aa:29:7c:6b:da:be:87:06:54:
                    bd:54:12:74:ba:7b:58:b4:7f:30:7c:58:a3:16:fd:
                    8d:f5:64:fa:13:58:02:eb:31:7e:a5:cb:c1:77:e9:
                    88:cb:3a:c0:94:8a:5b:7e:34:43:9f:61:39:7a:ed:
                    c9:ff:6c:07:8a:ac:53:3a:f4:dd:8b:3f:11:af:ad:
                    fc:59:ac:2a:8a:e0:7f:37:e4:e8:14:b3:af:c9:64:
                    1d:63:2e:67:b3:dd:34:7f:f5:eb:b0:38:49:ca:19:
                    31:4e:56:52:e7:3a:5b:f6:1b:dc:89:b2:eb:f3:87:
                    ad:f6:5f:43:4d:e7:f3:d7:a6:4a:9d:a5:7a:15:45:
                    8f:46:48:ab:87:35:03:68:96:f2:01:bc:e0:15:bb:
                    02:5b:b5:49:20:4f:7c:f9:6c:33:11:30:cf:4d:56:
                    fa:87:80:91:81:c1:98:fc:53:e3:fe:23:88:be:5e:
                    33:95:82:36:98:52:45:3e:72:d0:69:1e:73:b8:f3:
                    d5:c4:d7:8a:ad:5b:07:99:ec:a2:01:5f:2d:d7:f1:
                    f2:4c:7a:e2:68:f0:95:4d:0c:9a:ff:89:7a:72:6f:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EB:4B:44:FD:52:1F:AD:45:DA:2A:E8:83:74:E5:86:D8:90:F3:D8
            X509v3 Authority Key Identifier:
                keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:59:77:b5:dd:be:9d:74:ec:fc:55:b7:bf:64:a5:f1:cb:09:
         35:d8:08:29:28:49:f6:87:18:cc:1c:f1:97:40:0d:6c:47:d9:
         7d:1e:59:57:0f:df:3f:75:60:e8:ab:1c:a8:88:0f:27:b5:96:
         54:33:e7:31:e5:ae:0b:b3:62:3b:37:f2:80:1b:92:37:1e:19:
         22:34:e5:95:08:e4:9c:04:2f:57:39:18:92:d3:4f:27:ae:f5:
         da:ae:55:01:9a:7a:ee:45:25:b4:27:ff:7c:3b:d1:25:f6:f4:
         3f:87:e5:e4:f6:56:56:8e:0e:c2:83:f9:0e:9e:4b:fb:30:55:
         69:00:ca:9d:e3:b0:53:7b:e8:b5:71:a4:29:97:de:7f:35:7c:
         55:c3:0f:22:fe:15:ee:11:b2:47:ba:5c:35:75:dc:10:be:c1:
         75:69:78:23:52:c7:67:a7:90:32:ab:c6:fa:ed:b1:85:e7:f7:
         5f:01:09:d2:24:81:96:c5:f7:43:bc:a0:92:9e:85:70:7c:bc:
         50:de:41:e2:ba:14:5b:5e:58:70:2f:72:1b:fd:69:fc:4b:00:
         80:fe:2a:c8:cd:7a:5b:79:74:90:66:39:4e:66:fa:b6:88:d8:
         3a:76:9b:2e:00:44:06:a4:9c:23:83:24:fb:85:fc:a6:e5:18:
         14:35:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:57 2025 by rpki-client