Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
File:                     AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json)
Hash identifier:          vc5v4c7kGFVjua1voWjELC1qx+QoplP3abs+/n/xzBU=
Subject key identifier:   04:EB:FF:27:0A:E4:97:BD:C4:40:15:56:A3:8C:59:D1:DC:1D:28:43
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Certificate issuer:       /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial:       0197B70E8262AB1708567A08CB61A747F24E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
Manifest number:          07EF
Signing time:             Sat 28 Jun 2025 15:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:10 +0000
Files and hashes:         1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: UOw1/ehuBwbHnwrq3LhDiIL5S0TrUlPEs7lW64ZOdB0=)
                          2: ZAHBHHaAw7FsCrpLUbPA7Y_af1E.roa (hash: BHI7TthhK/CKdv2M5Vzp/LT9A37tVvweSFfs+BtDAtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:82:62:ab:17:08:56:7a:08:cb:61:a7:47:f2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
        Validity
            Not Before: Jun 28 15:01:10 2025 GMT
            Not After : Jun 29 15:01:10 2025 GMT
        Subject: CN=04ebff270ae497bdc4401556a38c59d1dc1d2843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:be:2f:c8:81:f8:e1:38:e3:08:13:b0:e2:
                    64:73:7d:13:17:56:90:17:e3:f2:b1:96:73:12:fe:
                    cd:56:66:02:ea:9e:9e:20:95:48:c4:90:da:af:5a:
                    aa:50:7d:86:84:ac:3b:a6:1e:47:92:39:fe:ae:af:
                    e0:76:fc:1b:67:62:6a:18:93:eb:56:a5:e3:77:a4:
                    59:85:d0:b6:0e:93:ae:73:b3:61:87:8b:22:b5:18:
                    35:2d:ce:3b:e1:9a:51:dc:27:cd:bd:bd:cc:9c:d4:
                    9c:8f:4d:8d:aa:29:75:4e:b6:9b:1d:7e:e3:af:f0:
                    d4:b7:bd:c3:ed:2a:5a:1d:82:0c:ec:7c:ad:73:82:
                    b9:36:7f:29:88:08:91:27:cc:64:24:1f:5f:44:a9:
                    91:e9:65:d5:90:b9:60:8a:0a:96:fc:2b:91:18:07:
                    eb:34:e4:b4:82:1d:a0:7a:13:27:e8:3b:c9:56:a6:
                    da:a8:e1:45:10:e7:73:2f:f2:b9:25:f4:b3:45:16:
                    65:1b:7e:0f:85:8e:de:9b:1a:3b:71:26:94:cd:65:
                    ce:d0:4c:87:a1:9f:fc:5f:bc:8f:03:9d:af:d5:1a:
                    b4:22:dd:d3:ec:8e:47:53:04:27:e3:16:de:9f:dc:
                    26:02:cb:b0:70:3c:90:d2:bb:fc:68:f2:af:0d:17:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EB:FF:27:0A:E4:97:BD:C4:40:15:56:A3:8C:59:D1:DC:1D:28:43
            X509v3 Authority Key Identifier:
                keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:2f:8f:d0:29:41:f9:b4:de:4f:cb:b8:21:bc:11:cf:55:
         44:b5:55:73:d3:09:7c:9b:d2:05:7d:7e:e7:58:11:3c:db:ba:
         6e:43:60:f7:b5:77:2f:9d:f0:f9:13:e3:b5:e3:2f:61:fd:7f:
         03:82:0f:b5:2d:02:9f:cd:4b:b2:1f:4b:29:11:f8:22:68:0f:
         23:c1:bf:8b:c7:cc:25:ce:7f:c0:4f:8c:81:ba:9f:db:5d:1e:
         5c:d5:b6:ce:fd:fb:30:c8:e4:b2:04:2b:4c:51:e1:91:fa:36:
         8b:4c:02:30:f4:fd:6f:47:e3:0f:9c:ba:e1:3d:5b:3a:91:33:
         25:b5:3b:ae:16:e4:5d:9e:62:21:48:ff:8f:0b:27:09:7b:0c:
         48:43:e2:06:3b:16:ec:6f:29:f3:de:cb:a8:d1:03:a4:e8:92:
         4c:53:f4:23:e3:ab:b8:bb:86:3c:05:52:2e:8f:ec:b2:a5:93:
         de:2c:ac:94:e9:f4:11:b2:df:cf:88:fc:c4:41:7c:45:ad:a5:
         1b:f6:e4:f6:40:60:e3:27:24:ea:2f:1c:a8:c2:19:bc:f2:0f:
         28:95:d1:83:ea:3a:33:bc:5b:27:c7:1d:79:fb:0a:00:13:2e:
         8a:d7:35:8b:45:bc:4c:ba:6a:de:c6:c3:19:43:6a:16:f7:d7:
         fa:47:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:11 2025 by rpki-client