Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File:                     fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier:          MedHy/R/OpdFxvsWUs6eMiQ3TFBqjsDvd6lTrmKgDro=
Subject key identifier:   57:52:78:23:E7:FF:E0:CF:86:6C:32:56:1D:7E:50:8D:04:50:B6:2E
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       0197B7451650F9DB2A714245CB8009C4814D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 16:00:47 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:47 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:47 +0000
Files and hashes:         1: QHrCJn-3TWWMCJDQELy3q8dJt_4.roa (hash: DTg0RQCOqWT4OxprKyTz2OGsk5mW9uMRzOSYKDRAWp0=)
                          2: dvNIb3T0U0mU22w-yMo6gNRu98k.roa (hash: KB6r0yPVxOXp/PVpdxcqc3971j0F/zVlsLjdreh6UUk=)
                          3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: uMJPVBrgblgNoiyi7ukmzJkLxWDsvIE/XixnWvHo8ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:16:50:f9:db:2a:71:42:45:cb:80:09:c4:81:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Jun 28 16:00:47 2025 GMT
            Not After : Jun 29 16:00:47 2025 GMT
        Subject: CN=57527823e7ffe0cf866c32561d7e508d0450b62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:02:0f:84:ff:2f:b9:7c:ec:d9:9a:0c:1b:
                    e8:54:fa:29:29:99:64:0c:0d:b9:51:a4:f7:51:63:
                    4a:0d:0b:3e:bd:80:1f:b8:d8:01:6a:cf:8d:ce:0e:
                    0c:16:f8:b9:78:44:19:fc:66:ce:e8:4b:57:7b:88:
                    5e:18:cb:e7:ab:ce:8f:97:49:fc:39:d8:4d:ef:b9:
                    92:7d:8c:ac:ff:e6:c7:46:72:ac:52:a0:7b:29:40:
                    10:57:8a:b8:19:6a:c0:be:05:80:06:b0:eb:57:dd:
                    8c:8a:8b:4a:4d:99:d7:1e:67:14:c8:6c:8b:91:55:
                    3c:5b:5d:c6:bb:69:51:4f:41:b8:1f:23:d6:c2:08:
                    a0:45:ae:25:5d:36:33:e5:d0:59:c2:95:47:f8:f6:
                    73:99:e2:11:4e:3b:94:3f:15:96:49:9b:82:ba:3e:
                    65:aa:6c:34:3c:77:4c:63:d3:ef:fb:36:4a:25:95:
                    19:f4:65:0b:b2:14:a0:9a:17:60:88:ea:3d:d5:76:
                    c5:d2:b7:b4:76:0c:eb:3b:33:72:e0:96:fa:a3:1e:
                    47:7c:e5:34:f1:87:86:ec:0c:aa:42:e4:bd:18:b5:
                    5f:61:f2:6f:1a:26:5a:2f:c8:a2:0b:e0:dc:7c:d2:
                    47:32:dc:36:20:88:87:cb:62:12:c5:e5:74:ef:7d:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:52:78:23:E7:FF:E0:CF:86:6C:32:56:1D:7E:50:8D:04:50:B6:2E
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:03:72:16:93:c0:e1:0d:e1:e5:5b:50:41:9f:7a:a9:29:
         87:8d:fe:c5:d2:2f:d3:4d:e5:d4:e0:26:bb:4b:50:8c:dd:39:
         1f:58:f7:d5:6e:62:92:3d:48:63:b6:88:54:c4:a9:86:64:92:
         36:df:d4:4a:ed:bb:36:41:dd:f2:99:15:e1:b6:b0:9e:a3:b9:
         61:34:3a:f7:46:25:32:db:66:17:23:78:4c:33:7a:49:8c:7f:
         10:9e:fd:68:e7:16:7a:a3:6b:cb:8a:b3:06:eb:e5:36:00:30:
         93:6f:92:5a:f9:1f:79:a8:6d:08:b9:10:49:20:2a:68:e9:e7:
         61:e3:1d:4e:d5:7e:e8:cf:38:48:04:38:9c:d2:29:1b:0b:d2:
         a3:59:ef:8d:43:40:c0:1d:37:88:4e:85:99:33:66:87:e1:ee:
         a0:dd:8a:79:cd:65:ed:fd:6c:a9:24:6e:5b:7a:33:92:6e:3a:
         d6:a2:5f:5d:0f:00:d4:07:79:fb:c1:e9:28:b7:13:9c:d8:c9:
         20:74:2a:87:40:ce:c5:65:7b:1d:53:f8:62:d9:c0:40:40:a2:
         cd:2f:99:94:e2:2d:3a:c3:bb:6b:56:dc:6e:df:ec:d2:67:36:
         dc:42:93:63:14:a9:e6:2e:ef:25:73:a0:e9:1b:e2:d2:56:6b:
         be:cf:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:46 2025 by rpki-client