Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
File:                     63u7_vWVCecmOYb3gFiaseeZhCM.mft (raw, json)
Hash identifier:          V4Z/DbSDYribgT26Nx8WyjTZU4XoS43ACsgaAxSfI2g=
Subject key identifier:   E3:CA:F1:01:98:60:42:58:FE:86:84:AB:8B:2D:91:1A:90:19:EA:AD
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       0197B632D7A98EDD17E236575F5DED815F53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
Manifest number:          0B17
Signing time:             Sat 28 Jun 2025 11:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:14 +0000
Files and hashes:         1: 2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa (hash: 6n3B6T6zOS7/ZMATij6xHm3dHxmihydJs8pSIyJdQOo=)
                          2: 3vDeAfLkiHCXh_bvB_uIne94H5g.roa (hash: b46TBjcEv5nDO9EWtbqceuM5D9jO8fm++JeI+6HPFkk=)
                          3: 63u7_vWVCecmOYb3gFiaseeZhCM.crl (hash: fIRa7ZsVqyKTtSkuxmC0jqAomlF38nraQX8fSTv9l9A=)
                          4: JuLc15VQAUmfB5AhoFLPEFJjfOM.roa (hash: O2lLcciXAiORRxhqLiNEE2RffnRd8Q3rIUVOEkgnsXQ=)
                          5: LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa (hash: YW2S4XaDpuDeBAX82B6q2dhsWAkKwz2ghZXjdNsB/3s=)
                          6: _cTjsccOlGfEayp8PXkvdYi_98o.roa (hash: FJYOiN3Fx5xaiccdaHyFz//7kwAj9hCTVSJd74dQwjU=)
                          7: i7e88REZIOCxR1OxendrEYYVqcE.roa (hash: NlgmAK3hiLBR5dH57/MCWPhaMtt4b6Gh+Scb1REySlY=)
                          8: tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa (hash: hY4mdHuIs45tX1gpYMoJmJu5qNi8mSFLm+F2DSiuG10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:d7:a9:8e:dd:17:e2:36:57:5f:5d:ed:81:5f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Jun 28 11:01:14 2025 GMT
            Not After : Jun 29 11:01:14 2025 GMT
        Subject: CN=e3caf10198604258fe8684ab8b2d911a9019eaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:e5:a4:28:4e:e5:89:ab:fe:da:f3:76:be:
                    95:27:17:c3:85:5c:de:38:1c:46:30:f8:8a:05:e1:
                    03:85:6f:8d:c2:91:26:b0:d2:7b:5b:eb:d0:02:6d:
                    34:55:15:82:5c:ab:ae:35:bf:4f:b0:3c:f0:d5:bd:
                    a8:31:6c:34:2a:91:79:aa:eb:39:0b:a8:95:23:4a:
                    51:9f:7d:88:bb:91:6b:7a:05:d3:4d:8e:7d:4d:bb:
                    d7:9e:bb:fd:0c:2a:b0:10:5e:35:21:60:84:42:34:
                    ab:e2:37:49:b7:95:d8:f0:b9:76:76:d6:4b:f3:7c:
                    77:5e:60:a4:a5:01:41:c8:33:6c:a0:45:de:1f:6b:
                    86:07:62:cb:0f:58:0c:8d:bc:0f:f3:b2:7c:2f:8a:
                    1c:a9:93:ef:dd:ac:fc:03:c3:58:5d:89:2c:4e:ee:
                    a7:b3:a9:88:35:65:a2:da:c5:dc:7a:c1:bc:97:f4:
                    9c:22:75:6e:4d:2c:88:27:79:25:6c:1c:51:a6:bd:
                    f4:d2:c2:e7:1c:72:7c:60:22:6b:9f:1f:36:4f:c9:
                    44:4f:bd:ac:f1:90:06:ff:0f:1c:6b:99:39:d4:1b:
                    df:6c:e1:c0:ef:95:80:8b:f3:25:7a:d4:4f:99:22:
                    71:96:40:58:e2:73:31:58:68:f0:f5:a7:fa:fc:de:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CA:F1:01:98:60:42:58:FE:86:84:AB:8B:2D:91:1A:90:19:EA:AD
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a6:4f:81:ec:8d:61:4d:da:77:78:8e:eb:90:2f:f6:7d:ec:
         47:d2:e9:a6:72:a9:0c:8a:84:5c:77:d3:2e:c3:4c:4f:47:1a:
         4c:e8:a3:a9:d8:d7:0e:52:0d:6b:90:bf:6a:30:bb:ed:ef:78:
         fd:3e:ad:b9:f3:d0:75:cd:a1:d4:ef:53:4c:e8:44:ba:a7:c5:
         fb:19:b4:6a:d6:20:a1:8a:f2:ab:0f:9f:0d:0d:03:3a:5d:95:
         42:36:80:fc:e5:12:1c:0e:22:49:2d:68:8d:f9:b0:0e:d0:1b:
         e9:4f:bf:32:0e:7b:f7:dd:e9:04:76:95:cf:bd:67:1b:21:92:
         27:2c:81:f6:2c:b9:ef:a2:e9:cc:e3:29:e7:d5:f4:4d:8f:84:
         68:b3:1f:60:7a:18:b8:a5:36:4b:a6:f6:9d:b8:d4:e8:05:d6:
         4f:73:30:f4:13:dd:1a:80:29:0b:fe:69:82:f2:bf:17:4f:1b:
         77:f8:52:2b:19:2b:c5:e9:82:9a:d0:8f:db:75:7d:72:c8:44:
         8d:87:5a:cb:36:8c:e1:d3:ec:0d:1c:12:d4:43:1f:32:ad:b9:
         5c:03:d0:13:3f:8f:33:70:41:39:6e:a8:3f:bb:55:da:d7:a5:
         3c:97:23:53:27:05:43:d7:9c:7b:70:61:d1:ca:da:fe:54:57:
         63:2f:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:09 2025 by rpki-client