Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File:                     x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier:          ZDGcv9xXeE+BIGqTjrV97Vbkvkz5D874af04tYaOyxE=
Subject key identifier:   98:1B:46:5D:D0:44:89:29:95:81:EA:BF:6A:4C:8C:4A:70:F3:45:81
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer:       /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial:       0197CA5E8AD659C2D8CF3889FD6AB524F3FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number:          14D5
Signing time:             Wed 02 Jul 2025 09:01:22 +0000
Manifest this update:     Wed 02 Jul 2025 09:01:22 +0000
Manifest next update:     Thu 03 Jul 2025 09:01:22 +0000
Files and hashes:         1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=)
                          2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: r93sVu0hDI5JrkI9yL6NHYyz83BsdtAcJ5got5+2+iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:5e:8a:d6:59:c2:d8:cf:38:89:fd:6a:b5:24:f3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
        Validity
            Not Before: Jul  2 09:01:22 2025 GMT
            Not After : Jul  3 09:01:22 2025 GMT
        Subject: CN=981b465dd04489299581eabf6a4c8c4a70f34581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:ed:84:75:cd:32:b1:9a:d1:5d:0d:ea:36:
                    6d:68:e8:05:9c:37:40:19:82:a3:36:88:35:fb:9c:
                    a4:f3:8d:af:d3:71:0f:fc:74:e6:33:da:89:b7:ea:
                    f3:95:b6:b0:b2:0f:30:0f:b6:f2:49:86:0f:f1:73:
                    66:f9:77:25:7d:33:9a:b5:ef:34:01:63:fc:b3:32:
                    95:da:18:32:fe:72:73:b3:b2:71:d7:26:f8:ff:9a:
                    d9:84:2c:96:e5:43:c3:8f:b7:47:35:d5:71:31:62:
                    f8:fd:b3:30:af:af:c7:d0:16:2e:20:4a:3c:e6:18:
                    60:75:f7:b8:7f:d6:e6:6f:fa:d1:d7:33:a4:b2:81:
                    2b:c8:37:ab:88:d5:a7:78:4a:c8:2f:bf:93:dd:2c:
                    ef:f4:a1:de:ee:8b:50:71:4e:88:fc:04:fc:9c:1e:
                    a9:0a:9b:6a:82:a7:bb:c9:b7:97:7b:5f:47:70:60:
                    80:02:b4:8f:01:97:88:b5:08:ed:8f:d0:eb:2a:e5:
                    80:44:bf:67:c3:d3:72:10:98:dd:da:d7:59:fa:2f:
                    62:ed:9c:a5:e1:6e:d0:3c:b9:5a:21:dd:80:25:9d:
                    c2:35:b7:28:a5:3e:1f:f5:55:ca:22:6e:fe:44:3f:
                    13:c3:b4:33:6e:34:e0:9a:fe:cf:8c:16:71:58:ea:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1B:46:5D:D0:44:89:29:95:81:EA:BF:6A:4C:8C:4A:70:F3:45:81
            X509v3 Authority Key Identifier:
                keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:21:1d:01:47:c7:2a:96:63:ce:fd:69:b2:1c:7b:ff:ba:29:
         04:27:81:0f:37:00:7c:bf:46:05:6f:b7:4c:3b:ec:13:7b:cb:
         21:bf:c0:be:4d:ea:c9:cd:dd:50:50:1d:3a:a1:7a:84:ee:1f:
         73:b9:fb:22:04:8e:97:2f:48:55:49:09:f2:87:2d:78:49:42:
         9a:f8:f5:a8:13:53:37:16:bd:fa:3a:66:49:84:22:9d:53:6d:
         71:eb:4f:83:ea:63:b2:bf:24:cd:12:b8:fb:bd:32:c6:bd:da:
         0a:50:c3:52:46:5a:f5:5f:95:15:ba:2f:c6:44:e2:3a:ed:c7:
         22:e2:cf:4b:56:99:4b:97:b4:62:e5:fc:a2:f8:91:b5:5b:fc:
         d5:66:6b:b4:cf:2f:2f:c8:5c:02:ca:ac:c1:3d:8a:c3:e6:95:
         9a:92:da:ab:7e:05:c5:ad:3d:97:0e:93:f9:0b:36:ef:90:41:
         32:80:fb:e7:9e:88:57:57:af:ed:2c:bd:38:7d:eb:78:6e:48:
         ce:6b:b8:cb:26:7d:17:ac:32:f4:8d:38:8f:9f:2a:50:51:33:
         81:b7:f6:76:e9:39:6f:a7:16:96:f4:b7:e5:17:f8:31:ab:cc:
         d0:a2:ea:18:01:2d:59:1e:7d:cd:89:08:21:15:39:59:2d:39:
         a2:1b:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:19:19 2025 by rpki-client