Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File:                     Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier:          MRo3bcEusdTN7cEBnsieXox/cWmLCCTfpK9IehKuGps=
Subject key identifier:   54:FE:E7:7F:28:5A:9C:22:F4:82:15:01:52:90:32:8C:4B:CA:84:CA
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer:       /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial:       019769CE98002CF3B5D94558178CCE4B3BCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number:          0C0E
Signing time:             Fri 13 Jun 2025 15:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:36 +0000
Files and hashes:         1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: kXK+q/hcXassBsp0VigW96H9zOf7wJficwlGpRr9qTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:98:00:2c:f3:b5:d9:45:58:17:8c:ce:4b:3b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
        Validity
            Not Before: Jun 13 15:00:36 2025 GMT
            Not After : Jun 14 15:00:36 2025 GMT
        Subject: CN=54fee77f285a9c22f48215015290328c4bca84ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:09:d7:db:d6:5c:ba:25:df:dd:40:ca:01:
                    00:5e:4e:07:0b:1f:05:b9:06:a6:4b:b3:91:ea:68:
                    79:e3:65:83:37:1e:8d:d8:43:fb:73:8e:c8:a5:11:
                    75:7f:90:1e:96:91:7f:63:a8:97:c8:40:7b:59:af:
                    0c:9f:34:f2:8d:4c:2f:ca:7f:61:b0:ff:b3:2c:ef:
                    69:21:be:4e:84:9d:db:b0:0b:a5:24:c4:3f:a1:f9:
                    2d:b1:5f:e5:d4:1b:11:ec:68:ba:71:4a:f5:53:61:
                    43:96:4d:ef:85:62:38:f6:1d:47:3d:ed:ad:3c:b8:
                    f5:d6:f8:c4:41:86:26:14:56:e2:e2:b0:9d:00:4b:
                    21:ae:6d:d1:a0:7f:2d:a8:b0:31:ac:fe:41:83:7d:
                    0c:42:2c:be:81:49:a6:34:14:f6:fc:3a:8b:b3:ed:
                    7a:fa:c8:7d:91:4f:48:9a:50:b3:39:33:00:82:ac:
                    94:16:fd:08:9e:82:6e:2d:96:ff:5b:6b:01:a1:00:
                    2c:7f:be:7a:27:8c:0e:98:59:13:3b:ff:30:d5:3f:
                    ca:d5:24:27:cc:08:07:ea:dc:a1:ac:c2:4c:8d:73:
                    5c:c9:ff:ae:71:9b:44:9b:e5:18:c3:83:24:ac:c8:
                    b8:22:72:8d:de:7a:5d:66:31:d9:47:bb:9c:2f:d0:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FE:E7:7F:28:5A:9C:22:F4:82:15:01:52:90:32:8C:4B:CA:84:CA
            X509v3 Authority Key Identifier:
                keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:f5:0f:d8:7c:57:84:41:94:f9:f9:78:a4:2d:e7:71:cf:
         e0:ad:ae:eb:a1:fd:95:a1:16:ad:df:6c:ac:a4:81:0a:41:1f:
         44:5e:cd:09:8e:dd:ce:9d:a5:41:81:e8:93:78:b0:11:20:5f:
         d6:e9:2f:97:b2:1c:56:96:4e:21:f6:0d:d9:21:16:03:28:40:
         87:80:50:16:36:5e:af:db:b9:9c:6c:35:45:8f:c4:f8:a0:65:
         50:15:a3:93:04:05:f1:cd:6a:cc:c1:c2:74:f7:2e:12:79:fc:
         4f:a3:39:d6:ba:99:c6:50:3e:ff:c8:a2:8c:86:e9:03:79:95:
         4f:b7:7a:83:09:0a:f5:02:f3:27:6b:3a:0e:51:22:8e:15:5a:
         25:e9:b1:86:c5:4f:69:b8:61:ad:5a:cc:5e:41:c1:60:62:9e:
         80:3a:66:84:5b:da:23:3b:7f:64:b0:bf:9b:66:ae:19:e1:86:
         f5:e5:fe:d8:f5:2b:7a:7a:5c:81:6f:c6:6d:e3:57:c1:8d:fc:
         9d:a8:e2:5b:6a:60:79:84:8e:a7:0c:77:c2:2d:92:7f:d0:13:
         57:29:8e:ab:73:70:2c:94:f1:1c:7f:7c:e2:b8:bb:55:b3:16:
         48:fd:2f:e6:eb:91:12:ca:03:b0:35:22:7a:d1:18:54:b0:0c:
         2e:ce:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:47 2025 by rpki-client