Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File:                     f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier:          iIMLb0mvRl7OOy1GiVg62SHmfy6mzabdU8VtNsuIVWQ=
Subject key identifier:   25:22:F6:C8:63:4B:A1:12:8E:FA:86:C1:41:56:4F:93:40:8C:FE:5E
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer:       /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial:       01976CCF8604A78B48EDD2FDEBD08ABCDD80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number:          1520
Signing time:             Sat 14 Jun 2025 05:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:28 +0000
Files and hashes:         1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=)
                          2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: EfFjTcdUPHOiuphvVRwBUPSl4p3ivbm9IRdYMteSo3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:86:04:a7:8b:48:ed:d2:fd:eb:d0:8a:bc:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
        Validity
            Not Before: Jun 14 05:00:28 2025 GMT
            Not After : Jun 15 05:00:28 2025 GMT
        Subject: CN=2522f6c8634ba1128efa86c141564f93408cfe5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:ad:54:c1:33:29:40:a3:4a:d4:fb:18:e4:
                    c5:ea:32:ce:f8:04:d5:a1:7e:af:f6:f4:6b:3b:75:
                    0b:af:59:4e:dc:79:cc:2b:15:56:49:0b:d8:d8:06:
                    be:ad:53:76:89:35:38:26:c2:e8:6b:6a:03:7c:a7:
                    5a:2f:7d:53:3a:27:bc:6d:7d:2a:93:62:44:27:b9:
                    66:3f:14:6a:81:d1:71:5f:83:90:06:0c:90:67:f4:
                    1d:af:16:eb:e1:0f:04:bb:87:c3:05:c5:eb:e2:05:
                    28:55:4d:ac:41:e3:79:46:90:5d:5d:d3:39:89:9d:
                    0a:db:ec:a8:e5:c6:9a:44:70:ad:d9:43:09:41:8c:
                    be:bc:f3:b7:9e:3d:2c:37:21:53:00:1e:9a:6d:9d:
                    29:c2:ae:fd:11:a7:f0:71:02:58:ae:45:b2:7f:77:
                    40:00:ec:fc:3d:fa:df:b7:74:49:51:0d:6d:ed:0a:
                    3c:ae:6d:24:b0:e5:22:cc:66:69:b3:46:0c:82:ea:
                    71:17:dd:f2:a3:ac:70:75:26:5e:c8:a3:aa:e1:5d:
                    98:76:6b:d8:9a:72:8f:f5:a9:b3:94:33:b8:8d:cf:
                    ee:36:71:88:a5:9e:bc:19:15:b0:a0:bd:30:ee:34:
                    a3:ff:62:9d:71:a1:29:a7:41:20:af:2f:6e:42:47:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:F6:C8:63:4B:A1:12:8E:FA:86:C1:41:56:4F:93:40:8C:FE:5E
            X509v3 Authority Key Identifier:
                keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:53:6b:d5:87:e4:1c:62:ed:38:6c:7c:2e:e6:99:f7:75:63:
         70:9c:08:db:be:32:25:fb:39:ea:4f:fa:7a:56:65:77:9d:e0:
         94:72:26:bf:f8:0d:13:45:52:07:26:b8:85:76:9d:d4:6f:77:
         03:6f:87:b5:9d:85:f3:60:c7:c7:8a:db:1c:8d:f2:cb:9e:82:
         14:90:65:d0:e2:68:63:53:b8:c7:aa:af:77:08:77:91:e4:d7:
         20:79:91:a0:42:0f:b9:ea:e3:e0:97:bd:c6:ff:78:ed:3c:82:
         af:56:c6:dc:02:6c:4b:17:81:20:b3:fd:8f:76:26:ad:e2:26:
         71:b3:99:32:25:0e:9f:61:2a:b5:b8:cd:65:72:6d:e2:ae:6b:
         62:24:a3:d6:72:30:2b:be:c2:4f:a0:28:be:2b:d1:69:8d:85:
         ea:73:5c:98:6d:36:f0:da:97:f1:01:f9:a3:9c:0c:f5:9f:8f:
         c3:14:61:16:ae:18:74:f2:bf:3a:4e:ed:eb:0e:14:4a:3b:6e:
         f3:ab:67:7d:29:7b:f8:a7:07:04:c8:66:fb:39:41:ea:18:1d:
         5a:ac:7b:cf:29:4c:53:32:fc:48:ac:65:08:3b:0d:5a:a0:1b:
         d5:38:a6:85:9d:c8:22:92:2c:a8:22:f9:38:c7:f0:81:e0:10:
         e5:22:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:11 2025 by rpki-client