Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          JSog38cxjgDDIANThWX66lZERmfMib4ftGnAEHHmHlg=
Subject key identifier:   E4:06:BA:BE:F9:EE:DA:21:6A:A5:06:90:46:CF:02:64:BA:16:90:B7
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       019768BC359CD982A76E686D68686C1A1FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          0463
Signing time:             Fri 13 Jun 2025 10:00:54 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:54 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:54 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: 9E7oYA9vI1Wg0mjqctQ5/kV3TjAin9LPx5w2LtbSC6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:35:9c:d9:82:a7:6e:68:6d:68:68:6c:1a:1f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: Jun 13 10:00:54 2025 GMT
            Not After : Jun 14 10:00:54 2025 GMT
        Subject: CN=e406babef9eeda216aa5069046cf0264ba1690b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:9f:e3:df:cd:3f:38:6e:e5:bc:37:91:ae:
                    3a:db:63:34:ac:ef:ab:86:b6:82:11:d1:27:41:88:
                    fb:e0:a4:46:25:c0:28:10:60:ec:18:ef:44:c6:d6:
                    29:6a:e9:c2:7b:0b:eb:b9:b1:36:50:92:d9:e4:ff:
                    35:aa:68:f9:3e:80:98:57:e8:6c:09:a6:77:3b:87:
                    0f:8a:7e:c6:48:17:f5:37:11:a1:b5:92:f7:1f:cb:
                    f6:ea:77:fd:37:2b:d3:da:1f:4d:88:14:04:50:58:
                    d5:76:d6:d8:79:71:bc:d4:09:fa:ac:48:4e:e3:ab:
                    ce:f2:81:27:a9:6a:16:9f:1c:7f:db:99:7d:96:8f:
                    8b:fa:b7:76:04:d7:52:b7:1a:ad:3e:b0:34:0a:26:
                    01:c3:c7:45:84:71:3d:c4:a0:73:17:5f:8a:5c:54:
                    be:74:4c:1a:4c:cf:96:6b:b8:1a:97:f5:a9:9e:0a:
                    1b:03:df:61:7e:6e:89:38:9f:8d:14:91:2f:80:2f:
                    6d:ae:ea:66:a8:a4:dd:65:07:56:26:d2:7b:de:c5:
                    d1:65:80:86:d5:2d:23:fb:92:0d:6b:ea:c7:2d:2a:
                    26:d7:7f:f7:58:c7:cb:57:bd:e1:39:e0:6e:5f:4b:
                    26:2a:af:0e:7c:37:1f:1d:8a:ca:5e:18:c8:33:48:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:06:BA:BE:F9:EE:DA:21:6A:A5:06:90:46:CF:02:64:BA:16:90:B7
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:56:f6:37:8e:1d:97:70:36:23:8e:53:ea:19:83:2c:97:ea:
         72:d3:99:67:25:1f:c2:16:60:43:00:2a:30:5e:45:40:e5:16:
         1f:21:a7:77:fe:02:7f:2c:41:26:56:ed:b6:36:d6:1c:d9:77:
         73:be:4f:40:d3:06:0f:94:92:9c:2e:a4:f1:61:ac:c6:7e:f6:
         67:b7:56:52:2c:9d:6b:05:0b:4b:44:68:4f:01:aa:b4:05:c7:
         0b:70:70:65:6f:9c:dc:ea:6d:42:35:ba:4b:6f:31:72:7e:fe:
         ab:1c:d4:b8:5b:fe:76:b5:ad:78:32:be:6e:75:82:d3:7b:66:
         64:06:b8:70:a0:6a:6a:4d:83:95:79:f2:53:11:93:9f:e3:1a:
         50:d1:82:b0:cc:19:fb:f1:1f:fc:b4:19:d4:2d:1b:8c:b7:4c:
         7f:b6:34:bc:f9:a9:33:9a:6a:c6:82:d8:05:b9:24:48:64:7e:
         81:1b:ca:d5:a4:e3:53:bb:75:ae:3f:7d:f5:6a:bd:44:29:f1:
         61:7b:6a:27:2d:e6:0e:3d:94:58:7f:b9:23:ed:e5:c0:f6:a8:
         8b:db:23:e2:74:01:be:ba:cb:bd:84:b2:ef:6d:4a:41:57:0d:
         91:8f:d2:fb:0c:ad:b0:bd:8c:bd:d6:0d:9d:5a:25:6b:16:a5:
         c3:b3:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:54 2025 by rpki-client