Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File:                     ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier:          MQQyy7G7G64DOg8CYju+riDn37A/ePfgnL6gcA9GmZ8=
Subject key identifier:   4F:5A:8E:82:75:B8:EC:13:18:C6:EC:D8:D4:1F:1D:6E:8A:B2:F4:FE
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer:       /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial:       01976C61D0CC7DCEDAA78A119106524A2EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number:          07A6
Signing time:             Sat 14 Jun 2025 03:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:39 +0000
Files and hashes:         1: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: 3ZhXD1yWKr8easZAy1AcBLVVxNncEO8DaZMSLh0ot0s=)
                          2: npO31UQ6MgQb_KXFRuB5cseCGq0.roa (hash: g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:d0:cc:7d:ce:da:a7:8a:11:91:06:52:4a:2e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
        Validity
            Not Before: Jun 14 03:00:39 2025 GMT
            Not After : Jun 15 03:00:39 2025 GMT
        Subject: CN=4f5a8e8275b8ec1318c6ecd8d41f1d6e8ab2f4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:31:53:2d:fd:c3:40:5d:31:8a:fc:85:eb:
                    17:df:e4:d1:9a:0f:d5:4c:b0:54:19:0f:e7:71:6b:
                    be:31:ed:90:9f:d7:da:d3:d7:b5:18:6b:d8:4d:0b:
                    4c:57:17:79:77:2f:18:da:6e:46:a6:18:54:81:ac:
                    bb:88:46:a6:09:ee:8b:47:3d:68:a9:d9:fe:f1:8c:
                    2c:51:ad:a2:35:ff:44:20:d5:73:20:16:2a:ec:65:
                    26:b0:e2:35:47:a7:ea:4d:12:87:cd:db:bb:b4:99:
                    a3:7b:d3:3e:d4:85:78:c0:21:f2:7f:fa:ef:4e:6d:
                    1a:c9:81:e1:ca:67:b4:ac:3b:2c:d0:4a:59:4a:8c:
                    63:4c:8c:cc:a2:0c:a6:50:4b:b1:39:d2:29:1f:17:
                    33:ad:e1:1c:26:e7:e3:6f:db:4c:93:0c:fe:69:aa:
                    b3:ae:73:95:78:64:89:4f:47:05:54:59:b8:41:dc:
                    a7:b0:93:f9:12:fd:24:18:0f:3e:10:63:78:c8:c6:
                    b7:10:d6:ca:29:43:1a:13:bf:c2:83:42:ee:31:8b:
                    c6:14:5f:20:92:e9:78:49:cb:8d:ff:68:83:9c:2a:
                    ea:71:16:e0:84:e2:88:1b:6a:36:9d:02:9f:ec:58:
                    4f:60:51:6f:02:ec:b9:72:ba:eb:3a:8d:e8:7c:99:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5A:8E:82:75:B8:EC:13:18:C6:EC:D8:D4:1F:1D:6E:8A:B2:F4:FE
            X509v3 Authority Key Identifier:
                keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ee:0e:96:38:a2:f0:54:18:84:b0:39:d1:79:88:b9:fe:92:
         e6:96:78:f7:50:40:0e:02:d2:84:52:ea:db:11:3e:f0:92:76:
         c6:81:07:20:88:af:29:55:21:8a:23:74:19:ed:c5:3b:af:8a:
         1e:e1:80:66:ae:96:cd:e9:cc:cd:93:3c:da:82:e8:a0:78:71:
         0b:b8:28:d3:e8:d0:a8:91:7c:2c:70:79:bf:92:f3:3b:e5:34:
         15:81:69:d9:23:f4:89:7e:f6:7a:91:f9:5f:ab:07:cc:26:b0:
         fe:78:7e:c4:8c:d9:80:c5:3d:6c:a9:13:b4:d8:d7:c0:81:cd:
         98:90:9b:69:fd:8b:b7:36:9b:c0:65:1e:1b:18:4b:25:6d:91:
         74:70:f4:6d:d5:b6:2f:d9:fd:76:81:47:d4:f7:5d:6c:f5:30:
         45:4a:f7:a6:b1:a2:af:c3:af:ca:83:7d:97:3f:a7:d9:a6:8a:
         30:98:a0:8e:a4:fa:75:40:a0:88:f4:bf:92:d9:4f:48:f8:cc:
         e2:aa:2a:94:23:55:4c:3f:52:3b:d5:12:57:d6:8a:c9:87:1c:
         7a:5b:25:25:7b:ef:08:6f:ba:87:04:ab:ce:d5:60:f2:bd:c9:
         90:80:84:85:98:62:16:c4:09:f3:9a:b1:f5:0c:d2:85:8d:19:
         8d:d5:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:44 2025 by rpki-client