Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File:                     b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier:          3d+2fq2HLb8r17iGIWhKh6Cu61u3M1hJfFzLB0W7j3Q=
Subject key identifier:   8A:42:42:14:15:8D:CE:1D:88:45:0E:88:76:FE:7C:30:23:33:00:FC
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer:       /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial:       01977FE91C53685C2ABB3998D31B3AD7A8D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number:          0C7A
Signing time:             Tue 17 Jun 2025 22:01:12 +0000
Manifest this update:     Tue 17 Jun 2025 22:01:12 +0000
Manifest next update:     Wed 18 Jun 2025 22:01:12 +0000
Files and hashes:         1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: TIOJ5DsecpFDodjHjZcLSYGwjdKYXpcKyUaJTh0crnU=)
                          2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:e9:1c:53:68:5c:2a:bb:39:98:d3:1b:3a:d7:a8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
        Validity
            Not Before: Jun 17 22:01:12 2025 GMT
            Not After : Jun 18 22:01:12 2025 GMT
        Subject: CN=8a424214158dce1d88450e8876fe7c30233300fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:8f:32:86:5a:c7:b4:0f:61:c2:0d:2b:34:
                    cc:a2:c9:b9:86:1f:0c:99:93:43:44:ca:6a:46:e2:
                    0d:8b:9a:b7:f7:2c:00:f3:77:48:47:e8:35:32:d8:
                    2e:7a:4a:1f:ce:62:f4:4b:56:8f:ec:9f:c9:2f:27:
                    04:ec:a8:80:3d:55:14:90:62:0f:4c:08:b9:e9:2a:
                    c2:89:3f:ad:50:6f:0c:79:7a:bc:5a:98:2c:be:36:
                    06:52:26:4f:43:2b:30:b2:f4:9f:df:55:c3:72:c0:
                    77:17:81:94:50:b9:68:31:69:1c:9b:fe:ce:d7:2c:
                    a7:b1:3d:c0:7d:6b:cc:7f:4a:16:7d:df:a8:01:86:
                    87:e6:5d:1d:01:fa:38:6e:4d:7b:95:0c:44:11:5b:
                    34:6f:ce:a9:4f:07:43:fd:bf:d9:82:29:14:f4:0f:
                    83:02:4d:a0:6c:d9:42:da:62:64:fb:ce:f1:1f:dd:
                    e5:69:0e:58:2e:e4:b7:eb:4a:12:b7:97:30:e4:f2:
                    f8:11:0b:b4:21:9c:f1:2a:de:5d:c6:7e:91:05:35:
                    25:83:de:89:4e:30:5d:eb:09:73:a5:09:c7:2b:71:
                    0e:e9:a1:d9:82:43:3c:99:b8:19:2b:cb:ad:03:5b:
                    fd:4a:da:cf:a2:83:69:cb:e4:40:1b:8d:14:d3:59:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:42:14:15:8D:CE:1D:88:45:0E:88:76:FE:7C:30:23:33:00:FC
            X509v3 Authority Key Identifier:
                keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:dc:e6:b9:b5:02:4d:c3:72:63:ed:1d:3f:cc:2b:ee:43:
         e1:ec:19:18:c1:b0:e2:9a:e6:03:ea:5e:dd:22:45:20:fd:35:
         fe:25:b5:3f:80:85:51:fb:32:2e:7b:c8:36:e1:3e:d4:44:92:
         6f:8f:90:e8:82:d2:b5:0b:24:e0:0e:23:3d:9e:85:12:43:e9:
         b3:33:6c:9b:fb:24:b7:61:e6:02:6c:a3:01:17:55:35:03:a2:
         17:1f:a7:e0:4d:12:92:14:f8:90:29:c5:76:16:8b:a6:2d:3a:
         e8:80:5c:1d:63:41:9d:3f:db:96:ec:d0:aa:47:cf:62:31:b0:
         de:b0:55:66:35:8a:46:46:bf:08:79:ba:fa:34:50:5d:64:fb:
         d7:b7:07:ff:3d:e1:2d:67:96:cd:1d:91:e3:82:6d:9f:e5:82:
         64:4b:3b:2e:75:79:11:5d:7d:19:58:99:25:10:2f:c7:e3:58:
         5f:33:2b:63:e4:71:df:2c:bb:10:c0:ad:71:a8:36:13:5c:0a:
         26:a7:a6:b7:72:3b:75:5d:e8:52:fa:47:25:32:e6:7e:77:69:
         ed:80:87:cc:e6:dd:06:af:7d:02:96:07:3a:18:9e:7c:b3:63:
         93:06:c7:8b:48:a2:11:b7:7e:a6:88:50:19:1e:68:e0:e9:a5:
         d1:da:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:21:44 2025 by rpki-client