Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File:                     7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier:          quRMRP8EAn2Eyof7mwqXG1x8TESx4Cp/NmALV/3Oi2Q=
Subject key identifier:   FA:06:AC:8C:6D:04:2F:2D:B9:07:CE:9C:20:BE:D0:FC:0B:C4:8F:9E
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer:       /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial:       01976BBD26740DEA156418854F25D7516746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number:          124F
Signing time:             Sat 14 Jun 2025 00:00:47 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:47 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:47 +0000
Files and hashes:         1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: nLS4ygdF4hSlftlseN83RYsVoEp5xaqqbqOWgMCwrrk=)
                          2: XiTX8PRRbjXruYbuuuJUYnL12Hc.roa (hash: 9YQjgU1UXlyr6JjfJF2PAwxgn/9h4L92vADp3ZCOwiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:26:74:0d:ea:15:64:18:85:4f:25:d7:51:67:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
        Validity
            Not Before: Jun 14 00:00:47 2025 GMT
            Not After : Jun 15 00:00:47 2025 GMT
        Subject: CN=fa06ac8c6d042f2db907ce9c20bed0fc0bc48f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:f3:2a:5d:dc:12:da:d1:1d:e4:e5:da:da:
                    31:8e:26:0d:32:d0:5d:f0:9d:83:a4:3a:db:bf:ad:
                    8e:29:4b:1b:bb:d0:94:26:99:be:b2:3a:0e:ee:21:
                    c6:c0:94:79:c6:1e:ef:3b:b4:ad:21:b8:62:b5:d1:
                    52:ca:2e:59:43:03:3e:c6:3f:e8:fa:6e:c4:4e:67:
                    22:80:19:34:52:9d:94:53:5e:4e:d0:fb:d9:40:f3:
                    52:2f:12:5c:88:f9:34:52:85:64:37:0e:a3:84:4a:
                    ad:46:76:aa:bb:e7:2c:81:4f:c0:1b:18:c1:43:c4:
                    9c:3c:54:79:3d:99:2f:48:a3:1c:a2:68:19:fd:11:
                    8d:83:35:ed:4f:9f:cd:ca:0d:83:ba:72:3e:f6:c4:
                    13:7b:34:af:9e:84:19:6e:ca:25:4c:be:e0:91:f8:
                    60:f1:6b:dd:6f:ac:3f:86:3e:71:9d:32:09:df:59:
                    3c:27:d0:a1:7c:fc:26:f7:c1:2b:91:98:a2:b8:17:
                    4c:9c:1e:e6:8b:32:7a:aa:10:19:02:ba:7b:2d:5e:
                    f1:40:b0:c5:ca:36:0a:65:f3:20:a9:f8:7c:6a:7b:
                    a3:6a:88:3e:5b:f8:6a:e3:11:a0:86:59:5a:0b:e0:
                    d6:1a:a9:5b:97:24:f4:c0:4b:4a:af:6c:de:ef:6b:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:06:AC:8C:6D:04:2F:2D:B9:07:CE:9C:20:BE:D0:FC:0B:C4:8F:9E
            X509v3 Authority Key Identifier:
                keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:70:63:74:c5:c8:29:ef:3f:43:53:4a:9f:1a:7c:ba:3a:0b:
         c8:50:b4:f2:8e:05:06:e5:c0:19:c3:3b:3f:ac:a4:db:4f:a1:
         38:79:6f:6f:71:72:5e:aa:1f:6e:5e:bd:1b:f1:e5:1b:9c:18:
         01:52:69:5a:20:5d:51:a7:9e:16:29:d6:6f:e8:6b:88:06:b8:
         61:d8:5a:ca:45:c0:aa:19:7c:71:8d:2b:3d:d2:b0:98:ee:40:
         f9:43:5a:20:f7:0f:69:37:68:43:7d:15:5c:40:af:c1:8f:d3:
         67:eb:f8:f8:f9:db:69:ec:dc:4b:fc:a2:34:2b:e5:cd:28:da:
         fc:c8:4e:cf:49:34:fe:4d:f3:67:d8:43:3a:f1:9b:64:f1:bc:
         b8:f1:29:e8:1e:e6:d2:c0:c7:c3:92:30:e3:0b:1f:cb:6f:41:
         e3:79:91:f3:1a:92:39:91:4f:45:8d:c0:26:0f:18:6b:1f:7d:
         d9:c7:fe:c3:fe:55:8e:ec:9a:c7:c6:16:95:6c:b4:6e:f7:b3:
         57:9c:86:3f:75:f2:5c:ed:36:a3:30:bb:58:9e:1c:a8:2a:1f:
         d8:58:d9:71:02:36:53:a0:4c:66:fe:69:a2:20:15:02:2c:92:
         21:da:5f:83:46:61:57:c9:35:d0:ac:c8:9c:12:90:6a:7c:c0:
         5d:aa:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:00 2025 by rpki-client