Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
File:                     e27QJ9N71hCaAxHihp00StlZNfk.mft (raw, json)
Hash identifier:          ZTRHxiS1XOM+pHJIoBkT144w96wmThngFSpx0I582d8=
Subject key identifier:   F2:D9:A6:08:2E:DD:5D:84:8B:10:5A:60:A9:38:BA:05:B7:FE:50:B6
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Certificate issuer:       /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial:       019774F7416A6F502E1DF2D392836962DDA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
Manifest number:          10D0
Signing time:             Sun 15 Jun 2025 19:00:50 +0000
Manifest this update:     Sun 15 Jun 2025 19:00:50 +0000
Manifest next update:     Mon 16 Jun 2025 19:00:50 +0000
Files and hashes:         1: MBsPUAFCElkz9qaG43qjjQj1qf4.roa (hash: vSWAgGTm7jYxOpiAtKnKd7IfryMpisQqN5QHCosVJVk=)
                          2: e27QJ9N71hCaAxHihp00StlZNfk.crl (hash: IDkQcQlgNgeQiMu0lBUID7h8h5Lcy++AI+fvN0+b3s4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:41:6a:6f:50:2e:1d:f2:d3:92:83:69:62:dd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
        Validity
            Not Before: Jun 15 19:00:50 2025 GMT
            Not After : Jun 16 19:00:50 2025 GMT
        Subject: CN=f2d9a6082edd5d848b105a60a938ba05b7fe50b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:8d:76:c7:dd:78:28:e1:33:bb:22:ac:5a:
                    25:61:0f:d0:b6:76:4f:e1:1f:47:20:31:e1:58:a1:
                    55:59:32:d7:69:6d:c9:87:85:5b:4b:19:33:d1:cc:
                    26:ee:e1:d7:f6:29:f9:df:c6:9e:d8:28:48:94:13:
                    47:cc:cd:37:be:cc:35:25:a8:89:50:6e:20:50:88:
                    5d:70:a6:e6:87:e3:e3:db:9d:71:be:e5:21:9e:60:
                    41:37:b6:c2:66:20:f4:7c:1c:89:11:36:57:ec:36:
                    05:5f:d1:bf:97:ad:18:62:22:f4:04:38:58:ea:08:
                    df:d3:49:aa:85:5e:e3:3e:4f:8c:6d:e0:b2:e0:a7:
                    da:e2:45:68:b9:75:5f:81:9b:cb:b8:27:42:36:c3:
                    7a:c2:4a:8a:f2:fd:22:60:c6:61:88:16:28:87:36:
                    b9:84:df:c9:b4:39:48:b8:8d:5c:f6:bb:74:38:b9:
                    6e:4d:e7:77:88:70:f5:13:1a:53:37:06:04:aa:9c:
                    82:44:bc:31:d8:f1:23:c1:fb:bf:cd:4c:ac:cf:a0:
                    d7:fa:ec:eb:d7:0f:01:cd:27:b5:69:b4:33:cb:fd:
                    e7:3a:e1:02:d6:aa:8b:3a:77:e8:1a:09:6d:da:25:
                    eb:04:8f:bb:42:0b:3b:1a:b1:5c:81:d5:4f:c7:53:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D9:A6:08:2E:DD:5D:84:8B:10:5A:60:A9:38:BA:05:B7:FE:50:B6
            X509v3 Authority Key Identifier:
                keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:72:be:96:e8:f4:91:de:27:9f:be:7f:e9:0c:24:26:04:c4:
         9a:3d:a8:38:0f:23:0b:70:ea:02:46:da:51:bd:0c:08:27:89:
         05:21:b3:3d:55:9f:d6:d2:c6:b6:00:41:84:91:32:35:38:94:
         63:a4:f2:59:3f:f1:bd:bb:e8:9d:a8:ee:09:1d:8d:a8:99:a0:
         88:a3:71:51:cd:ff:38:3a:2d:0f:a6:04:1b:7f:ad:ed:37:82:
         4e:5b:fc:a9:ef:b3:d4:86:b0:95:0e:b9:97:71:6c:92:1e:17:
         e5:86:07:b1:8f:fd:a1:0b:11:fb:0e:7a:b4:d6:89:e6:05:b7:
         e7:c4:71:e9:9b:bf:11:87:ee:c9:49:d6:6e:59:71:b4:9b:c3:
         96:57:63:8c:8a:c2:30:9e:07:76:b6:1f:ca:f0:f2:0a:f6:65:
         37:c7:7e:24:c7:65:95:6c:c1:7b:c0:1b:1b:b4:5a:ff:56:88:
         47:d5:73:af:10:6f:f4:3e:27:71:eb:74:57:10:5c:45:a1:cf:
         7f:e6:9c:47:ba:a4:0a:a1:24:72:a2:db:c8:64:c3:bc:5e:68:
         42:2f:32:40:43:f1:be:07:fe:04:99:ee:51:07:df:f2:10:df:
         84:f7:40:29:30:59:67:33:d4:3f:dd:ff:8b:c2:06:f2:dc:30:
         6a:a1:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:03:46 2025 by rpki-client