Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
File:                     eyIdrMbD43H18LsnbJ_liMXuX9w.mft (raw, json)
Hash identifier:          nlUy3I4fKfya3msPmPhMGfofvZhtUYmZvhcin0+FH/A=
Subject key identifier:   99:DA:C2:D7:07:1D:5B:21:84:99:41:BB:2E:E0:A9:1A:E9:44:37:7D
Authority key identifier: 7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
Certificate issuer:       /CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Certificate serial:       01978357D87EFAFA02876907DDEF0E340541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
Manifest number:          11FD
Signing time:             Wed 18 Jun 2025 14:01:01 +0000
Manifest this update:     Wed 18 Jun 2025 14:01:01 +0000
Manifest next update:     Thu 19 Jun 2025 14:01:01 +0000
Files and hashes:         1: eyIdrMbD43H18LsnbJ_liMXuX9w.crl (hash: RDgfKZZ9unIJDYKKhsfUiG+2RHMFzENp087wcVnnOjg=)
                          2: m7YB0ysmvsiL9XYYrpj2aATLMRs.roa (hash: j1QmuoAJ87cgiclsdXh2IU8pK6QzoofrfJbDFJrkvV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:57:d8:7e:fa:fa:02:87:69:07:dd:ef:0e:34:05:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
        Validity
            Not Before: Jun 18 14:01:01 2025 GMT
            Not After : Jun 19 14:01:01 2025 GMT
        Subject: CN=99dac2d7071d5b21849941bb2ee0a91ae944377d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:fd:ff:c0:81:fc:80:8e:cc:0e:8b:1e:98:
                    47:d5:70:ca:d0:98:be:3c:86:bc:0f:90:d4:27:af:
                    8e:11:77:a5:d7:84:87:8f:e4:98:26:ee:f7:18:5f:
                    68:0b:ff:2f:61:cc:da:6b:7e:42:0c:f5:5a:eb:11:
                    a4:44:27:c2:37:5b:90:91:be:d8:5e:01:4c:28:06:
                    32:5d:ab:74:09:9a:dd:91:5d:f8:eb:14:e9:46:57:
                    7c:b0:e8:4c:bd:39:9b:6e:17:33:14:4c:fc:65:0c:
                    18:f8:f3:53:f0:e5:d1:84:39:5b:0c:70:a9:ac:b9:
                    6f:91:83:b9:60:84:21:07:e6:e1:a8:a8:34:7b:64:
                    03:61:60:77:a0:5b:6e:9d:dd:8e:93:31:f8:c1:4b:
                    75:27:a2:75:4f:a7:05:f1:a7:0a:c0:8c:0c:c2:f4:
                    15:0b:5c:3f:28:a5:cf:28:df:e6:a6:68:50:c9:01:
                    bf:c4:15:4a:57:8c:5d:13:40:0e:55:d1:d7:8f:8f:
                    3b:eb:3d:47:ba:3e:c0:72:82:37:ad:d4:be:53:e0:
                    af:eb:47:3a:64:a7:5e:b6:bc:60:3d:d4:fd:86:fe:
                    05:2c:78:b9:f1:fb:b3:f8:84:6b:73:0d:80:47:7b:
                    bd:7d:d9:7b:58:81:7f:e7:c7:f2:cd:84:29:4a:f2:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DA:C2:D7:07:1D:5B:21:84:99:41:BB:2E:E0:A9:1A:E9:44:37:7D
            X509v3 Authority Key Identifier:
                keyid:7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f1:a0:87:49:5b:08:d1:54:c6:9b:83:84:eb:66:99:12:bd:
         6c:12:5c:a5:81:ec:ca:bc:be:ec:fe:bf:59:e2:b0:b1:35:7c:
         4a:aa:95:4c:55:d9:99:4f:3e:0a:cc:a1:97:17:bf:f9:af:6d:
         78:7d:70:59:46:66:92:f7:6e:27:04:8a:9e:f8:8b:06:b2:70:
         7b:8d:97:52:77:07:2e:42:c2:6e:eb:f8:90:b3:a0:39:5c:2c:
         c8:72:12:1e:65:57:a4:d1:77:bb:d0:71:7f:24:c3:a6:4f:57:
         da:ae:fe:0a:50:13:ba:fd:61:52:54:a3:1e:d6:95:35:2e:76:
         64:05:5c:4d:d4:57:5b:00:8b:fb:71:aa:2d:28:4b:4a:95:6e:
         79:3a:91:0f:7c:6e:1e:98:c4:e8:e8:3a:e3:80:db:df:f4:45:
         21:18:93:33:71:9d:91:f2:64:6a:38:53:85:08:f9:02:3a:e7:
         09:ed:fb:6c:45:7e:80:7c:93:00:d8:7f:fe:eb:7e:a5:89:7e:
         b6:82:e4:40:30:b6:70:c5:47:93:c8:a1:b1:02:76:17:b3:4e:
         44:d3:19:e1:79:0f:e6:c5:c2:45:be:47:d7:c1:79:90:8d:ae:
         e4:f9:9d:9c:f3:9e:20:ff:56:46:2e:40:3a:02:83:b6:61:f9:
         c2:94:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:30:39 2025 by rpki-client