Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
File:                     enzxoqqDsSb_TO70c6Rzl6v4_w0.mft (raw, json)
Hash identifier:          IlKM3dj+z+/EHLP6fcUSDxF60LHZzrMWpQcqDuIf4ms=
Subject key identifier:   90:C3:05:C5:51:9D:2B:2B:C2:49:CA:1B:35:D8:EE:A8:0E:D8:A8:F5
Authority key identifier: 7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D
Certificate issuer:       /CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d
Certificate serial:       01976E501FC07F1ABEA2B236F70BCC40ED0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
Manifest number:          127F
Signing time:             Sat 14 Jun 2025 12:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:34 +0000
Files and hashes:         1: enzxoqqDsSb_TO70c6Rzl6v4_w0.crl (hash: 13KptuVEeQRqoVUEuw89ivMoK4kMP1ptePDI6MWMy+M=)
                          2: xb2NvHdajED54_SL3MKVNIAlUGs.roa (hash: Grou1zplFJxqish9A4XkxSqO0Yr0gOy017NWwV2yOds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:1f:c0:7f:1a:be:a2:b2:36:f7:0b:cc:40:ed:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d
        Validity
            Not Before: Jun 14 12:00:34 2025 GMT
            Not After : Jun 15 12:00:34 2025 GMT
        Subject: CN=90c305c5519d2b2bc249ca1b35d8eea80ed8a8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:b6:0e:23:94:a5:61:eb:44:2e:f8:98:9d:
                    4e:85:71:5f:57:26:ba:c7:b1:ab:c5:c9:47:52:ba:
                    3a:db:ed:7c:95:1b:cf:9f:19:70:52:76:12:1e:09:
                    01:32:af:15:b3:04:41:b0:4f:25:98:9b:e7:da:65:
                    76:3d:96:d9:62:3c:09:58:7d:98:29:e5:c7:dc:9b:
                    e2:2c:76:de:6b:32:8f:c8:2e:8c:4c:05:61:ed:dc:
                    d3:07:2f:77:e5:11:97:1e:f1:54:c1:b6:2c:58:28:
                    71:30:a0:e2:71:3c:03:1d:bb:52:16:61:d5:ef:70:
                    ea:0f:a2:54:fa:4e:10:02:0d:5c:53:6a:d0:84:8f:
                    64:2f:f9:2e:84:82:25:c2:c5:ff:6f:a9:3e:d0:a1:
                    15:7b:1a:f8:df:0a:e8:26:14:fd:cc:e1:65:dc:f6:
                    fc:37:ad:99:6b:20:9d:78:15:d3:ec:2d:d3:92:4f:
                    d4:f9:6b:44:58:d3:d8:4d:c8:3a:07:7e:c1:8c:54:
                    b1:73:7c:5e:4d:ad:cf:0c:39:b3:8b:55:11:f7:e2:
                    dd:be:19:1b:06:31:91:5b:9f:b8:d1:49:14:f1:4c:
                    c9:14:ed:04:eb:33:34:fc:72:56:0b:25:34:0e:d6:
                    9c:5a:ba:a6:21:7a:bb:2a:c8:ff:92:f9:bd:57:b5:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C3:05:C5:51:9D:2B:2B:C2:49:CA:1B:35:D8:EE:A8:0E:D8:A8:F5
            X509v3 Authority Key Identifier:
                keyid:7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:98:fc:3c:af:99:2c:43:e7:fc:52:0a:0c:7b:73:09:23:
         fa:cd:3b:7b:23:bd:64:83:b4:db:a2:ae:a3:3a:52:3b:c5:f5:
         4e:f2:d0:e5:6b:fc:20:62:2b:ae:12:ff:cf:f4:fe:02:07:d5:
         b1:af:e9:e7:99:c4:05:34:bd:31:13:ca:fd:1c:6c:7f:25:36:
         fa:ae:e4:1c:97:78:29:55:ef:1c:db:88:d9:f9:dd:8c:e5:e7:
         34:8e:ed:40:8c:8c:77:78:91:e5:2a:64:42:bf:19:d7:97:6b:
         21:50:5c:d2:28:71:62:d6:b1:69:eb:6d:13:00:24:0f:fc:b2:
         9e:91:eb:3c:db:72:b6:ad:04:0c:4d:14:1b:7e:63:40:28:58:
         ad:54:80:c6:9a:42:63:64:b7:67:66:cf:f9:f9:ec:52:b8:23:
         23:f1:63:cc:5a:23:3c:0d:46:00:80:06:b1:0e:9b:7e:51:7a:
         33:b7:fc:f1:45:46:a6:fb:3b:67:d6:2f:a8:95:ba:db:c6:60:
         9a:ec:9c:46:c6:76:59:55:1e:5f:b6:5c:24:d6:84:0e:9a:3f:
         1e:3d:aa:03:8b:3a:17:d1:60:58:e2:b4:7a:44:b5:2e:21:bb:
         31:1c:f1:04:53:f4:91:4d:13:4a:68:81:97:a6:be:53:49:b7:
         38:59:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:58 2025 by rpki-client