Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File:                     t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier:          o7DSuTxZInYdAq+k5P8UDbS+FBxCdeFryGBweWogq/I=
Subject key identifier:   29:E4:93:A6:8C:53:EA:7B:BC:9A:AA:B6:3D:88:49:1B:85:78:4C:07
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer:       /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial:       01977308B7888994D0E15C86CF7BE8E9E5A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number:          02F0
Signing time:             Sun 15 Jun 2025 10:00:40 +0000
Manifest this update:     Sun 15 Jun 2025 10:00:40 +0000
Manifest next update:     Mon 16 Jun 2025 10:00:40 +0000
Files and hashes:         1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
                          2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: gXxd556AL0T38berT8SK9Y3SNz82y0lxVGgRdRxrJ/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:08:b7:88:89:94:d0:e1:5c:86:cf:7b:e8:e9:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
        Validity
            Not Before: Jun 15 10:00:40 2025 GMT
            Not After : Jun 16 10:00:40 2025 GMT
        Subject: CN=29e493a68c53ea7bbc9aaab63d88491b85784c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:7a:3e:94:4b:57:0e:c5:10:d9:10:14:f6:
                    3d:72:f4:37:f4:81:05:9f:11:be:5e:d0:06:b0:1a:
                    00:1b:1f:ea:ff:4d:7d:d4:14:72:51:cb:4c:21:bc:
                    cf:a1:07:58:57:ae:84:e0:71:99:ac:1a:9f:87:57:
                    82:63:c1:bd:84:07:25:fb:b7:8f:09:bc:e7:71:af:
                    69:3a:4c:18:a0:49:15:cb:68:68:2a:99:1c:7c:d9:
                    69:21:af:7a:fd:fc:c1:b9:83:ba:8f:57:a9:81:4d:
                    a0:41:6a:74:7e:96:14:47:02:70:f3:93:1e:7a:52:
                    bd:89:47:fd:0b:58:06:de:37:6f:3e:c7:31:57:60:
                    c3:b6:75:64:06:69:42:78:fa:d0:26:5c:1b:ec:f0:
                    c4:98:40:6a:b4:dc:a6:0e:51:cf:9d:7e:85:f7:d0:
                    49:a2:88:2e:a4:69:5c:4f:6b:ad:39:3f:1a:0b:db:
                    79:94:89:0c:d9:f7:82:7c:30:70:0c:9a:cf:39:b3:
                    51:9c:a3:8f:28:fd:71:b0:9d:99:e1:b1:be:a2:7f:
                    f0:7a:88:9f:81:5a:92:52:ea:b5:84:86:5e:47:b7:
                    8d:aa:39:ef:5f:cf:c7:c6:36:c2:fa:1b:c6:ed:e1:
                    50:98:df:e4:72:60:a4:6d:60:06:67:77:26:8a:cb:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E4:93:A6:8C:53:EA:7B:BC:9A:AA:B6:3D:88:49:1B:85:78:4C:07
            X509v3 Authority Key Identifier:
                keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:2a:5c:a9:c8:a0:1f:80:92:cb:55:3c:70:99:0d:f3:d8:
         33:09:be:46:cf:15:f6:2c:b6:10:a2:43:e9:40:55:41:b5:ed:
         0f:fb:bd:1e:92:07:3e:17:ad:11:f3:1d:4a:49:7d:55:d6:b8:
         43:20:ba:6d:b5:26:0e:87:39:a6:be:b6:ca:b6:3f:f8:e4:9c:
         f9:83:a7:69:9a:88:dc:e0:00:63:38:4d:f6:5d:a4:fd:33:4b:
         95:4d:71:9b:ba:78:bd:1c:53:dc:02:12:57:92:ca:aa:cb:21:
         09:1e:48:b0:cf:5f:18:fd:08:c5:18:3b:47:23:81:1b:38:fb:
         76:4b:90:74:58:fa:54:fa:86:7b:a8:d3:c1:10:ac:3f:20:10:
         70:da:0e:e7:ef:1b:09:a6:47:e2:0f:2f:ca:1c:c8:c9:ad:98:
         5e:d8:39:19:03:0b:e2:1c:eb:9c:a5:a7:17:72:5d:15:88:df:
         1e:b1:b8:95:b6:32:c5:2e:1e:92:ca:27:e1:65:1a:d9:fc:65:
         41:58:3c:76:c4:d2:c5:db:80:b1:09:7e:92:f4:4b:09:fc:df:
         84:d1:e0:56:d2:a9:d7:2d:15:f9:80:6f:03:6b:cd:42:d0:9c:
         3c:a6:36:da:98:18:77:fe:5a:c3:2b:48:c3:14:d8:88:4a:28:
         98:ae:e2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:10:37 2025 by rpki-client