Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          vH7+YlHIun6kRJE//eQcfGLxH0MAKwxsD3+Wts4OYIY=
Subject key identifier:   69:3E:F9:CE:29:80:0C:D2:B7:8F:06:2B:07:3A:D2:A2:62:62:F0:0A
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       01976C989B1AFD2467C227D90D3E42495FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 04:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:29 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: mf6cBHHb3c4+nqLRf+4Riq7YHh5zgoY9twy6qIirlgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:9b:1a:fd:24:67:c2:27:d9:0d:3e:42:49:5f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: Jun 14 04:00:29 2025 GMT
            Not After : Jun 15 04:00:29 2025 GMT
        Subject: CN=693ef9ce29800cd2b78f062b073ad2a26262f00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4e:e3:7b:e5:85:62:94:91:f3:e9:5d:fa:66:
                    cf:b8:4c:3f:e9:75:56:4f:01:be:0c:e0:b6:b8:30:
                    de:31:9b:9b:df:ac:d8:98:c4:c7:e3:27:23:7d:88:
                    2c:3b:aa:13:1b:e5:5b:d8:3c:83:72:9a:86:f1:b5:
                    05:1d:53:24:db:94:b2:64:51:1e:c0:8c:06:fd:24:
                    19:f1:cd:9e:2c:2d:c8:ee:e4:9a:5b:af:59:b6:48:
                    8f:1f:0e:d5:e1:df:3e:9a:40:09:ae:fa:cf:42:6e:
                    83:77:22:85:4a:61:66:d3:de:76:11:f7:24:e9:18:
                    d0:ea:4c:5d:bb:95:c0:ee:15:31:70:b3:93:35:f0:
                    0e:8d:10:41:a9:0d:84:0f:e8:fb:15:0a:e4:e5:ad:
                    8f:c0:4c:34:35:8d:16:fa:f4:92:af:16:9d:3c:3e:
                    c5:e3:c2:28:ce:37:96:20:74:ec:f7:f9:27:57:dc:
                    81:9b:2f:3d:9b:55:78:15:c6:53:33:f1:05:a1:0f:
                    cd:03:a1:58:6e:df:15:83:02:1b:6c:d8:4d:59:1e:
                    c0:a4:0b:da:ea:45:ef:c1:06:c5:36:06:1a:57:fc:
                    5c:8c:4a:a4:51:62:bd:26:e3:04:1c:84:d9:5e:89:
                    a8:16:e6:b3:81:13:1a:31:26:e9:7a:db:7d:9e:58:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:F9:CE:29:80:0C:D2:B7:8F:06:2B:07:3A:D2:A2:62:62:F0:0A
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:ed:fd:f4:f0:a7:32:46:92:cd:d7:29:8f:37:bb:ed:51:
         1d:ef:48:f7:ff:96:e5:bf:e0:e7:a3:e4:cf:5a:5b:57:be:a7:
         27:2c:d4:a7:98:bf:af:8f:46:c0:e5:75:6f:75:77:4e:39:b8:
         26:3d:07:88:fe:6b:ad:01:d7:69:4b:27:fb:04:89:37:aa:03:
         ba:8b:a7:bc:3d:91:7e:c3:30:ae:6a:eb:25:4f:63:2a:f2:83:
         40:e3:c2:e8:4f:3f:f1:bf:e5:8f:20:27:91:7e:5c:d7:2b:fd:
         b3:04:d9:cd:99:95:68:5c:cf:a6:e0:6c:04:8f:d3:af:21:2d:
         3a:ad:a2:7f:76:55:f0:49:b4:82:3d:ca:a3:3a:61:e3:7b:a7:
         bd:78:03:14:d4:5d:3c:dd:18:74:e7:03:8f:63:f8:24:ea:60:
         c9:3b:9a:bd:22:77:07:91:65:44:bd:6c:6f:d4:a0:f2:33:5b:
         39:0a:b5:01:6f:ab:4a:cc:0f:7d:d8:54:26:6c:fc:e5:b1:53:
         aa:7a:56:c0:33:65:e2:f8:f4:0b:40:65:33:f9:1c:1d:c5:8c:
         10:8a:55:83:f3:80:24:9b:7d:2f:d4:2c:bd:95:73:34:e3:84:
         d7:40:bd:07:d6:b8:53:86:83:50:9f:a5:32:7f:30:61:a6:29:
         e9:dc:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:50 2025 by rpki-client