Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
File:                     7uNuuo1bP-lfMgGrLRFnXqAceBw.mft (raw, json)
Hash identifier:          VmKXGn2vvHFMbi/ZuMihEXGf9VFBdoOOZRCFDs00eCg=
Subject key identifier:   C4:77:11:D0:CD:87:83:14:BD:72:FC:7B:4E:37:9E:8B:37:E0:9A:EA
Authority key identifier: EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
Certificate issuer:       /CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Certificate serial:       01976C61C8063BEDA0904AB5B5FC35D81C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
Manifest number:          47
Signing time:             Sat 14 Jun 2025 03:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:36 +0000
Files and hashes:         1: 7uNuuo1bP-lfMgGrLRFnXqAceBw.crl (hash: ZXO47mVcvY0iz0sbgh2ujQcagy1AvF6jnFLI7YPKEN8=)
                          2: qatCLbB1wt003ugiHLUeaH6Egzo.roa (hash: kqMRNz8HFIkfR5BK7WY1x5EiB+ZuSgywUlDGBzooYrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:c8:06:3b:ed:a0:90:4a:b5:b5:fc:35:d8:1c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
        Validity
            Not Before: Jun 14 03:00:36 2025 GMT
            Not After : Jun 15 03:00:36 2025 GMT
        Subject: CN=c47711d0cd878314bd72fc7b4e379e8b37e09aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:df:a0:1d:ba:bb:70:b1:81:be:01:95:4c:c2:
                    42:ef:55:0f:7a:e0:3f:8b:82:df:e2:8d:b8:b2:03:
                    ff:01:35:ac:80:75:0f:13:69:af:44:46:97:23:d0:
                    3c:64:98:ec:3e:81:fa:e3:43:67:ce:dd:a6:aa:66:
                    81:c6:62:33:81:c4:57:4b:72:8f:53:4b:b7:f3:a9:
                    77:43:1b:37:50:00:99:6d:9d:bc:94:dc:de:4b:9c:
                    44:6e:e9:38:42:b6:1e:a8:89:f0:45:76:2a:ff:ee:
                    38:90:28:1d:08:2f:bd:af:a0:97:d1:d0:8d:0d:99:
                    6f:5e:78:fa:d0:71:9b:9f:44:a6:b4:77:f8:5e:54:
                    ce:07:51:98:f8:f1:fe:68:ac:5e:d1:05:bc:1a:c8:
                    3b:58:81:4f:91:14:a8:11:bd:70:a9:a9:ec:c0:d5:
                    c9:d8:02:12:52:18:67:a8:cf:67:7d:9b:6f:59:2e:
                    e4:8d:e0:f1:15:4f:20:5f:b1:bd:da:7f:84:b8:89:
                    4b:4c:9a:b6:0e:82:81:7f:de:3f:b0:65:cc:6e:9a:
                    25:6c:b9:26:9e:a3:13:be:b1:42:45:c1:96:6c:99:
                    77:f4:88:00:93:96:99:e8:9b:44:1e:37:c2:3f:f1:
                    b6:87:33:ee:f7:97:dc:48:1d:a3:96:d7:ae:f7:ee:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:77:11:D0:CD:87:83:14:BD:72:FC:7B:4E:37:9E:8B:37:E0:9A:EA
            X509v3 Authority Key Identifier:
                keyid:EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f4:3c:c6:82:18:52:08:b5:49:f0:54:2e:4d:39:15:fd:4d:
         fd:e9:8d:05:75:73:4a:bb:5e:b9:df:76:36:8c:1d:de:96:a3:
         f6:14:6b:c5:0a:27:aa:8b:32:4c:6b:81:eb:19:17:43:94:1c:
         e2:83:1f:a6:8d:5a:40:a6:2f:2d:57:18:89:1c:93:d1:90:e4:
         d1:93:03:54:f9:5e:30:26:ec:c3:18:30:43:de:68:60:f7:a2:
         11:cc:c8:fa:4b:b2:94:28:c1:99:39:b3:78:6d:7b:9b:d2:83:
         6c:3c:17:b9:f3:ea:ec:f9:74:11:2e:0a:70:8c:46:f2:89:e8:
         e9:4b:36:09:5e:d4:e1:41:a2:ff:36:e6:70:66:bc:81:ba:c1:
         aa:12:78:5e:0b:ff:6e:fd:5e:f7:3c:8b:73:5d:73:63:dd:db:
         5c:7f:57:1f:ad:bc:bc:66:53:1e:4e:1d:fd:8d:bb:f7:bc:cd:
         fe:88:a8:4b:77:e3:c9:82:29:98:2e:f6:b5:b4:2d:15:a4:3e:
         8b:b1:fa:fa:75:f5:e8:7f:5a:55:e8:f5:bd:05:2f:b4:4a:53:
         47:aa:c2:3c:dc:27:fe:4e:4e:cf:5d:e4:ca:ac:0b:a4:7c:6d:
         63:46:74:eb:ef:b4:f8:d3:fb:f7:84:37:c3:30:8f:2b:8d:e9:
         ce:b3:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:21 2025 by rpki-client