Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier:          A2MC4hT90NHpyy7wTq6+qojPKGXjo7gJNH9l/SZmnSE=
Subject key identifier:   C7:56:3D:0F:32:81:55:74:D1:43:50:0D:F3:1D:59:A0:36:66:AB:0D
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer:       /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial:       01977376FBB9C5FD2658A8CAB1751D2C39A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number:          158E
Signing time:             Sun 15 Jun 2025 12:01:06 +0000
Manifest this update:     Sun 15 Jun 2025 12:01:06 +0000
Manifest next update:     Mon 16 Jun 2025 12:01:06 +0000
Files and hashes:         1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: /3KDcKWmYiIbO1hkWBrnZ+fkWHhJwLDsX2DveQgF8bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:76:fb:b9:c5:fd:26:58:a8:ca:b1:75:1d:2c:39:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Validity
            Not Before: Jun 15 12:01:06 2025 GMT
            Not After : Jun 16 12:01:06 2025 GMT
        Subject: CN=c7563d0f32815574d143500df31d59a03666ab0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:54:d1:33:f6:d4:55:36:dc:b1:50:56:ad:
                    f4:6f:7b:94:70:c6:f4:f0:b9:e5:fb:65:c6:50:e5:
                    4a:b5:58:69:b4:8f:33:90:89:07:40:09:f4:94:89:
                    d2:e6:f9:97:32:f0:8a:84:53:73:93:4a:b2:2c:ed:
                    85:9e:30:05:96:c5:08:36:2d:06:51:d7:25:7f:ae:
                    16:53:54:8e:3b:f3:78:97:74:34:fb:04:53:e0:01:
                    c9:c0:05:ec:d0:41:ff:44:53:25:d9:ef:7c:c0:80:
                    94:71:00:90:87:fc:90:c7:cc:21:d1:81:64:2e:6b:
                    fb:ed:24:33:48:ec:c4:9a:0f:fc:76:be:49:cc:5a:
                    35:2f:dd:6c:11:e1:86:b7:ab:b8:29:3f:75:fd:28:
                    de:16:5e:9f:1e:a4:d1:9c:b5:39:09:08:7a:13:a8:
                    64:8b:e7:52:b0:86:61:41:27:cc:c8:71:20:be:f5:
                    d8:15:f1:c7:95:d0:8d:06:06:3c:b5:6e:00:ce:24:
                    80:83:f0:04:86:d4:3c:4d:96:c6:6a:07:35:e0:7a:
                    e0:61:f9:13:e7:d6:a2:86:ef:32:c8:83:80:33:5b:
                    79:31:de:ee:fb:30:aa:cc:ab:d6:9b:8c:ed:11:d3:
                    25:da:a0:1c:a4:5b:22:58:fe:dc:89:f7:d3:02:fc:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:3D:0F:32:81:55:74:D1:43:50:0D:F3:1D:59:A0:36:66:AB:0D
            X509v3 Authority Key Identifier:
                keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:db:9b:dd:83:94:83:2c:fa:7d:ee:ef:84:d1:4a:90:0c:da:
         20:dd:96:57:39:c5:45:d2:52:bc:41:b6:ef:e1:0a:1f:38:6e:
         27:a9:3b:fc:57:12:26:6c:9a:71:2b:26:e7:54:77:bc:73:bd:
         21:37:0a:ab:07:70:74:54:ee:60:1a:21:85:a3:f9:b0:23:2c:
         09:47:93:ff:ac:d6:58:37:6f:8a:0b:21:e4:3a:6a:4b:4a:ed:
         6e:dd:81:38:2d:69:33:82:ac:ea:79:34:f4:1c:fe:04:d6:b8:
         d5:d5:b2:bb:42:cb:c8:4b:1f:28:cc:6b:5e:c8:44:7b:5e:3f:
         5f:a1:ea:59:c2:93:29:56:00:24:11:91:7b:94:2d:f3:23:30:
         31:fb:d5:0d:55:21:ad:c0:5c:bf:98:80:35:f5:64:28:94:3a:
         2c:03:9f:6e:6d:18:db:35:a2:80:8e:c2:76:f5:ab:70:3e:51:
         ee:4a:98:db:40:3e:19:6a:65:7b:8c:66:f0:b1:9e:33:fd:2b:
         05:75:06:94:94:22:07:28:3d:3e:fd:46:01:c6:e0:a1:7a:8c:
         f3:03:b2:20:c3:0d:c0:d8:03:53:0c:35:67:19:31:77:74:f1:
         37:2f:d0:9a:28:00:d3:16:0f:74:3e:61:d8:59:67:ca:5d:04:
         d1:06:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:51 2025 by rpki-client