Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          XP2sw1o2aAH1fXZe9IDFjHZbBregAfx5Tha8ZZoL0Do=
Subject key identifier:   86:59:76:F6:DA:1B:19:E2:A9:46:4B:45:22:32:01:74:F2:60:1A:B4
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019796703534FDDAB8628C88996EE7E2562B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          1674
Signing time:             Sun 22 Jun 2025 07:00:25 +0000
Manifest this update:     Sun 22 Jun 2025 07:00:25 +0000
Manifest next update:     Mon 23 Jun 2025 07:00:25 +0000
Files and hashes:         1: 2sRit1HkpegSVZ93lQZh_r4sGH8.roa (hash: WjR0xWj31dChbabct4M4jjr+gsq2p4cJ6G9KZptb3BE=)
                          2: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: l23hbNvAwEzcsnoyEDGfvby1EDJO9k5OohVTBzedYPE=)
                          3: HLNbdsiEi9zrEX9bhrS_IVl3jtc.roa (hash: 1y6Fi/ztp5kH8MZMJE7AZCFbRxNUTgcF8S0cn+hAm74=)
                          4: TW3mKgk-3ZIp8AcEmg1hxpvR59c.roa (hash: ebI6w2RHWPe5+vn0FZnpCsJZN5pGcS3Y599svNLYlcw=)
                          5: VSEL2iQWB7y3te4btwgqQzATX5A.roa (hash: 79Tuaq+JTT2My5Dv4Q6xrae9R7vcxQ2hnGbV3yFOdeI=)
                          6: p1JXjb2LczYltKrE1SbLNgCFh1Y.roa (hash: JZ2SLRHUBb7DNCppha0qhaA/9Yund2DleZbSFcq4A2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Jun 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:96:70:35:34:fd:da:b8:62:8c:88:99:6e:e7:e2:56:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Jun 22 07:00:25 2025 GMT
            Not After : Jun 23 07:00:25 2025 GMT
        Subject: CN=865976f6da1b19e2a9464b4522320174f2601ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:ac:ff:28:e1:28:6d:be:5c:61:81:33:cc:
                    49:00:26:e8:68:73:dd:59:0c:59:01:f1:e9:de:f8:
                    43:5a:67:2e:59:36:99:6f:8a:ec:e2:1b:99:49:64:
                    dd:7e:55:b2:6e:02:b5:da:fd:d7:f8:0d:6b:1f:cf:
                    6b:03:d4:6b:45:70:1a:44:72:94:9c:b3:c5:e5:ce:
                    44:4e:81:c4:70:ca:6a:84:29:33:7a:52:bf:85:45:
                    85:0f:f3:c1:3e:a0:a9:49:d4:48:55:c5:6a:cf:08:
                    8c:4f:a6:75:9f:53:b1:b4:22:81:d2:75:62:3f:2c:
                    e0:da:ba:79:ae:bd:bd:5b:a2:5e:e3:49:a9:71:3d:
                    43:ce:bd:72:b3:d7:cd:6d:40:80:50:cf:79:87:bc:
                    2b:b1:d3:79:61:03:82:59:c7:f2:8f:71:70:df:33:
                    c8:4c:e1:71:1f:1f:5e:eb:79:3a:fe:3c:22:85:3e:
                    ab:66:38:ca:57:97:2d:7f:99:13:21:65:7d:0c:b2:
                    bb:2b:40:e3:9b:cd:0b:44:e1:59:43:32:0c:27:01:
                    1a:e6:38:b7:26:be:62:85:26:a4:b6:25:64:77:99:
                    cf:a9:64:c8:99:fd:e4:e0:29:db:f8:28:8e:3b:cc:
                    33:f4:7e:0e:de:58:df:0a:e3:88:33:dd:ba:2c:88:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:76:F6:DA:1B:19:E2:A9:46:4B:45:22:32:01:74:F2:60:1A:B4
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:47:1d:5a:6e:56:50:8a:e5:55:54:de:2d:2e:89:c0:ab:5c:
         e6:97:ea:c1:fd:ae:09:f3:c9:af:d9:9f:6f:3b:b6:2d:b2:1d:
         de:ff:a0:c9:15:51:1e:ab:10:29:a8:86:ce:0e:7e:a9:78:9f:
         e3:61:14:60:d3:16:49:49:ab:ff:ee:c2:f4:ea:2b:cd:5f:a3:
         e0:97:5a:30:28:fa:c2:7b:a2:52:05:3f:a1:3e:c7:66:fe:4b:
         d1:00:3c:c3:d5:7a:0a:5d:44:55:a5:85:79:b0:c2:ea:2d:ae:
         c4:d8:81:56:45:6e:f6:9b:36:a4:2f:a8:8c:5b:25:98:4b:3b:
         b7:59:aa:b2:33:bc:62:f0:4d:f8:d0:88:22:89:01:67:4a:d5:
         11:3d:78:31:16:c3:44:a4:36:c5:87:ac:bb:cb:2d:7a:82:46:
         c1:dd:dc:ae:1e:e5:15:87:ab:d5:71:e9:ce:c6:3e:a3:de:8a:
         4d:41:db:b5:eb:7b:9f:26:85:f0:81:34:8a:6e:ff:d6:1a:66:
         ef:1c:64:25:4d:a2:09:2f:e8:29:84:55:15:38:35:ce:67:48:
         f6:e5:ad:f6:3f:c3:0d:0b:2a:eb:2d:96:6b:05:f7:ec:51:37:
         8b:4d:27:75:ba:fb:af:8d:7e:32:1d:c8:c5:70:5e:02:af:74:
         67:55:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 14:21:33 2025 by rpki-client