Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File:                     fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier:          7q5GUlZ99QiQMO2lppdSRUz6PhYDtDNX4+NgoQB1oD4=
Subject key identifier:   06:6F:D2:73:CA:E0:3D:F2:B0:EF:A0:6E:57:E1:34:06:1F:E0:70:32
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer:       /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial:       01976BBD6367A49F5F076AE1713679C231A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number:          03C3
Signing time:             Sat 14 Jun 2025 00:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:03 +0000
Files and hashes:         1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
                          2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: YRciLjb5F3R40YjxQADnUoPWJRGgAvWXkPXTlDzCPH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:63:67:a4:9f:5f:07:6a:e1:71:36:79:c2:31:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
        Validity
            Not Before: Jun 14 00:01:03 2025 GMT
            Not After : Jun 15 00:01:03 2025 GMT
        Subject: CN=066fd273cae03df2b0efa06e57e134061fe07032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:fa:f4:bc:46:46:23:48:d1:b4:7d:fc:ca:
                    92:70:7a:61:4b:94:a3:e9:33:3b:56:7f:89:de:f9:
                    f4:88:3a:ed:57:00:14:19:64:d4:66:10:83:c9:4f:
                    34:25:17:bb:bb:1c:4a:cf:0e:72:39:21:27:85:66:
                    21:5a:35:e2:65:7d:a5:f6:a0:8b:24:03:3f:2c:d1:
                    56:aa:2c:9e:2f:28:9d:af:f0:d7:56:05:1c:9f:4a:
                    19:a7:ea:38:5f:32:07:c5:d4:9d:f4:1a:02:40:65:
                    30:73:f2:7f:9f:66:36:3e:4b:eb:3c:de:1f:51:cc:
                    a2:02:62:bd:53:3e:e1:f1:69:56:74:f0:ad:34:cc:
                    4b:59:4b:23:87:38:b4:87:bd:a2:72:6e:6d:3c:b6:
                    0a:e5:62:a2:fc:48:e8:59:69:48:8a:96:a6:e0:3e:
                    c4:25:f4:82:cb:ea:82:57:b9:60:56:26:72:66:6f:
                    13:e1:d6:c2:66:18:e5:ea:1a:c5:4c:cf:31:4f:a9:
                    83:11:60:5b:5d:ea:a0:69:1e:e0:4f:37:c2:43:60:
                    21:5a:24:01:e2:8d:07:54:7a:90:b6:da:d3:e2:a8:
                    e8:6d:b9:96:04:53:f6:45:7f:cd:1a:73:e9:56:2c:
                    df:46:26:cd:59:56:ed:2d:fb:f0:c6:55:32:0a:6e:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6F:D2:73:CA:E0:3D:F2:B0:EF:A0:6E:57:E1:34:06:1F:E0:70:32
            X509v3 Authority Key Identifier:
                keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:28:46:a3:97:b1:54:6c:6a:b4:fe:f5:3b:69:45:65:4a:
         dd:cf:c7:10:65:62:96:10:5e:11:88:6f:30:3a:86:52:e6:df:
         22:f8:0b:ee:c4:33:24:8b:af:27:43:51:02:a3:f1:f0:79:1a:
         38:1f:57:91:8b:73:41:fb:a8:a8:e3:5e:3b:b8:67:84:7a:df:
         d1:cf:0c:66:9d:23:63:3b:45:4d:1c:97:3f:e2:27:89:07:0e:
         e4:54:af:bc:31:bf:c0:0a:fb:12:41:b7:6c:e3:17:3d:95:b9:
         6b:1c:5b:13:1a:f2:98:ab:22:f4:22:52:ca:c6:b0:c0:17:2b:
         ff:29:0a:67:dd:03:88:c4:22:c7:f3:1e:a5:55:1f:7e:07:35:
         b4:24:90:7f:5a:63:5f:90:c1:61:68:7f:df:29:f5:5c:aa:5a:
         42:9d:34:3f:21:e8:f7:9f:f7:c1:e3:10:9a:e5:11:b2:9d:d3:
         92:d4:46:9e:f8:ca:6f:9f:9b:33:2d:dd:7b:98:c9:fc:82:42:
         22:4d:43:c3:57:d2:0f:02:af:5a:43:84:c6:60:38:7e:82:ab:
         6b:8f:ac:05:f4:c1:6e:1d:f1:63:98:cd:5a:ff:9b:25:d2:3e:
         dd:6d:92:64:70:1e:df:87:50:59:1f:89:07:94:ee:65:8f:ba:
         0a:1f:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:40 2025 by rpki-client