Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File:                     7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier:          w9vsTcW37GnWbOr9MJzlEIVoYpIdHsFRrVGDvyWKgwg=
Subject key identifier:   AD:7F:67:DC:8B:88:EF:3F:63:AF:85:AA:2A:1C:F3:FE:77:EB:D2:0B
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer:       /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial:       01976C2B4723D2CBB1BD1C4A0117D8236843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number:          1520
Signing time:             Sat 14 Jun 2025 02:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:04 +0000
Files and hashes:         1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=)
                          2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: OIqTWFqLZbfgE39Zhb/VGcxHgZznsaLYsVi17i1qkFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:47:23:d2:cb:b1:bd:1c:4a:01:17:d8:23:68:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
        Validity
            Not Before: Jun 14 02:01:04 2025 GMT
            Not After : Jun 15 02:01:04 2025 GMT
        Subject: CN=ad7f67dc8b88ef3f63af85aa2a1cf3fe77ebd20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:b7:b4:66:a7:3a:b1:3b:25:56:60:84:9c:
                    18:17:d7:82:b8:a7:03:4b:ac:66:8e:20:c2:22:43:
                    f0:69:b1:9b:1a:48:63:45:8b:44:eb:1b:7c:b4:50:
                    07:88:d6:0f:f6:6c:21:70:e7:91:5b:67:41:53:5c:
                    ec:8a:87:f3:7c:25:02:c9:38:a3:ca:bc:a3:eb:9a:
                    fe:ca:b6:3b:04:ea:c8:18:63:fd:58:f6:bb:c2:fa:
                    13:dc:8e:3e:1e:8c:b9:88:17:df:92:d1:92:91:2f:
                    70:10:86:4b:13:05:af:78:bd:81:cc:70:56:83:62:
                    1d:65:a3:1f:fd:e4:f2:9f:35:5f:2a:a2:b3:9b:a1:
                    23:df:3b:01:af:7f:c9:f7:f4:14:81:8e:af:08:39:
                    19:c4:df:e6:6a:e5:f0:67:32:ba:96:b8:5e:79:ea:
                    3c:6a:bc:65:72:4b:3f:4b:26:f9:bb:f1:ab:ce:7e:
                    e0:ef:00:27:94:ea:4b:4a:8b:6f:2f:40:72:41:1d:
                    e9:85:ba:4f:aa:01:50:83:19:6c:be:93:6c:40:09:
                    72:4d:29:df:22:50:dd:ed:22:88:c8:fd:c5:73:92:
                    ca:5a:08:90:cc:79:a7:82:b9:44:fa:e6:15:58:56:
                    fa:45:63:19:09:13:f8:a0:3a:df:c1:7d:49:c1:44:
                    42:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:67:DC:8B:88:EF:3F:63:AF:85:AA:2A:1C:F3:FE:77:EB:D2:0B
            X509v3 Authority Key Identifier:
                keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:a6:8f:eb:bc:24:32:b2:0b:8a:ca:3f:16:28:f4:a4:08:c9:
         e7:56:8d:df:85:86:6d:4e:3e:0f:0d:ff:78:ac:1a:3d:87:9e:
         cb:04:e5:8c:94:1d:f2:95:f0:cd:dd:99:8a:ae:83:4d:cc:63:
         6b:d9:2f:d2:dd:dc:5a:cd:a7:7d:44:8f:da:46:36:a8:57:e7:
         dc:12:33:eb:9d:f2:1f:fa:35:02:24:83:ed:b9:f8:60:27:bd:
         ca:5e:bb:79:c0:98:09:9e:e1:e0:c0:b8:38:0b:07:5b:66:5e:
         ff:75:b8:6d:01:b2:89:fa:77:2e:f3:4f:48:b8:18:56:2b:96:
         86:2f:78:74:82:6d:9b:e2:01:f3:ab:f5:d8:18:45:26:e0:6f:
         4b:f9:9a:de:06:04:62:a8:1c:c7:44:7e:0b:5d:c3:fc:29:e4:
         22:a5:e2:fe:36:9a:ae:5a:a2:e7:a1:7c:89:18:25:31:b4:d0:
         03:fa:c3:7d:f9:16:ac:32:cc:6d:34:19:da:03:eb:27:02:6c:
         b3:cf:79:df:bd:7f:9d:32:4b:38:35:ad:c5:06:26:e5:89:c5:
         4a:91:f9:9e:b0:83:80:bc:79:91:88:41:56:3f:89:51:de:3d:
         d7:db:b0:8f:5c:9e:2b:a6:38:9a:9c:08:09:7c:c2:fa:20:e7:
         e5:2e:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:29 2025 by rpki-client