Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          OCgH+dvGvJ3Fj2OELgmyIgjnRyjLUSiXecU8wocufvE=
Subject key identifier:   CD:64:62:C2:63:9A:BF:CB:9E:C8:C0:57:AD:C7:F4:61:1D:26:F6:96
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       01976F9A3E6BE77DB7F9ABA21D0E82E5C9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 18:01:08 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:08 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:08 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: c0z3sEyuVSbO2LRyJ8agYWUy+x7Hl1PbPYqRIGMHFK4=)
                          2: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (hash: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:3e:6b:e7:7d:b7:f9:ab:a2:1d:0e:82:e5:c9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: Jun 14 18:01:08 2025 GMT
            Not After : Jun 15 18:01:08 2025 GMT
        Subject: CN=cd6462c2639abfcb9ec8c057adc7f4611d26f696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:2d:0f:37:e2:17:ac:74:a7:d6:9c:73:8a:
                    11:63:63:48:c4:14:40:45:a4:e0:ce:3c:c4:1a:16:
                    29:ad:a8:00:92:76:9a:c5:ed:72:9e:e1:08:60:16:
                    60:db:e5:eb:8a:90:d6:a6:81:53:17:3b:33:90:e3:
                    1b:ab:f6:4c:e9:31:8c:01:10:c4:58:81:ad:85:8e:
                    b0:36:bf:98:f5:8d:e9:d1:0d:a3:59:bb:a3:bf:a3:
                    d2:9d:0c:f9:26:1e:a3:75:8d:59:75:83:c9:4b:e1:
                    cf:c1:7e:81:9b:d6:a0:11:03:48:fb:61:a3:48:d8:
                    b5:87:86:2f:d5:86:95:0b:f8:18:fe:5e:68:99:be:
                    52:75:03:a1:ca:26:e7:43:ed:2e:1e:72:41:50:09:
                    83:27:52:f5:07:fd:10:43:29:27:82:31:1b:95:55:
                    58:21:3c:20:33:72:04:5d:6c:f5:4a:8b:48:47:cf:
                    01:3e:e2:df:65:7a:3a:17:23:8a:76:f6:eb:f4:18:
                    45:90:97:32:24:ac:f7:46:38:c6:38:fd:e7:17:e5:
                    3d:15:92:9b:3f:41:b4:b0:f2:2f:f1:5e:9a:82:1f:
                    86:dc:c6:f2:50:b9:57:36:bc:4d:c6:80:c4:c7:e3:
                    e0:6c:5b:f4:d9:5c:ee:4e:11:8d:fc:93:56:19:84:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:64:62:C2:63:9A:BF:CB:9E:C8:C0:57:AD:C7:F4:61:1D:26:F6:96
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:b3:94:05:68:6c:ab:90:ba:81:47:4a:b8:00:eb:e4:0f:2c:
         70:03:1a:1a:10:ff:4a:1d:63:a0:aa:4e:82:ad:98:61:2f:a9:
         f5:6e:11:73:09:bc:d5:dd:45:de:29:f0:5e:32:ff:be:7b:6c:
         ff:8a:50:ae:5a:2a:13:21:e8:2f:6a:da:67:60:16:57:3c:ca:
         08:d8:d2:35:fc:3c:85:c4:1e:95:b0:ff:73:53:e0:c5:67:04:
         b1:af:c3:43:73:32:92:5f:23:fc:c6:b9:84:5f:f6:db:fd:76:
         c4:ea:81:0d:d5:ea:e3:18:bc:2b:b9:94:b4:2a:e6:e0:ee:01:
         67:fb:1e:10:13:a0:81:db:75:5f:3f:45:76:7c:f1:99:0b:97:
         c7:34:7c:2a:8e:90:11:55:ad:44:84:05:f1:92:22:a3:f5:1d:
         72:10:8c:70:9a:27:8d:72:84:f8:51:0d:30:87:d3:8d:b7:36:
         0f:0b:e8:60:9b:dd:3e:e1:8c:59:e1:7a:33:da:32:fd:e1:97:
         b1:e4:24:0b:7a:d3:dc:69:20:d4:1f:04:ed:52:f9:09:6d:2d:
         0f:26:b5:4d:a0:f1:79:75:b3:ef:6a:b3:1a:d5:27:5a:58:12:
         34:22:db:47:a3:8e:e1:f4:fb:f2:38:76:6a:05:bd:cd:fd:b7:
         bc:8f:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:53:45 2025 by rpki-client