Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File:                     7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier:          7x64t8YYS0qzEuo+fkIqwJrdGTeNz0//PyA0kJZwKNM=
Subject key identifier:   EC:C1:5C:D9:31:6E:19:DA:33:C3:E4:DE:33:0F:A5:88:8C:07:A0:7D
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer:       /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial:       0197684E1011E87B26A6D802336FD5EF8EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number:          0AFC
Signing time:             Fri 13 Jun 2025 08:00:35 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:35 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:35 +0000
Files and hashes:         1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: /Tqwv7n/PqN3O5mhMxeDXWWkRs5CrRqqsT0R6tLMi8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:10:11:e8:7b:26:a6:d8:02:33:6f:d5:ef:8e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
        Validity
            Not Before: Jun 13 08:00:35 2025 GMT
            Not After : Jun 14 08:00:35 2025 GMT
        Subject: CN=ecc15cd9316e19da33c3e4de330fa5888c07a07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:9e:81:2e:ca:b0:b9:ef:d9:e9:7c:c3:ad:
                    a4:b5:eb:67:fb:6a:39:ab:4c:2e:80:1e:ac:21:c8:
                    a1:92:69:37:0b:f4:bb:c7:24:39:fe:81:fb:08:95:
                    eb:93:d5:0f:22:60:a9:c3:9d:81:31:33:6a:76:91:
                    4f:82:f2:4c:ee:d0:0b:c1:53:82:38:f1:6c:63:bb:
                    21:a5:a6:0c:14:5f:17:d1:c9:cd:35:69:91:18:0f:
                    af:12:29:2b:b3:61:2c:dc:7a:eb:b2:2b:b4:a8:89:
                    60:fd:1b:60:56:0a:39:d6:dc:c9:90:0b:24:4d:4f:
                    a5:d9:d7:cd:c8:12:74:a8:c4:d3:7b:fd:d4:b9:56:
                    48:8b:02:85:cd:92:6b:ea:b0:0d:9e:36:38:0d:15:
                    8e:8d:cb:06:42:5a:fc:f7:18:79:aa:63:1c:5f:56:
                    4b:16:51:88:d9:28:ad:a4:89:25:c1:d5:15:17:6f:
                    17:cc:bc:ae:31:f7:72:30:7f:6b:1a:9e:12:9e:20:
                    4e:75:73:bb:36:4f:e1:61:29:28:e7:38:99:32:91:
                    55:ed:b5:ed:b2:5e:b3:f2:f5:f4:83:de:6e:e8:33:
                    13:cc:f8:aa:cc:41:35:5f:ae:9d:e6:a6:cf:05:3f:
                    49:57:24:4f:96:97:8f:e2:2e:47:ac:e2:82:68:b9:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:5C:D9:31:6E:19:DA:33:C3:E4:DE:33:0F:A5:88:8C:07:A0:7D
            X509v3 Authority Key Identifier:
                keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9e:dc:c2:08:44:80:a0:78:aa:6c:3a:18:9f:0d:85:e7:96:
         87:db:9f:fc:49:89:29:1c:23:ac:17:97:f8:37:91:6f:37:db:
         f8:bd:8b:90:17:9f:b1:c9:d6:2f:e7:a1:f9:cc:2f:ec:b9:97:
         6a:92:ed:6d:f3:9a:34:94:3b:13:57:f1:74:57:48:e4:c6:a8:
         5f:0d:2d:a0:d0:e1:64:6e:08:b5:9a:df:1c:d2:a2:96:28:12:
         73:55:77:fa:33:43:01:21:11:44:b8:fe:9f:12:16:75:67:9c:
         6f:2b:a0:f6:04:02:fc:e8:7c:db:83:45:bf:a7:b4:fa:0d:7e:
         f4:8f:26:9e:6c:aa:13:bd:3b:26:32:55:82:28:44:ac:5a:22:
         90:1c:23:bb:fd:30:5e:59:2a:1f:af:ab:c0:8d:17:e7:5b:85:
         c2:b3:26:da:62:93:e8:d3:51:71:e8:47:fc:e7:fa:60:4e:53:
         9b:c5:fa:7d:43:60:f7:0d:85:be:a7:22:76:1e:b9:c3:a5:2d:
         bc:9a:43:72:bb:ff:db:38:18:52:19:f2:b3:9f:77:27:1f:03:
         96:77:96:87:00:e3:02:e3:04:74:23:8d:dc:44:0e:5f:da:76:
         d7:cc:f0:e9:44:21:be:4f:ac:6a:d9:63:85:0b:54:a2:91:f3:
         9a:8a:39:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoThAR6HsmptgCM2/V747mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDllOGMzYjVkZGJlZTk4Y2Q3ZmVlYTBkZmY4Yzc2MjVi
ODVhOWQwHhcNMjUwNjEzMDgwMDM1WhcNMjUwNjE0MDgwMDM1WjAzMTEwLwYDVQQD
EyhlY2MxNWNkOTMxNmUxOWRhMzNjM2U0ZGUzMzBmYTU4ODhjMDdhMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseWegS7KsLnv2el8w62ktetn+2o5
q0wugB6sIcihkmk3C/S7xyQ5/oH7CJXrk9UPImCpw52BMTNqdpFPgvJM7tALwVOC
OPFsY7shpaYMFF8X0cnNNWmRGA+vEikrs2Es3Hrrsiu0qIlg/RtgVgo51tzJkAsk
TU+l2dfNyBJ0qMTTe/3UuVZIiwKFzZJr6rANnjY4DRWOjcsGQlr89xh5qmMcX1ZL
FlGI2SitpIklwdUVF28XzLyuMfdyMH9rGp4SniBOdXO7Nk/hYSko5ziZMpFV7bXt
sl6z8vX0g95u6DMTzPiqzEE1X66d5qbPBT9JVyRPlpeP4i5HrOKCaLm7uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzBXNkxbhnaM8Pk3jMPpYiMB6B9MB8GA1UdIwQY
MBaAFO3Z6MO13b7pjNf+6g3/jHYluFqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hZGE3Y2YtOTFlMi00ZTM4LTk2ZmMt
YTI4NmVhMTFkMTAwLzEvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hZGE3Y2YtOTFlMi00ZTM4LTk2ZmMtYTI4NmVhMTFkMTAw
LzEvN2Rub3c3WGR2dW1NMV83cURmLU1kaVc0V3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ7cwghE
gKB4qmw6GJ8NheeWh9uf/EmJKRwjrBeX+DeRbzfb+L2LkBefscnWL+eh+cwv7LmX
apLtbfOaNJQ7E1fxdFdI5MaoXw0toNDhZG4ItZrfHNKiligSc1V3+jNDASERRLj+
nxIWdWecbyug9gQC/Oh824NFv6e0+g1+9I8mnmyqE707JjJVgihErFoikBwju/0w
XlkqH6+rwI0X51uFwrMm2mKT6NNRcehH/Of6YE5Tm8X6fUNg9w2Fvqcidh65w6Ut
vJpDcrv/2zgYUhnys593Jx8DlneWhwDjAuMEdCON3EQOX9p218zw6UQhvk+satlj
hQtUopHzmoo54w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:08 2025 by rpki-client