Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File:                     7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier:          orwWhXx2/H3IJuwdXwS8rDBpAknrFqph87SAbL3HCzw=
Subject key identifier:   D5:DF:20:45:CE:B8:BB:45:E9:DE:B2:5D:E8:9D:6F:6A:AC:F3:97:09
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer:       /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial:       01965C4C695162B6200DE8A06F73144144A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number:          0D44
Signing time:             Tue 22 Apr 2025 07:00:33 +0000
Manifest this update:     Tue 22 Apr 2025 07:00:33 +0000
Manifest next update:     Wed 23 Apr 2025 07:00:33 +0000
Files and hashes:         1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: HufGsy19uIW1YaV3QYPLRet5KPdGWdHJjeC9rr8JK7Q=)
                          2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:4c:69:51:62:b6:20:0d:e8:a0:6f:73:14:41:44:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
        Validity
            Not Before: Apr 22 07:00:33 2025 GMT
            Not After : Apr 23 07:00:33 2025 GMT
        Subject: CN=d5df2045ceb8bb45e9deb25de89d6f6aacf39709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:89:0b:44:66:cd:18:40:d0:a5:0f:b3:6d:
                    6a:1f:ce:19:99:ec:c9:b6:4a:47:a3:cc:86:ff:ac:
                    f5:42:f2:9b:5c:b2:c1:9d:b8:76:59:bc:f6:27:a6:
                    a2:ba:f5:37:ed:71:23:17:5a:05:9e:e5:ea:3b:78:
                    6d:1e:28:8c:aa:46:82:5f:5e:a5:a0:4b:f2:a5:12:
                    db:be:e4:5a:37:d7:af:d8:14:2a:0a:27:44:ed:71:
                    92:69:cc:be:1f:36:fb:b3:99:34:91:70:24:26:15:
                    c8:9c:b1:3a:8f:b4:21:50:40:79:e5:f3:5d:e4:bf:
                    0b:d6:d2:f6:ab:33:a0:3a:be:35:cb:db:24:5e:85:
                    86:ee:0c:73:ba:2e:73:53:97:66:8f:cb:0b:23:d7:
                    94:4c:b5:60:be:10:a6:b8:36:ec:d4:39:a0:06:c3:
                    72:3e:55:d5:25:ac:c5:63:a6:f0:7c:0b:33:15:ce:
                    38:04:ed:77:cd:03:9b:92:52:3b:fd:4b:de:dd:0b:
                    b4:c7:8a:3b:c6:8c:02:1e:d2:b2:6c:ce:80:81:67:
                    16:fd:b3:03:5b:4b:d1:bb:0a:2f:48:ae:67:e5:6d:
                    a9:00:88:12:85:b4:c5:a1:99:5c:83:7f:d0:7a:75:
                    39:4e:6f:1b:4d:d4:1b:3e:8b:fe:87:85:11:e9:bd:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DF:20:45:CE:B8:BB:45:E9:DE:B2:5D:E8:9D:6F:6A:AC:F3:97:09
            X509v3 Authority Key Identifier:
                keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d0:c4:e4:76:7c:ee:7f:ef:a2:1c:24:b3:db:c2:30:19:2e:
         4f:1c:2a:31:66:2c:d7:31:1e:96:ac:72:e1:5f:0d:be:bd:b9:
         52:ce:a0:af:2f:84:a0:fa:2e:03:c6:4a:2b:cc:94:8a:4f:b4:
         4f:5d:47:0d:ec:60:47:48:5c:3e:34:c8:f6:c6:9d:fb:1f:3f:
         71:99:6f:ea:3d:2a:1a:fd:a7:35:d3:d2:44:a4:7a:0c:d3:c1:
         5a:e0:67:6b:f7:e1:60:0b:89:22:2c:f0:91:60:8e:da:44:50:
         82:aa:4b:f9:e9:5f:06:8b:e3:ab:70:9e:f6:64:58:0c:62:78:
         20:bd:6d:a9:81:61:63:65:b1:7c:69:38:6b:f2:53:d5:04:22:
         35:1c:fa:6b:71:70:61:43:b3:ed:91:90:a1:1a:3e:fd:85:d4:
         f7:ab:6e:81:65:18:8c:0f:ac:33:5c:2e:db:be:ad:e4:67:d2:
         b8:d8:28:b1:19:a9:ae:ce:8c:a0:e9:1f:b1:56:5d:4d:25:74:
         4c:16:46:6f:06:37:30:b7:73:11:30:88:38:fc:25:e1:bb:aa:
         27:18:6b:e6:a0:1f:2d:76:e6:14:29:5b:03:6a:97:8f:49:76:
         6d:76:6d:90:f4:a0:39:9e:ae:6a:1e:21:76:71:86:ad:eb:9e:
         c2:8c:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:01:00 2025 by rpki-client