Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier:          qxv7hXv4MnZMwT0InS+z7jUNJdEvOEWcwlVyGZhAEUs=
Subject key identifier:   75:49:9C:D1:4D:F5:EF:B4:51:A2:AB:9D:51:5D:D2:FD:4D:02:DC:27
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer:       /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial:       0196575D22327B6F81D33A051A283A65C578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number:          045B
Signing time:             Mon 21 Apr 2025 08:00:43 +0000
Manifest this update:     Mon 21 Apr 2025 08:00:43 +0000
Manifest next update:     Tue 22 Apr 2025 08:00:43 +0000
Files and hashes:         1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: T52WICvTpJ0k2+BJPAsKK1G6uK+IaR2IzSPbaMjySKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:5d:22:32:7b:6f:81:d3:3a:05:1a:28:3a:65:c5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Validity
            Not Before: Apr 21 08:00:43 2025 GMT
            Not After : Apr 22 08:00:43 2025 GMT
        Subject: CN=75499cd14df5efb451a2ab9d515dd2fd4d02dc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:2c:10:8e:1d:a1:06:f7:57:12:f9:46:99:
                    64:d5:cd:7c:d5:91:0e:5f:2a:27:2e:52:24:1b:e7:
                    22:1d:18:dd:d1:9f:83:83:c0:ff:ea:08:76:a1:cc:
                    79:48:31:eb:91:88:c4:28:3d:fb:a6:dc:2e:46:81:
                    a8:71:b8:a5:82:84:5d:b9:f9:b4:79:5f:78:b6:6d:
                    45:22:07:ca:9f:22:3d:14:12:0c:d6:da:ff:72:65:
                    e8:fa:01:cb:fa:d2:5c:43:eb:ca:0c:ea:04:87:d0:
                    71:27:9e:7c:46:b3:0a:17:13:8c:b0:50:75:27:d9:
                    e2:eb:3f:d4:41:6f:69:65:fb:1a:1d:93:a3:48:f0:
                    d1:32:23:fb:25:6f:3a:a0:2b:6f:57:aa:bb:66:b0:
                    ef:00:b6:5a:c9:b0:17:7e:03:20:77:88:01:1c:f6:
                    db:51:ae:52:cc:76:c1:f8:e7:24:e7:50:4f:17:ab:
                    b1:b7:c4:33:c7:50:85:92:d0:63:b8:49:22:13:47:
                    9a:35:ab:60:2e:0a:90:b9:3e:71:fc:c5:34:18:e7:
                    66:a6:5f:82:f0:71:f8:e5:40:29:35:ad:83:7e:b6:
                    60:94:44:4d:49:18:61:71:12:de:f2:91:0b:f4:d1:
                    06:7a:38:b0:2f:ff:70:ba:48:3c:dd:03:40:da:37:
                    11:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:49:9C:D1:4D:F5:EF:B4:51:A2:AB:9D:51:5D:D2:FD:4D:02:DC:27
            X509v3 Authority Key Identifier:
                keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:58:5c:6b:86:11:13:00:d4:fc:a8:3c:f2:5b:05:52:da:5d:
         49:85:eb:2d:eb:fe:c1:7f:14:23:47:4b:d0:40:f4:a8:f3:d7:
         cc:06:bb:b4:24:de:3f:1c:65:11:6d:b1:9a:aa:50:15:ec:c6:
         9a:37:e0:67:7b:74:0e:c0:88:dc:25:48:84:97:81:f6:bd:49:
         1a:11:0c:69:4e:5d:3c:0a:48:66:61:d0:e6:90:ad:f5:da:d0:
         50:08:68:a5:cc:ef:58:41:e6:a6:ac:c2:22:9e:62:9e:ec:89:
         14:1d:92:45:c3:8a:b3:ff:89:42:7a:7f:b3:1a:a0:0a:f9:a9:
         75:0d:13:cb:00:21:44:2b:e8:45:c9:33:34:86:49:cf:92:4b:
         00:f8:c8:99:b7:df:fb:8f:ef:d3:8e:d4:b4:6b:59:ff:23:fa:
         24:0c:84:08:4e:a8:a8:e8:e8:59:f8:ed:5e:44:a5:dd:17:87:
         6f:80:63:36:cb:2c:26:96:98:37:96:fa:26:17:bc:20:05:96:
         16:1e:2d:ee:f8:2d:d8:5f:7e:2b:6c:93:4b:e1:79:b1:96:52:
         4c:43:a2:69:54:d9:f9:1a:52:8f:8c:0e:60:a0:7b:11:ce:05:
         f4:cb:de:8b:42:22:f1:89:5a:84:f5:08:d2:45:87:f2:06:0a:
         9c:e9:35:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:38:47 2025 by rpki-client