Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File:                     7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier:          0a7xjadNIvIF9XTvbV1RoO7+O9M072bDXT5pM8rGFNQ=
Subject key identifier:   86:49:84:03:40:3F:5A:CA:60:BC:B5:09:02:CD:93:E8:04:20:7F:39
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer:       /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial:       01965726D05073A245A085E4406190BA2661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number:          0338
Signing time:             Mon 21 Apr 2025 07:01:23 +0000
Manifest this update:     Mon 21 Apr 2025 07:01:23 +0000
Manifest next update:     Tue 22 Apr 2025 07:01:23 +0000
Files and hashes:         1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: frDLrBAeVcz2XYynGqi+lL8w6hBBUEd7inyLJii24+4=)
                          2: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (hash: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:26:d0:50:73:a2:45:a0:85:e4:40:61:90:ba:26:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
        Validity
            Not Before: Apr 21 07:01:23 2025 GMT
            Not After : Apr 22 07:01:23 2025 GMT
        Subject: CN=86498403403f5aca60bcb50902cd93e804207f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:00:31:4e:84:08:20:8e:6c:d0:6f:1b:b4:
                    40:a3:93:7e:cd:cc:c3:02:7e:b8:a8:f8:68:6d:e1:
                    08:91:3f:0a:8f:d0:bf:e7:35:f6:8a:ae:56:12:49:
                    a8:c3:0a:69:48:61:ba:45:ab:39:ec:0d:20:fb:32:
                    ff:b7:77:60:c5:63:a0:98:b3:2e:72:26:29:56:77:
                    95:b7:90:38:db:f7:e0:4f:49:07:89:0d:02:15:30:
                    6f:d9:48:f1:a7:18:80:d7:86:54:51:03:1d:48:00:
                    06:26:e6:e2:20:29:15:a0:96:27:12:e8:ed:44:c4:
                    64:8a:42:7a:52:ce:2d:df:68:bb:30:7b:20:f0:bc:
                    e5:30:1c:a3:7f:61:5d:f8:77:3b:73:2e:25:f9:fd:
                    63:21:d5:90:6d:a7:b0:f7:b8:e6:39:dd:ca:42:30:
                    19:5f:76:4a:c4:67:9c:44:4c:46:da:f5:13:77:18:
                    a8:7e:8d:72:f7:1b:af:75:9e:10:ed:7c:d8:5c:80:
                    72:e0:80:19:f2:3d:f3:11:11:10:88:e9:a0:0d:9f:
                    e9:6a:9c:06:55:14:cd:32:7f:4d:d1:3c:63:2a:c1:
                    f3:88:37:e4:e9:8b:92:7a:27:13:63:60:aa:90:19:
                    7c:3e:f1:c3:33:d6:fa:61:ac:20:b7:b6:1b:96:ca:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:49:84:03:40:3F:5A:CA:60:BC:B5:09:02:CD:93:E8:04:20:7F:39
            X509v3 Authority Key Identifier:
                keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:27:18:28:63:67:b6:26:c7:71:82:2c:8a:61:08:3b:24:47:
         ea:6a:c8:38:51:65:95:f3:4a:56:28:4f:47:03:55:37:53:c2:
         24:6d:72:78:58:3a:2a:58:40:8e:fd:41:e0:4c:c8:b3:21:00:
         c5:31:35:80:f4:5c:73:8b:fa:cf:4a:7c:46:19:b3:7a:7f:f3:
         b7:c8:37:d6:6c:46:8e:fb:98:35:6a:1d:0c:a9:e4:91:8e:fa:
         ad:71:2d:2a:a6:2b:ff:11:cd:8c:42:82:f6:c3:94:d4:43:f5:
         1d:ee:2d:09:cd:d2:da:79:52:72:62:b7:d9:73:3f:ec:ab:24:
         11:b0:bf:be:f0:e7:fe:96:10:8c:62:9f:ee:67:01:5b:52:03:
         5a:8a:29:bd:94:68:61:b8:b4:8e:33:99:a8:13:be:9d:ef:02:
         ea:0e:e3:fd:c5:26:79:72:82:da:c4:7e:4c:7c:a8:ed:b3:e5:
         59:85:57:66:0b:cb:5e:b2:93:0f:7e:df:31:87:65:6e:07:09:
         91:64:67:55:0f:81:95:01:11:5f:e5:86:9b:8d:12:e3:94:b8:
         9e:21:78:53:c1:b7:a0:9d:cb:fd:1f:56:80:fc:a7:ba:a7:26:
         23:d0:8c:0c:cd:63:7f:e5:11:ab:fe:30:60:71:ac:06:f7:35:
         8b:0d:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:45 2025 by rpki-client