Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
File:                     7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft (raw, json)
Hash identifier:          cNNSIo6WyPt048ca56osdBkXtPkAZABdkNDTZsEiprY=
Subject key identifier:   6D:20:89:A0:AB:CB:AE:24:7F:95:EB:EE:B3:D4:65:8B:DB:0D:AD:21
Authority key identifier: EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9
Certificate issuer:       /CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
Certificate serial:       01964BC6DF15AC4F321DC276C2F8475CEAFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
Manifest number:          0DF5
Signing time:             Sat 19 Apr 2025 02:00:46 +0000
Manifest this update:     Sat 19 Apr 2025 02:00:46 +0000
Manifest next update:     Sun 20 Apr 2025 02:00:46 +0000
Files and hashes:         1: 7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl (hash: r10zvJfOYV7+kKpdvzqnMNrarKIKIaP0qHk/xSARd6Y=)
                          2: M_6QebMR4XXc_4ZSk3fzCdN3vvQ.roa (hash: VK66PCYpiRoLnxe0rDgGTNdxCqYRv5AkRtVmGa+QNQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:c6:df:15:ac:4f:32:1d:c2:76:c2:f8:47:5c:ea:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
        Validity
            Not Before: Apr 19 02:00:46 2025 GMT
            Not After : Apr 20 02:00:46 2025 GMT
        Subject: CN=6d2089a0abcbae247f95ebeeb3d4658bdb0dad21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7e:9f:95:03:c1:ae:70:fc:3e:c0:43:e0:bf:
                    f0:5e:3b:45:53:a6:87:72:5e:b6:8e:d5:6e:ac:c0:
                    dc:8c:e4:7b:68:ea:0e:9b:72:0a:37:04:02:16:1e:
                    9b:ab:00:83:8d:27:fd:dc:41:78:2b:0c:30:54:41:
                    6c:e7:d1:7f:b4:36:14:1b:6f:35:34:ca:cb:aa:11:
                    b4:62:10:e3:fa:1c:1d:dd:4f:de:9a:49:18:bc:4e:
                    b9:22:a9:cf:ee:37:45:55:66:3c:38:8f:79:9a:bf:
                    6b:f8:0c:0a:72:be:ff:ca:b6:06:70:73:07:08:1a:
                    13:f1:ba:46:44:09:3c:ab:d3:21:b8:c6:37:b3:8f:
                    7a:3d:0e:48:bb:d9:e6:f7:3f:4f:36:c7:a8:96:81:
                    53:51:f0:1e:dd:cf:34:84:7a:05:0e:8c:35:d6:8c:
                    3d:cf:1c:b6:ca:7d:bc:d1:8b:aa:62:fd:ca:68:cd:
                    72:06:c9:d3:ea:f8:63:bf:cd:e9:56:b5:8f:66:8d:
                    23:52:70:3e:26:09:6e:96:29:3b:95:6e:1e:5d:4f:
                    d4:75:d4:3e:5a:1f:e7:ed:b0:34:8b:c3:15:e9:fc:
                    0a:30:ee:68:ae:ef:00:13:76:f6:ff:cf:dd:24:50:
                    33:25:fa:4f:8f:70:fc:6f:a1:f7:69:67:c3:03:6e:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:20:89:A0:AB:CB:AE:24:7F:95:EB:EE:B3:D4:65:8B:DB:0D:AD:21
            X509v3 Authority Key Identifier:
                keyid:EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:58:2d:5d:48:71:d7:98:31:2f:75:d3:ba:fc:fa:39:f8:
         37:33:c4:82:0e:12:10:35:f9:7a:9e:ea:94:1d:4d:37:33:33:
         1f:52:42:bc:91:c3:29:24:95:99:86:28:cf:b9:fe:2b:4c:db:
         58:fe:52:7e:0f:a9:b9:5e:7e:50:7b:14:fa:e6:d5:41:cf:dc:
         ec:a5:46:59:e4:fa:de:46:5f:ae:f1:a7:c5:f0:76:30:74:06:
         7a:e6:29:d9:64:e4:78:c3:fd:dc:fa:c8:44:88:b2:02:70:43:
         b3:ce:b6:3b:e9:9e:95:7f:51:57:ea:54:d6:24:5a:86:e3:f8:
         53:8f:38:d0:04:48:7f:bd:6f:bd:de:80:c2:de:84:8a:a9:95:
         49:fe:c7:ba:33:4a:58:80:12:c4:d1:02:92:12:5e:11:5e:ed:
         cc:2c:87:86:94:4b:a2:46:28:ef:cd:7e:fa:08:cf:95:59:74:
         c5:76:56:c3:9d:29:b0:fc:c2:8a:95:28:0d:19:2d:c6:ca:60:
         e9:2e:f1:31:5a:c8:e6:74:07:7d:d2:bd:b4:c8:94:e2:c2:34:
         ab:49:3c:d7:c6:f5:4c:26:d2:59:0d:41:9e:cd:f6:16:75:2d:
         1c:71:b8:12:79:3e:7b:8c:34:1e:fb:07:cf:d9:25:57:5e:b0:
         f9:50:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:12 2025 by rpki-client