Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File:                     7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier:          INMkvBk5KEpGR7E75XM1dPl6ymvmyr017FjyLZtOrbQ=
Subject key identifier:   5D:3C:6E:05:DA:C1:A4:10:98:44:8D:27:8C:3D:EE:A9:1B:91:55:81
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer:       /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial:       01965492CECA684A067B5CEE3218D821A38F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number:          0B96
Signing time:             Sun 20 Apr 2025 19:00:29 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:29 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:29 +0000
Files and hashes:         1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: UPizdGIHtyNeKxUdAb5Y7+mVEVcyfs9m9Vxwel0jZz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:ce:ca:68:4a:06:7b:5c:ee:32:18:d8:21:a3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
        Validity
            Not Before: Apr 20 19:00:29 2025 GMT
            Not After : Apr 21 19:00:29 2025 GMT
        Subject: CN=5d3c6e05dac1a41098448d278c3deea91b915581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:44:9c:d0:1d:64:09:89:3c:80:23:bf:d6:
                    ff:11:45:7a:ce:88:a0:d6:d6:f1:78:08:93:77:64:
                    af:d9:98:1b:5c:60:cb:27:0e:0d:7c:02:39:e3:ae:
                    79:5d:58:a6:ea:52:16:18:96:13:17:2a:9e:75:60:
                    e0:80:0b:a4:8c:eb:3e:f9:2a:1e:65:b9:b2:3a:fb:
                    5a:b3:4e:34:10:6f:3d:17:a6:f6:b6:fd:50:de:53:
                    ea:e1:38:df:e6:06:a5:a4:cb:c1:5c:5b:bc:61:09:
                    03:72:9c:3a:4c:fc:ad:a8:66:76:50:55:8c:9a:53:
                    27:81:a9:34:59:8c:3d:f1:65:00:9f:7f:29:d1:22:
                    e8:c5:8b:79:86:d9:61:49:0a:b2:98:75:67:99:95:
                    6a:73:06:10:b4:55:ae:a7:cf:56:31:7b:e6:6a:e6:
                    d6:4f:a8:d7:f5:c2:28:0a:aa:b0:6e:cd:c9:e9:f6:
                    21:0f:df:20:41:11:c7:25:f3:f4:32:72:50:39:43:
                    c2:a8:68:cb:ac:f3:2a:17:9a:e8:3e:0a:6f:76:e8:
                    13:ec:61:58:0c:69:f0:95:07:3b:db:07:d0:f5:7b:
                    72:fd:d3:a6:95:2b:a8:03:15:13:f7:d0:90:2c:04:
                    fb:ef:be:9c:f9:3c:40:0d:fb:91:73:65:a5:dd:6a:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:6E:05:DA:C1:A4:10:98:44:8D:27:8C:3D:EE:A9:1B:91:55:81
            X509v3 Authority Key Identifier:
                keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:d2:eb:32:20:36:2c:26:b3:44:56:cf:ff:2f:6c:5e:67:02:
         5c:c3:94:1d:8b:5a:c1:92:1d:09:ad:15:08:ae:33:86:ee:94:
         fe:36:7e:bb:df:a6:0d:f3:22:3f:54:3b:43:c0:0d:31:f0:95:
         dc:cc:3d:2a:05:7d:9a:df:b9:f4:87:cc:9d:42:0f:e2:bd:e4:
         7e:65:d5:2f:3d:6a:e2:19:ba:af:4b:6c:9d:dc:e3:d5:9b:a8:
         b9:c2:81:2b:52:4f:3f:f2:ac:85:27:e0:5f:67:4a:27:20:74:
         8e:79:02:c8:67:1b:b4:5f:fe:a4:d7:30:8f:ef:da:72:d4:fe:
         4e:36:14:d1:9c:3e:24:72:73:d8:42:c2:50:8c:4f:99:27:33:
         24:82:a8:d4:d3:f2:da:3e:17:3a:75:ba:8a:9f:f6:23:ce:49:
         11:2a:1b:70:79:ec:f4:91:8a:7a:63:5e:38:39:aa:92:b5:9b:
         df:9f:79:8c:46:95:98:42:d0:e0:f3:fb:1c:48:77:66:00:7e:
         cc:b5:82:16:d1:d6:2a:5b:cc:41:ed:45:1c:5b:75:1d:91:89:
         19:17:05:a8:93:d4:83:a6:9c:01:67:24:97:56:34:ed:e1:24:
         02:40:66:e0:b3:0b:68:0c:3c:fa:31:01:8e:eb:91:a6:09:dd:
         18:02:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:46:08 2025 by rpki-client