Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          qsOeygwK1mHXELcFYQPUt6uiRWrHoxdlfUBP1sY08+I=
Subject key identifier:   9E:1A:12:7A:2C:81:5C:3F:85:77:3A:29:21:15:8D:35:2A:F3:61:AA
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       019652A47235345646F8E3527C5093E0D5C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          09D2
Signing time:             Sun 20 Apr 2025 10:00:30 +0000
Manifest this update:     Sun 20 Apr 2025 10:00:30 +0000
Manifest next update:     Mon 21 Apr 2025 10:00:30 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: 58hxi1ZP1x0qCTU1M3sEuNyXnHl7LDD3cF0XcDMfkAs=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:72:35:34:56:46:f8:e3:52:7c:50:93:e0:d5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Apr 20 10:00:30 2025 GMT
            Not After : Apr 21 10:00:30 2025 GMT
        Subject: CN=9e1a127a2c815c3f85773a2921158d352af361aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:b9:b5:0d:b3:c1:3b:d5:44:ee:35:8e:90:
                    1b:a2:85:d9:70:b3:42:16:88:a7:53:33:11:b2:f9:
                    63:be:c4:f0:cf:86:52:8d:54:0a:3b:b7:25:98:8d:
                    95:2b:d0:16:47:7e:ae:56:d4:d3:36:f8:a0:50:df:
                    10:b6:a9:3f:88:ab:2c:7f:e6:f3:ff:5e:0a:ec:08:
                    fd:64:39:ad:b8:0d:ec:4c:61:b6:15:de:c9:f4:07:
                    01:92:24:74:d0:1d:ad:e0:1d:72:4a:67:d7:f0:24:
                    2d:00:2f:c9:7f:69:da:e0:e2:ac:a2:f1:e5:9a:db:
                    1a:64:b0:12:2d:96:4c:6c:32:12:e0:b6:49:37:5d:
                    e5:1b:f1:6f:c0:db:3e:d4:0e:d9:9f:f8:d0:b0:04:
                    4f:04:d8:49:b4:e7:1a:ab:d4:f4:33:4e:55:6e:3d:
                    58:04:10:5f:d0:19:4b:e6:78:74:4f:c4:58:dc:9c:
                    86:56:b6:9c:15:b9:65:04:6f:cb:11:7d:8a:0b:be:
                    d1:c0:9d:99:14:50:4a:a9:f9:bf:e8:88:c7:59:8d:
                    ba:32:86:85:9e:f5:9b:c3:81:b2:2b:ba:e1:ce:b1:
                    67:e0:15:6c:f7:3d:bc:b7:f0:b3:32:bf:5c:f9:b2:
                    8a:e9:02:3a:99:19:2d:ab:4a:6e:a0:74:6f:63:5e:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1A:12:7A:2C:81:5C:3F:85:77:3A:29:21:15:8D:35:2A:F3:61:AA
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:2a:22:a4:79:c3:1a:01:fe:41:7a:2c:23:b0:c0:29:ee:
         63:c4:72:8b:aa:7c:87:55:7a:6f:fe:95:a5:45:aa:db:b9:9d:
         61:d0:56:1e:e6:ce:9f:66:f4:06:a8:eb:ae:3b:97:0c:0f:f6:
         e1:74:e4:83:b2:08:c0:d6:ee:42:0b:04:23:fe:13:18:6e:7e:
         73:f0:45:e8:62:11:e2:77:63:0c:b4:21:8d:17:56:7a:3c:11:
         f5:05:51:cd:2d:20:64:d2:45:0e:50:db:cf:02:10:0a:0d:e9:
         2e:1e:c2:3b:dc:c6:a2:3a:4c:7e:dd:c3:1c:7c:da:83:4a:1c:
         c2:00:0b:18:e1:85:39:84:ce:81:a0:02:6f:06:da:73:a1:fb:
         58:8c:e4:62:1d:ec:dd:2f:2b:03:4d:18:be:0a:f7:88:f2:99:
         37:66:d9:e9:c7:c8:12:c3:f6:e3:83:6c:23:8c:16:d9:4c:f4:
         e3:24:7e:82:56:e9:15:b5:ad:b9:f6:97:2f:c9:42:a3:21:b2:
         8c:06:4b:b1:73:eb:80:a8:8a:1d:33:48:c8:af:69:8b:d0:c4:
         57:cd:6d:9f:a6:9e:82:57:80:97:9b:bc:0a:6a:0c:3a:ab:dc:
         6d:bb:9f:79:22:f1:32:c7:dc:98:fd:6d:2c:65:01:d3:12:97:
         46:bf:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:22 2025 by rpki-client