Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File:                     RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier:          iGafG6yZpJg69zhTNH9XRoPYdAh7HEjo+tSeXQcxHao=
Subject key identifier:   A7:E4:1B:91:3F:A8:2C:5F:14:37:30:71:F6:D1:D5:E9:52:93:19:F9
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer:       /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial:       01964F6D41002FC3790A2D687F4A47E4178A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number:          14FF
Signing time:             Sat 19 Apr 2025 19:01:22 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:22 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:22 +0000
Files and hashes:         1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
                          2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: 56dJJjid1kpjeRzAaTmYpzG2ZOiAMrDZEBAr8GIpWPQ=)
                          3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:41:00:2f:c3:79:0a:2d:68:7f:4a:47:e4:17:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
        Validity
            Not Before: Apr 19 19:01:22 2025 GMT
            Not After : Apr 20 19:01:22 2025 GMT
        Subject: CN=a7e41b913fa82c5f14373071f6d1d5e9529319f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:77:5f:1c:20:d4:76:ee:ef:b3:35:48:3e:
                    23:aa:eb:80:14:f5:8f:8e:5c:cf:f4:51:dd:ee:5f:
                    85:c5:f7:4a:9b:62:df:d2:54:5f:db:8a:01:7b:94:
                    2d:3d:0d:e9:de:4e:ca:22:04:6b:1b:1a:4b:c0:fc:
                    3b:f9:f9:6a:52:3f:19:a6:c4:b2:c5:d0:c8:0e:31:
                    27:98:53:e2:86:44:77:cb:03:30:31:63:d4:80:82:
                    b3:7e:9e:c5:8d:49:83:4c:71:e6:cb:cf:61:a5:6f:
                    1a:14:f8:d6:2c:c0:57:8d:5b:83:6f:57:20:a7:72:
                    db:b1:ff:e9:b9:f8:cf:72:50:69:fe:6e:19:5b:96:
                    6a:ab:3a:c6:89:fe:4b:10:22:6f:b6:2b:f1:43:c4:
                    60:96:06:eb:25:ec:ba:fa:e4:f5:08:39:58:6e:9e:
                    0c:0c:63:38:6e:f3:98:34:be:9b:a5:4f:86:f2:ab:
                    1e:d8:11:21:80:40:d9:2f:73:cf:83:f4:e5:9e:a4:
                    41:33:ec:5f:fa:6e:15:0d:bc:bc:ac:86:ee:fa:1b:
                    1f:24:40:91:2f:0a:d2:1b:e0:dc:38:38:3a:75:93:
                    8c:d4:1d:76:4a:30:7b:89:30:8b:e8:ed:20:65:5f:
                    ef:99:4a:34:aa:75:6b:3a:37:8a:22:97:43:79:bc:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:1B:91:3F:A8:2C:5F:14:37:30:71:F6:D1:D5:E9:52:93:19:F9
            X509v3 Authority Key Identifier:
                keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:10:7a:f1:e3:29:ba:57:fd:a1:49:30:1e:09:79:0e:34:6f:
         9e:0f:1f:f3:fe:ee:ea:0a:a4:da:99:80:82:fb:9b:2f:11:44:
         22:e3:ff:09:98:30:89:1c:0f:dc:8b:a2:cd:ed:05:9c:df:ba:
         5d:d9:3c:a5:0a:0c:bc:e1:d8:4b:ac:ad:fd:5e:05:fa:43:87:
         42:53:0f:7d:57:dc:d2:d8:d9:e8:8b:2d:42:f6:4d:58:c9:08:
         ec:9c:93:77:c0:bc:c1:5a:86:99:f3:35:d8:f1:d2:4a:6c:4c:
         bc:12:c7:6e:f1:50:a6:e4:c3:70:72:b7:79:cb:67:7d:2f:e8:
         67:c4:45:e5:e9:61:94:88:07:8b:f2:4e:61:7a:80:73:63:f1:
         f4:a4:06:53:33:ea:be:3d:a0:d6:1f:6e:4c:0b:49:8a:c2:f0:
         2d:ed:fa:86:a2:d4:4c:71:9f:4c:54:7d:2c:99:13:f2:7d:82:
         12:bd:4f:0a:60:77:4a:f0:95:b5:b3:ab:33:74:a2:b4:1c:ca:
         42:c9:6b:9d:ac:0e:62:d7:ae:d2:fc:39:ba:2a:55:89:30:15:
         88:4f:9d:ed:e7:5b:61:33:f1:9e:7e:94:5a:42:cd:d4:a0:27:
         15:03:7a:41:d7:a0:44:35:cf:d2:84:bd:0e:c8:de:04:4d:1f:
         f0:88:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:08:57 2025 by rpki-client