Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          SpubmYgeJF89o/pj0U/zm4+ghdZy5u1VtAw896Z/BNw=
Subject key identifier:   78:0F:DE:A9:4D:6E:DA:B7:6C:CA:CE:41:28:26:CE:22:FD:EB:BF:97
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       019511A2D80F160875CF74A01542D6D3852A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          0199
Signing time:             Mon 17 Feb 2025 02:00:39 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:39 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:39 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: dlevReLbUq/52sWgkG5GR66IVGV2zBkmqEVQ1JnwuxU=)
                          2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:d8:0f:16:08:75:cf:74:a0:15:42:d6:d3:85:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: Feb 17 02:00:39 2025 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=780fdea94d6edab76ccace412826ce22fdebbf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:27:cd:25:0a:a8:b2:4a:60:d1:6b:72:17:
                    5f:11:06:02:67:8c:77:fc:ac:62:a3:25:3f:b2:a2:
                    bb:11:ef:d3:5b:06:34:b0:17:fd:4b:88:8a:e0:d4:
                    31:ac:7e:a7:4b:a3:3e:70:04:f5:b0:5f:83:83:18:
                    97:69:37:1b:f5:62:45:52:aa:4d:f7:30:5e:8c:f8:
                    9e:8d:3c:15:93:8d:d1:3b:6b:79:aa:be:76:bb:43:
                    b6:fe:dc:db:bc:1d:22:6c:2e:05:2b:75:70:0e:cf:
                    cd:5c:49:e5:f7:ec:53:7c:0e:49:2f:1d:4e:c8:dc:
                    88:d1:d7:2d:2c:0a:2e:81:5d:77:be:b2:ea:87:2b:
                    bd:75:23:e4:82:98:a9:99:76:32:b3:5a:5a:2a:06:
                    62:47:55:71:7c:19:da:d5:7e:f3:15:56:36:16:ba:
                    90:c6:b6:10:b6:be:29:09:5b:65:86:9b:82:af:5d:
                    0f:aa:4c:7c:19:57:a0:f5:7b:43:7b:eb:a1:ee:76:
                    a2:ab:71:14:c6:64:70:fb:16:f0:3c:9f:13:38:9b:
                    44:59:41:ed:19:5b:e8:d3:c0:fe:13:59:b6:96:81:
                    51:2c:7e:cb:f1:7f:6e:0d:07:d6:63:fa:d5:d1:3f:
                    07:13:75:16:1a:0f:4d:5c:bf:e0:5a:4c:8a:ae:76:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0F:DE:A9:4D:6E:DA:B7:6C:CA:CE:41:28:26:CE:22:FD:EB:BF:97
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:d9:92:b3:e5:23:4e:a6:1e:bf:7c:1e:c6:0d:bd:99:e0:
         2f:5e:cf:13:be:d8:5d:63:e2:20:6e:bb:2f:84:94:76:e9:dc:
         4e:fb:b2:18:4b:96:51:8a:31:05:a5:0f:f7:e4:3f:f0:ff:2b:
         70:3e:d9:30:1a:fe:f1:f2:95:91:25:27:4d:bd:33:e3:14:8a:
         50:b8:28:d6:7e:62:87:74:42:e4:18:d8:5e:81:10:f6:39:9f:
         2e:f9:b1:b0:7f:87:e2:22:02:d7:bb:cc:57:72:b6:e0:95:c9:
         c1:cc:9b:fd:3d:79:cf:c9:ea:61:b3:5d:08:fe:c0:9f:b5:69:
         0e:24:a1:36:24:5c:66:b7:47:95:ab:10:05:d3:30:1b:83:03:
         2d:4b:c0:fe:df:a1:51:2e:9b:8c:57:6f:66:6d:44:97:08:85:
         dd:f1:a6:35:4c:c1:c2:21:43:d0:d9:0f:25:1e:48:ce:b6:3b:
         1b:89:09:d5:08:70:cf:31:4e:3b:12:3d:a8:39:26:45:50:74:
         15:24:f2:b3:87:f8:1c:7c:4a:ca:85:69:12:98:bd:54:1f:48:
         55:cf:98:f3:5b:19:8c:02:68:09:e4:2a:88:af:e4:2c:4b:77:
         99:d5:5d:71:6a:58:a2:70:56:3d:44:36:8f:28:b4:d0:76:0c:
         d3:ce:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:29 2025 by rpki-client