Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File:                     7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier:          QuBkRaiKd+uarAzoHx24qi7DvmJItoVW3HyNJSoJ910=
Subject key identifier:   3D:11:88:1C:00:B4:FA:09:BE:C8:10:C1:7D:C2:E7:82:DF:7B:D3:56
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer:       /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial:       0196451FAEB59F57F0F03C7A97E8CC058CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number:          0BDD
Signing time:             Thu 17 Apr 2025 19:00:26 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:26 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:26 +0000
Files and hashes:         1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: D3dO/fs5/twWVtPesY7gX0aXBG5IbDonauJ3qktKTuI=)
                          2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:ae:b5:9f:57:f0:f0:3c:7a:97:e8:cc:05:8c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
        Validity
            Not Before: Apr 17 19:00:26 2025 GMT
            Not After : Apr 18 19:00:26 2025 GMT
        Subject: CN=3d11881c00b4fa09bec810c17dc2e782df7bd356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:df:1c:a1:05:2f:71:8c:d7:ec:d7:37:fd:
                    c5:77:6d:0f:57:02:6f:0a:88:58:25:6b:df:37:11:
                    79:84:17:9f:a2:e0:4f:4c:04:40:1f:4a:cb:cc:8d:
                    a1:fc:e5:88:05:53:e6:44:aa:ea:ef:1f:e5:d1:e0:
                    df:ff:e1:5c:1b:77:de:3c:42:cd:04:a5:ef:8a:02:
                    cf:72:50:47:9f:17:35:cf:49:62:42:9e:45:1a:27:
                    29:5f:38:ef:3a:30:d4:e1:ea:e5:0f:1b:7b:bb:3a:
                    5e:2b:55:38:91:fa:8a:5d:55:24:68:90:a4:a5:b6:
                    d9:31:82:75:be:83:f2:7c:f8:74:10:8a:50:dc:cb:
                    68:b9:8f:10:9d:6f:e9:ef:23:67:e6:5c:d8:d6:8e:
                    ed:62:99:f5:74:4f:ce:35:6f:23:e3:c7:9f:83:a1:
                    31:a2:20:34:7e:c5:e9:94:73:5a:df:67:6e:27:fa:
                    a5:a2:a9:82:11:22:1a:76:56:5c:26:87:a7:61:51:
                    0a:6f:92:fe:bd:2e:7f:d4:59:48:fa:48:16:8e:35:
                    36:88:01:5f:1d:49:46:d2:a3:61:46:5b:93:80:91:
                    54:bb:72:a0:92:8a:15:a6:ba:07:fb:41:44:38:9e:
                    93:19:2c:72:11:2a:da:57:ce:ea:24:c8:43:ee:8f:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:11:88:1C:00:B4:FA:09:BE:C8:10:C1:7D:C2:E7:82:DF:7B:D3:56
            X509v3 Authority Key Identifier:
                keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:43:bd:c9:d5:28:d9:3e:ef:f6:58:14:b9:00:7d:91:27:72:
         d5:9f:30:db:b2:9f:6a:90:1d:5d:02:e4:42:63:d6:fd:2a:02:
         65:71:df:bf:8d:af:bf:59:fe:9f:34:37:f3:47:eb:ad:47:44:
         67:42:e0:1d:f1:2d:5f:60:74:51:56:1a:e7:28:08:bc:8f:c7:
         48:8a:62:67:c8:a9:e1:18:64:2a:d7:93:f5:5f:d7:15:d1:75:
         4f:a7:d5:45:89:7d:50:43:88:f1:31:b3:d2:5d:24:14:31:63:
         89:d1:45:d7:d0:40:8d:7c:e9:95:0a:26:4d:ef:2d:ac:ea:4d:
         80:8d:b4:69:00:73:07:f6:23:94:bf:5e:28:20:8d:aa:ad:11:
         5b:44:39:dc:ee:7a:05:2e:57:82:7d:e6:93:90:32:bc:49:db:
         93:43:15:bc:0f:10:2a:be:e2:85:a7:38:fd:6f:ed:a1:73:95:
         2f:c3:84:c3:00:14:f8:96:4a:27:1f:3d:6d:5d:e5:b9:05:5c:
         68:c7:fa:cf:83:db:22:98:54:3d:df:65:24:2f:8d:06:1f:d6:
         f9:ea:37:33:1d:f1:e4:f1:d8:98:ad:b6:ad:85:f5:cf:e7:b4:
         de:5a:bc:22:63:e7:05:d0:f8:f5:ba:2b:18:fe:ae:b6:63:18:
         2f:0a:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:25:46 2025 by rpki-client