Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File:                     7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier:          D/f6zrWGXpAIJIW2Nnot/1NqSAKo+elkWlvAVWD8UvI=
Subject key identifier:   E4:8A:33:75:56:B9:63:6F:DB:D3:A8:D8:8F:5F:95:BB:2E:94:D7:59
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer:       /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial:       01964633139E2E3576B3D1F0AF1B5C29D6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number:          0447
Signing time:             Fri 18 Apr 2025 00:01:14 +0000
Manifest this update:     Fri 18 Apr 2025 00:01:14 +0000
Manifest next update:     Sat 19 Apr 2025 00:01:14 +0000
Files and hashes:         1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: mc1F/DkpjNB5sLwbGXpClqpGre50JSPk2CCewA0R28I=)
                          2: fjo3TJF5UJdtWXbH-RXUzzkMGLw.roa (hash: 3e8hosZ9ppBndt6p8XyvpqJUy9gK6SPz4ut0nyjSkJ4=)
                          3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:33:13:9e:2e:35:76:b3:d1:f0:af:1b:5c:29:d6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
        Validity
            Not Before: Apr 18 00:01:14 2025 GMT
            Not After : Apr 19 00:01:14 2025 GMT
        Subject: CN=e48a337556b9636fdbd3a8d88f5f95bb2e94d759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:6c:83:a1:1d:c3:b7:2a:45:02:f6:1a:ad:
                    81:fa:08:ee:23:9b:c8:17:88:cf:3f:c5:b3:b3:ad:
                    e6:2e:36:09:43:cc:75:69:c1:89:d3:47:1e:a7:24:
                    d5:3a:da:ca:cd:49:44:be:e1:a2:66:43:5b:2c:ed:
                    2d:0e:ce:a8:36:a9:0b:7b:73:18:fd:c9:f3:54:b7:
                    93:8f:4e:12:6c:a1:b4:18:57:1b:71:46:74:fa:28:
                    c4:d2:3c:10:54:f8:07:3b:b7:2a:62:87:34:b6:63:
                    45:ae:bf:a1:3c:0b:54:f3:00:8f:91:67:8c:22:38:
                    f2:e4:96:69:a4:91:24:99:41:cc:86:d0:e7:8b:fd:
                    b0:1a:cf:68:47:5f:53:15:e0:c8:20:a5:bd:8c:37:
                    c7:95:2e:1d:17:63:07:bb:de:af:50:c5:b7:68:0d:
                    ba:50:52:a8:e6:d3:de:52:70:0f:25:52:95:44:50:
                    bb:a5:c0:ca:23:4c:5f:60:72:c7:ac:5a:61:9d:ad:
                    b6:12:25:01:8d:9a:07:7d:3a:34:77:bd:01:88:52:
                    7e:3c:0b:15:65:48:ee:60:f8:19:b2:00:a3:6d:ee:
                    b4:76:c0:c4:c9:57:82:ec:e0:79:90:ea:36:0e:c1:
                    1c:83:d6:c6:8a:a6:b9:79:f3:a0:77:b1:a4:af:0a:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8A:33:75:56:B9:63:6F:DB:D3:A8:D8:8F:5F:95:BB:2E:94:D7:59
            X509v3 Authority Key Identifier:
                keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:6d:5c:e1:9d:34:08:34:d1:61:45:d7:77:68:2b:68:95:d9:
         60:c3:39:fb:5d:f0:fc:a4:e7:43:0c:3e:71:c2:a8:ee:0a:c2:
         6c:5f:d4:9a:fe:df:e2:22:21:2e:81:f6:38:fa:04:7b:28:9e:
         08:0a:e4:ed:90:4c:7c:12:1b:50:82:51:2f:64:20:a4:da:73:
         30:36:e3:1f:59:b1:b6:5b:c4:22:00:c8:ad:cc:71:fe:af:3b:
         85:21:5a:0f:83:32:3a:b8:69:07:df:8c:0c:96:90:92:24:f8:
         f9:1e:3d:28:d5:9c:86:34:9e:10:b6:a0:76:bb:29:30:f6:a7:
         89:c8:0b:5c:da:5f:b2:f5:6d:1c:b9:90:12:32:ff:0a:45:98:
         9b:76:25:96:c1:2a:c5:56:73:53:79:fe:33:9a:5a:2d:ab:7f:
         48:a5:1a:5f:21:3f:66:27:d4:6c:c9:f4:9c:9f:c1:4d:5f:a2:
         16:20:cd:15:96:66:6b:c5:1a:03:50:fe:2b:a9:ee:f5:ed:fc:
         bc:eb:69:a8:91:ee:21:ab:70:03:45:a9:04:d5:69:9e:d1:0a:
         8a:10:77:7f:b6:2c:ae:9a:93:03:fb:a2:0a:d8:4c:25:37:67:
         13:1e:31:5b:ef:fa:d2:c5:74:84:94:84:c5:4f:00:e5:9b:85:
         2a:0a:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:53:59 2025 by rpki-client