Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File:                     7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier:          ulYJ/pMAXeYIQ4GYSRSomSxl2SlSOoyJoKfHGaaUN+g=
Subject key identifier:   A9:D5:D0:1B:3C:5D:FD:84:0F:0C:1D:C2:21:69:FF:64:B5:BB:87:F6
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer:       /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial:       01965011875E74BF2A818331F70819C0F4A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number:          142B
Signing time:             Sat 19 Apr 2025 22:00:47 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:47 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:47 +0000
Files and hashes:         1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=)
                          2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: PTlElgLuX/WKCW6pDM4AFMTzI70vmgl8QgbxexWrR6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:87:5e:74:bf:2a:81:83:31:f7:08:19:c0:f4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
        Validity
            Not Before: Apr 19 22:00:47 2025 GMT
            Not After : Apr 20 22:00:47 2025 GMT
        Subject: CN=a9d5d01b3c5dfd840f0c1dc22169ff64b5bb87f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:8d:ef:78:df:29:6f:0e:72:95:c3:18:e0:
                    67:df:00:e8:82:07:a7:d6:a5:5e:26:39:77:a9:b4:
                    39:f4:eb:4e:94:0b:f5:14:d5:39:0d:1f:5c:6f:4d:
                    cb:86:6e:d0:2d:60:df:be:73:97:aa:fe:f3:46:4d:
                    fd:61:3a:da:fa:b7:d5:68:8a:b2:98:cc:ee:cf:b1:
                    e8:2b:ff:91:c8:2d:75:1f:b0:ef:cd:86:97:b3:fd:
                    09:e4:8c:7f:7f:e4:8a:29:e8:72:26:f1:1a:79:24:
                    fa:ef:f5:ba:a5:5f:cd:b3:7d:ac:30:02:8f:00:76:
                    41:de:1a:d3:b3:45:ef:d8:5b:60:a2:6b:ec:89:65:
                    cc:63:80:dd:78:6e:c5:8f:bc:88:6b:83:a5:2e:a8:
                    76:22:f2:74:f4:72:3d:19:ab:4b:76:1c:63:a1:16:
                    e4:05:71:88:49:8b:24:a9:5c:6b:10:04:68:80:b6:
                    78:ff:b4:8a:65:25:a2:3b:28:83:84:6a:fb:92:49:
                    38:67:9b:3c:cc:de:da:15:85:b0:51:22:78:db:9f:
                    89:2e:19:ac:ff:be:c5:5c:50:dc:90:e7:31:37:88:
                    67:0e:b1:d2:91:35:37:33:80:66:55:db:5e:ac:d4:
                    e6:c0:c0:a2:09:5f:e1:5f:bf:80:53:62:59:52:27:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D5:D0:1B:3C:5D:FD:84:0F:0C:1D:C2:21:69:FF:64:B5:BB:87:F6
            X509v3 Authority Key Identifier:
                keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:9b:a3:3b:d9:64:c9:1f:9c:e6:b5:92:e2:88:7c:4d:19:
         d2:64:e1:d3:9e:4d:81:dc:df:c8:02:5f:bb:12:5b:bd:6b:5c:
         39:10:6a:92:e1:b3:9e:05:1b:e5:57:10:2a:64:22:74:fb:8a:
         8f:6c:4d:30:ea:12:09:83:b0:dd:c7:36:80:09:fe:63:9f:0a:
         e1:85:3a:63:8f:bc:8c:b4:51:2b:75:b8:2b:4e:d6:2c:f0:1b:
         d8:03:be:e0:19:59:bc:b4:f2:d2:89:9f:b7:c1:32:13:75:8d:
         9b:67:35:5a:81:5b:80:a5:a1:a4:da:b5:75:7a:8d:92:71:50:
         39:9f:31:9d:da:01:91:15:8a:1e:ed:76:ca:45:66:1b:c5:50:
         5d:7d:40:25:7f:e1:cb:a5:49:59:d6:11:14:6f:0b:90:78:d4:
         d6:9f:4d:12:00:68:bf:85:0c:a7:da:d9:35:18:48:4b:93:8b:
         3b:ea:df:67:4c:2e:ea:7e:0a:ef:f7:8a:23:84:2e:ea:10:21:
         4b:b5:44:76:52:ce:64:e6:4e:ea:c6:d5:49:a9:e7:1b:27:ac:
         e3:84:d6:96:f4:48:d7:e5:8f:c9:48:39:96:86:32:86:18:d9:
         5c:ec:cd:50:73:48:a5:6f:c4:d6:58:1d:b0:00:b7:c2:d6:e6:
         3d:fe:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:11 2025 by rpki-client