Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File:                     7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier:          GloTfuOnstOox7Cpg1usj3x+IqD/GcgNr8TjOVMSfkE=
Subject key identifier:   F2:D8:1F:FE:0F:29:24:83:8E:E0:A8:66:4A:72:11:22:E1:76:F7:61
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer:       /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial:       01964A7D26A7DDFD461BE336678BE797B182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number:          095E
Signing time:             Fri 18 Apr 2025 20:00:37 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:37 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:37 +0000
Files and hashes:         1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: q6WTcepx7dYT3dXV3BKDlSAifXDgfrCEW4yYEumCSsk=)
                          2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7d:26:a7:dd:fd:46:1b:e3:36:67:8b:e7:97:b1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
        Validity
            Not Before: Apr 18 20:00:37 2025 GMT
            Not After : Apr 19 20:00:37 2025 GMT
        Subject: CN=f2d81ffe0f2924838ee0a8664a721122e176f761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:e1:d7:af:20:85:8f:33:de:c4:7c:79:76:
                    95:8e:e9:ef:33:ff:d4:c3:bf:0b:be:d8:a0:0a:7a:
                    f3:8e:af:c5:98:6c:3a:bb:b8:d1:af:48:23:27:59:
                    02:52:e1:f8:3f:84:41:91:6c:f8:ee:15:28:f5:60:
                    96:81:02:ba:5d:37:8a:15:35:91:e7:f3:c6:02:66:
                    7b:eb:cf:39:2b:89:b9:d8:55:1c:c1:26:85:22:51:
                    cf:c4:18:4e:23:e1:47:9d:e2:c4:8c:85:66:f0:e2:
                    c5:9f:a5:dc:36:58:02:20:2c:9f:8d:7b:3d:91:04:
                    95:f3:2d:d8:09:75:88:f1:7b:e7:5a:d8:d2:3b:58:
                    86:44:a9:75:c9:aa:9b:0d:be:7b:a7:7f:cc:36:9d:
                    29:b5:12:b2:f7:b5:ea:fc:d9:e9:a9:9f:7d:d1:77:
                    e7:03:27:64:f5:d5:25:ea:e1:50:1a:42:cd:23:99:
                    4d:bc:83:ad:7e:ec:2c:ef:ea:3b:cf:19:b4:d0:56:
                    78:1a:f5:30:5c:a8:d2:86:51:8a:0f:f4:41:47:c6:
                    c6:bb:56:cb:2d:7e:5f:b9:9e:f7:b7:e4:f2:a7:cf:
                    92:52:12:d3:ec:c2:ba:3b:6a:41:23:b4:23:ce:26:
                    50:4e:79:db:89:45:fc:73:f9:91:38:56:aa:45:6d:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D8:1F:FE:0F:29:24:83:8E:E0:A8:66:4A:72:11:22:E1:76:F7:61
            X509v3 Authority Key Identifier:
                keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:5a:13:89:9e:7e:c8:a3:3b:a5:de:c1:91:04:c9:8e:ab:
         9b:24:91:f6:4f:49:0d:a4:72:08:0b:74:ed:49:2c:4d:cc:b3:
         0f:4f:00:71:49:19:90:50:2c:f8:8c:e7:81:5c:b2:14:4c:56:
         fb:b3:50:eb:d6:8c:65:32:8f:bf:6c:c6:b2:df:d0:ad:d5:51:
         0f:d8:3a:e6:c3:e8:5f:00:13:e2:97:53:31:7b:fa:a7:f4:ed:
         29:1c:cd:f1:20:7f:b7:80:61:f0:01:ed:8a:1f:e6:dd:f3:5a:
         d9:51:a8:8c:fa:25:d6:87:41:3b:51:6b:e8:9f:9f:74:91:25:
         be:92:5a:0e:9f:ab:dc:92:d4:7b:c5:a2:c6:81:ec:57:bf:a8:
         29:a9:6a:3f:c9:ca:0f:9d:ca:b1:eb:47:29:9c:52:26:22:66:
         54:79:7d:7c:04:27:1f:52:55:de:57:02:6c:6b:44:83:95:ef:
         c8:85:49:b8:c9:65:a0:df:ad:ba:69:02:f1:c7:a8:ba:8c:34:
         14:34:6e:0e:ad:9f:9b:44:dd:61:1f:35:4f:9c:54:cc:26:f0:
         9c:2d:aa:96:25:bf:32:7c:8a:dc:6c:77:0f:18:d3:8e:60:62:
         ce:8e:ae:a1:7b:6c:1e:06:21:84:9a:27:c9:3d:77:33:9f:43:
         27:d0:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:42 2025 by rpki-client