Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
File:                     s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft (raw, json)
Hash identifier:          /FwSens/njaioSK69D45jeJ6PWWTQ0xZjsHm9wV3QZc=
Subject key identifier:   D7:18:51:6B:4D:22:16:16:EA:34:33:45:9D:B1:20:0B:EB:6F:76:39
Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80
Certificate issuer:       /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
Certificate serial:       01963EE6F8871549CCF555D55ABEE355ECC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
Manifest number:          0661
Signing time:             Wed 16 Apr 2025 14:00:46 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:46 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:46 +0000
Files and hashes:         1: s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl (hash: yDBToeiRAyKn/EgHXsFlsHkf29a8z0gOZ2BLHG307qE=)
                          2: sGUfZNonYxZsb_xTxnb3H4Yu91o.roa (hash: s4fR6r2ByqMIr6sZhA9/b2xFuO1KrvktMupAhaQVN8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e6:f8:87:15:49:cc:f5:55:d5:5a:be:e3:55:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
        Validity
            Not Before: Apr 16 14:00:46 2025 GMT
            Not After : Apr 17 14:00:46 2025 GMT
        Subject: CN=d718516b4d221616ea3433459db1200beb6f7639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:1b:c1:5b:86:fe:5f:33:db:96:70:33:ab:
                    4a:69:32:02:81:ea:03:1f:9e:a6:89:f2:79:a5:64:
                    bc:41:ef:8b:fd:c7:1b:b9:3d:7b:70:ab:1f:02:e6:
                    ef:49:63:60:f3:1b:82:44:4f:75:74:e3:66:a1:26:
                    ac:cf:4d:92:e8:70:73:23:ce:53:96:ee:05:5d:ce:
                    c5:f5:c9:e6:52:84:50:4a:e4:51:2b:53:ba:65:b0:
                    aa:6e:17:cc:ba:6e:00:84:d0:0d:50:83:fa:f2:88:
                    a2:a5:13:21:c4:5b:e1:cf:35:9e:d4:be:23:48:f1:
                    50:4b:f6:13:7d:d7:dc:eb:3f:f1:05:d3:fa:47:55:
                    13:7c:78:23:73:fc:dd:cb:d2:ab:af:60:0c:ae:61:
                    75:34:62:16:72:41:e4:9d:9f:3d:0c:10:10:a9:1a:
                    23:69:a0:3d:90:e2:ac:f6:e1:9c:04:01:29:fb:a7:
                    1d:8d:ee:2c:5f:f2:04:dd:e7:55:40:c6:19:06:1f:
                    47:b3:8e:a3:05:cd:a8:91:f4:6e:54:1e:d3:03:c8:
                    31:1f:b5:0e:01:a7:11:b6:cb:16:4b:da:6d:a7:e4:
                    33:2b:7b:7f:ba:01:eb:f7:a5:ac:3e:69:87:e5:80:
                    cc:fe:6a:0d:05:d6:88:80:2f:a7:61:01:ef:f6:dc:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:18:51:6B:4D:22:16:16:EA:34:33:45:9D:B1:20:0B:EB:6F:76:39
            X509v3 Authority Key Identifier:
                keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:3d:da:1a:d3:23:3d:30:db:8c:96:92:f7:04:5d:93:d0:
         f9:ce:13:a3:87:57:8a:8d:f7:01:e8:3f:b3:b6:f3:06:4f:d1:
         ee:cc:17:21:e4:af:86:5d:b0:c7:b0:5c:a8:23:d0:37:22:ee:
         3b:d1:90:4c:25:a7:67:8d:42:43:d8:ee:67:d4:df:68:d3:38:
         79:70:81:ef:fc:29:ea:3b:20:b3:6b:61:2b:68:34:e2:35:82:
         b0:2a:30:25:28:d3:86:48:b2:0a:3b:6e:f2:bd:5c:27:54:63:
         f7:b4:36:ed:b1:a3:b4:8f:a3:40:83:df:f3:35:9f:0d:41:e0:
         46:4f:f3:30:d9:09:73:35:3a:22:6e:80:cd:43:c0:23:e6:1f:
         89:90:d3:76:44:40:3d:57:cd:4f:28:ed:79:32:a0:3b:a9:c2:
         07:51:ee:48:10:66:2d:6a:b5:f1:6b:fc:c7:e2:db:03:56:7d:
         ac:c9:43:13:a6:97:26:3d:d5:ed:15:69:e7:b7:7f:47:06:d3:
         bf:17:24:87:d4:0d:1b:90:57:91:01:80:5b:c1:d6:a4:11:83:
         17:cb:c8:9d:c9:60:af:ca:09:5f:20:ea:b0:59:c0:76:7a:5e:
         4b:b5:66:da:44:c9:3a:20:97:44:39:cd:39:c3:52:42:4b:ed:
         2a:55:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:55:54 2025 by rpki-client