Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File:                     COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier:          hfwp99WofnkV+ePnFSa65ZZ+cBoxwnCT5Lh/aiWz7Eg=
Subject key identifier:   59:63:FD:C5:21:CF:7C:41:5C:E6:61:2C:C8:A7:10:A6:84:CA:49:86
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer:       /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial:       01963B0A1023D7574AA629987A8DA0825106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number:          010F
Signing time:             Tue 15 Apr 2025 20:00:37 +0000
Manifest this update:     Tue 15 Apr 2025 20:00:37 +0000
Manifest next update:     Wed 16 Apr 2025 20:00:37 +0000
Files and hashes:         1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: 7qQ8KThbGzOlZN3uuj6UZEQ7TnsgZ3SqtD1BezPRiQg=)
                          2: xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa (hash: Ym4zKNNqMflGb0dAEycHEmUQAQN+DoJITr/UvN/UU8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:0a:10:23:d7:57:4a:a6:29:98:7a:8d:a0:82:51:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
        Validity
            Not Before: Apr 15 20:00:37 2025 GMT
            Not After : Apr 16 20:00:37 2025 GMT
        Subject: CN=5963fdc521cf7c415ce6612cc8a710a684ca4986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:de:ac:3b:18:5d:d8:33:41:62:2e:0e:b8:
                    45:89:d5:30:87:e8:03:26:59:75:7d:99:ac:e4:d0:
                    47:32:9b:94:e6:cb:c6:3a:46:d7:d5:1b:32:f9:45:
                    f6:ed:dc:5e:96:de:24:6a:e4:d5:d0:77:73:ba:83:
                    d3:5a:b8:fd:f7:f1:68:2d:51:37:99:da:be:84:51:
                    a3:ee:1a:fa:a3:35:55:e8:b5:4d:e1:5f:0b:9c:69:
                    a9:db:e6:50:fd:6d:47:0c:3f:fa:5d:f2:21:13:61:
                    90:33:9c:71:3c:5b:bb:7b:98:2b:d9:f8:20:5c:39:
                    21:e8:15:92:27:b5:de:af:17:6b:59:53:e0:2d:a6:
                    84:c2:a1:3c:81:b1:72:e8:f4:7c:b3:62:2b:e4:80:
                    ce:a0:33:89:e9:56:2f:37:9f:c3:81:db:36:fd:00:
                    a4:24:5f:a9:b2:b3:ac:a2:b6:95:0d:29:38:f0:70:
                    3e:41:72:bd:6e:05:89:5b:09:d8:73:29:bb:65:b7:
                    1e:d5:7f:b9:73:b3:d6:1a:71:cb:5c:f4:2d:9e:92:
                    80:38:bf:1e:51:80:0a:f1:5a:aa:7c:d7:cf:05:c8:
                    6e:ad:16:aa:34:d2:d4:80:f9:03:6d:b1:7f:13:00:
                    e8:11:51:2e:b1:50:94:1a:df:8d:e5:7c:92:c9:e7:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:FD:C5:21:CF:7C:41:5C:E6:61:2C:C8:A7:10:A6:84:CA:49:86
            X509v3 Authority Key Identifier:
                keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:42:02:8d:90:80:3d:a7:dc:59:27:15:01:50:e9:a5:b0:
         31:0a:3e:c9:28:66:3e:c9:71:77:e1:f1:29:db:51:d9:f1:aa:
         cc:d4:85:c8:c8:09:d4:d4:11:72:bb:ff:e7:e2:fa:88:c9:33:
         b6:6a:76:4e:f6:ef:c5:4b:1b:d6:f2:6f:99:d5:f1:af:12:df:
         fb:d5:8b:38:38:ba:c0:9d:90:7a:ae:3b:49:98:34:ff:51:65:
         6f:a3:55:5b:58:ce:88:c4:13:cc:2d:37:60:64:da:50:82:0b:
         ce:56:9b:42:16:15:b9:f7:a7:6f:bd:45:c5:88:29:8a:c0:57:
         f4:d9:87:ec:e9:52:0a:52:50:f8:21:3f:ab:f3:03:49:49:b0:
         b5:9c:08:e4:17:fa:a4:1a:0d:65:10:bc:ac:5c:ec:10:54:a1:
         42:41:5f:a4:ee:c4:80:a9:f2:0d:b4:52:4d:d4:09:09:cd:d0:
         d9:c5:01:f9:4a:e8:ce:bc:4c:f9:fc:18:55:e6:4c:fe:4c:f6:
         00:1a:cc:83:59:b4:95:19:cd:d2:36:50:e6:05:72:7e:85:a8:
         8d:93:8f:d9:70:28:33:a0:b1:b5:4b:b9:9c:82:fa:cf:cc:f7:
         e4:c0:e4:b8:60:eb:76:14:db:aa:bf:79:e5:f9:6b:8c:66:4a:
         6a:e9:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:55:48 2025 by rpki-client