Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File:                     Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier:          wP8wyvnhQvnLlk+e3UaMEpdPCuHaKUpPPT0Sd2Fbb2A=
Subject key identifier:   D0:34:F7:B0:7E:FB:BB:57:A2:D4:FE:CF:3D:88:48:FC:81:CE:6E:15
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer:       /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial:       01965A270947F66343A88B6C735E23FB57BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number:          103F
Signing time:             Mon 21 Apr 2025 21:00:29 +0000
Manifest this update:     Mon 21 Apr 2025 21:00:29 +0000
Manifest next update:     Tue 22 Apr 2025 21:00:29 +0000
Files and hashes:         1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
                          2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: p+xbMTFkfjZ/ZZgKfc/CoBzNEpG7Br0Mt1L+k/VxYW8=)
                          3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
                          4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5a:27:09:47:f6:63:43:a8:8b:6c:73:5e:23:fb:57:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
        Validity
            Not Before: Apr 21 21:00:29 2025 GMT
            Not After : Apr 22 21:00:29 2025 GMT
        Subject: CN=d034f7b07efbbb57a2d4fecf3d8848fc81ce6e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:31:0d:ae:c2:32:3e:d1:f5:ee:e2:96:8c:
                    67:29:50:d5:51:92:ea:d2:a6:ec:3c:49:d8:5e:0a:
                    d3:2b:d5:1f:e6:49:14:aa:d2:62:bf:65:04:1b:ec:
                    52:1a:f6:e0:65:59:db:16:a7:99:2f:05:95:31:d0:
                    75:8b:59:d5:dd:16:d9:2f:d4:f6:28:1b:35:f3:4a:
                    85:00:a7:82:65:8d:f1:c9:9b:60:2b:75:67:55:23:
                    db:b0:27:fa:ed:87:a4:c6:81:8f:d1:1e:de:36:c6:
                    66:c3:b6:37:a4:19:b9:03:ff:14:f6:5b:78:41:2f:
                    22:d8:5f:9b:74:ba:de:e5:fa:e3:0b:4f:2e:ae:8e:
                    ef:d4:97:62:65:80:fb:c1:29:7a:03:af:29:89:b8:
                    7a:5e:96:8c:49:2b:d3:95:21:f7:ce:b9:4b:d1:b0:
                    72:c9:ad:87:78:22:36:b4:ce:6b:99:d6:f3:53:b9:
                    f1:b9:04:a4:79:3e:c3:71:4a:8c:80:ba:55:bf:a4:
                    47:38:8e:a3:a8:81:bc:46:9a:94:96:54:d7:4d:91:
                    e9:24:18:bc:97:c9:e8:9d:02:66:28:c3:7f:1e:76:
                    33:70:d1:a1:43:02:c6:10:2a:56:1f:f1:54:6f:40:
                    39:eb:12:3e:0e:a5:c2:82:55:3f:8d:a1:79:f8:35:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:34:F7:B0:7E:FB:BB:57:A2:D4:FE:CF:3D:88:48:FC:81:CE:6E:15
            X509v3 Authority Key Identifier:
                keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:94:81:f9:ee:f6:e0:67:75:35:78:7e:6d:e8:86:da:d9:a7:
         fa:41:c2:37:ff:2a:54:5b:02:33:fa:ea:89:13:65:f4:6f:aa:
         e6:22:c5:df:6f:0f:27:7b:0d:c9:e2:73:f3:41:66:64:eb:47:
         af:f1:bb:8b:6e:e1:e5:9c:5a:6b:b3:49:68:51:ea:2d:d3:71:
         01:f1:dc:fc:80:ef:95:84:45:ef:77:ac:a3:ae:f5:88:09:99:
         07:e9:3e:bb:ef:03:da:2a:74:a6:f3:3a:d0:99:d0:52:9a:1f:
         63:43:00:66:03:46:d8:e8:48:00:0f:e5:9d:27:b6:cb:12:5c:
         a0:80:71:81:21:86:ba:43:75:97:86:36:02:f6:40:1b:8f:8d:
         0e:0a:3c:91:0f:15:79:2e:fd:1c:3b:a6:d8:4e:4e:cf:ab:9d:
         c0:2d:e8:77:49:9c:8e:fb:7a:45:0a:30:40:e2:c9:5d:8e:2d:
         14:5a:98:db:45:19:78:b1:79:f9:fc:67:e2:50:d0:a0:dc:6a:
         68:4b:85:1f:7e:54:d9:74:ca:ec:0f:f1:45:81:54:07:c6:e7:
         cc:70:e1:6b:eb:8a:7f:77:51:47:a5:3f:91:03:db:15:3e:ad:
         8a:4d:4d:b6:f6:6c:8c:24:aa:31:b1:a2:d3:23:43:2a:7b:5e:
         4c:33:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:54 2025 by rpki-client