Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
File:                     7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json)
Hash identifier:          WLf09baRNPsOEG7JnpgYJUVzI2iohNO2gidXjop1JaQ=
Subject key identifier:   B5:AF:82:53:74:94:A2:0C:99:6F:BD:45:96:BE:5A:D3:F5:FE:F6:99
Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E
Certificate issuer:       /CN=edc15f6558462408a75753765b2c71a654f1676e
Certificate serial:       019652A4E870EF518C490790D969D041D792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
Manifest number:          123B
Signing time:             Sun 20 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 20 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 21 Apr 2025 10:01:01 +0000
Files and hashes:         1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: ahCK4MKQ73qp5S6z+JPks42Zc0B+9bO2w1PqssxrSJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:e8:70:ef:51:8c:49:07:90:d9:69:d0:41:d7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e
        Validity
            Not Before: Apr 20 10:01:01 2025 GMT
            Not After : Apr 21 10:01:01 2025 GMT
        Subject: CN=b5af82537494a20c996fbd4596be5ad3f5fef699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:8b:c0:a9:f8:1d:c0:68:67:1e:4c:16:6e:
                    3b:16:db:25:b8:0a:71:c8:98:38:17:ae:4f:89:07:
                    30:67:3e:e1:88:66:f1:7f:87:51:5d:d5:08:f9:a8:
                    d2:23:54:4a:9a:74:25:61:1e:b0:be:14:50:80:38:
                    0c:db:a3:68:c3:39:7a:fa:55:25:ca:7b:ba:12:86:
                    4b:6c:ea:ad:69:09:0e:7a:b0:dc:7a:5e:93:29:16:
                    20:69:23:08:11:5d:7c:9f:a9:40:10:eb:2d:6e:30:
                    3d:5d:6d:7b:4d:42:4e:61:06:ff:38:e0:8e:16:46:
                    5f:f0:ce:8c:e7:b6:0f:e9:7c:dd:15:0e:8d:46:de:
                    5b:c3:23:26:0f:00:9d:6e:37:ec:b3:74:56:03:70:
                    1c:4b:6a:1d:b0:01:e2:39:36:27:66:89:47:16:b9:
                    42:34:a8:3f:31:47:0f:ce:81:f8:ac:a6:e8:2d:ff:
                    de:37:24:f7:65:a2:a1:b2:c5:7e:a2:7f:c3:78:04:
                    14:b7:ae:af:ef:af:56:0b:f1:d2:5d:21:e3:e3:27:
                    67:26:0e:12:fc:bf:3e:8c:9f:08:9f:9f:56:20:bd:
                    0e:ec:42:5e:a3:8d:8f:dd:49:d9:f5:d0:f4:66:76:
                    ae:1b:94:d2:92:db:f0:66:2e:66:ed:b2:4e:09:a4:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AF:82:53:74:94:A2:0C:99:6F:BD:45:96:BE:5A:D3:F5:FE:F6:99
            X509v3 Authority Key Identifier:
                keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:21:b6:1e:3e:68:64:f6:20:c5:21:05:26:ee:bf:f0:86:76:
         59:02:7f:c9:81:78:de:88:3a:0f:93:c1:dd:0c:ce:20:06:29:
         e0:14:ee:ab:ba:24:fb:48:74:ce:32:63:ef:3a:e0:cc:71:ea:
         7d:4b:ab:22:f2:93:68:79:d7:9f:2f:19:6f:7c:1b:a5:6f:b0:
         b7:49:f0:15:31:b8:b0:8b:13:76:f6:31:57:75:72:38:aa:45:
         5e:5d:c8:5b:7f:f9:f4:41:56:68:76:86:39:3d:bf:7a:5f:08:
         40:a6:8a:3f:00:ec:d5:bd:0f:9a:15:0f:08:1a:2e:63:bd:3f:
         79:2b:94:90:08:d3:5e:30:8b:c0:45:65:60:4c:7a:65:d3:07:
         b7:18:53:dd:66:71:54:13:4e:0d:60:d7:55:6b:79:f8:26:b8:
         c6:80:9c:da:8f:10:4c:1a:28:7e:5c:82:65:de:99:ff:00:8a:
         5b:57:53:15:76:57:41:51:71:35:d2:b7:32:d8:6f:51:83:f5:
         f7:02:ea:b2:58:ce:38:fa:2a:f9:69:65:07:bf:9d:f0:28:f3:
         1a:2b:94:ca:4e:bb:95:8f:e5:9f:86:01:85:e0:c9:9c:69:e0:
         d8:e5:d2:8f:b9:44:88:f1:30:61:e1:7d:15:d9:32:ac:2b:4d:
         87:91:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:27:14 2025 by rpki-client