Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
File:                     cyrf7tpQvgNppSvklRoJOWh0T2c.mft (raw, json)
Hash identifier:          JY76C/gKN/2szyFa0S+R2IoNdG6YjkZhR8e6ioBzxjE=
Subject key identifier:   33:9F:19:9E:3F:C6:70:97:C6:16:C2:03:EB:29:E6:90:DC:B8:EE:73
Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
Certificate issuer:       /CN=732adfeeda50be0369a52be4951a093968744f67
Certificate serial:       01958B4D486935CD6DFF82F177257B756D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
Manifest number:          1494
Signing time:             Wed 12 Mar 2025 17:00:52 +0000
Manifest this update:     Wed 12 Mar 2025 17:00:52 +0000
Manifest next update:     Thu 13 Mar 2025 17:00:52 +0000
Files and hashes:         1: cyrf7tpQvgNppSvklRoJOWh0T2c.crl (hash: 4iT4HCd+gT2PzrGV+paj5iRTX1OIfzk2kXL2y1h5Y7s=)
                          2: iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa (hash: LWKn33EIgWdLazFAzsPhYYYyYUHzgB/1rOhW1vxG50c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:48:69:35:cd:6d:ff:82:f1:77:25:7b:75:6d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732adfeeda50be0369a52be4951a093968744f67
        Validity
            Not Before: Mar 12 17:00:52 2025 GMT
            Not After : Mar 13 17:00:52 2025 GMT
        Subject: CN=339f199e3fc67097c616c203eb29e690dcb8ee73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:27:85:4b:6c:1a:f9:52:fc:ec:5e:7f:63:a4:
                    1c:41:69:6a:6d:8e:45:b9:55:22:13:f8:6c:bf:5a:
                    e2:76:22:81:a7:4d:3d:c8:a5:93:ab:17:97:a3:2b:
                    2e:10:23:d6:de:b9:39:67:b6:74:4f:48:ad:51:ba:
                    4e:35:a8:13:a3:38:da:35:d9:f8:0b:79:ac:63:13:
                    8c:b7:f6:f5:bf:8d:ba:54:ee:b2:f3:64:67:44:e3:
                    bd:1b:cb:2b:88:61:63:d6:6b:97:a1:83:4e:44:f5:
                    13:c5:8b:11:0e:d6:0d:d4:83:33:97:0c:ad:c5:09:
                    18:b8:2e:89:7f:d1:99:02:25:48:97:02:a7:c7:5c:
                    9e:3a:c2:70:ec:ef:bc:c2:b5:5e:cd:b2:c2:33:aa:
                    6f:3e:9b:36:28:b3:0d:21:77:17:4c:e0:01:94:52:
                    fd:d3:93:53:2c:47:1f:0b:9f:77:2e:71:b7:e7:43:
                    e9:ed:4e:9d:02:b4:04:d1:c5:9c:7f:1f:34:46:61:
                    00:60:d8:97:9d:86:02:71:a0:62:59:ee:56:1a:f5:
                    2b:38:59:95:10:fc:d5:b0:6b:78:2c:d7:89:7a:19:
                    95:87:01:e7:1c:89:79:93:e4:dd:97:a8:b2:82:24:
                    a9:58:b7:0a:12:f4:ac:e0:97:67:a3:9c:b3:71:c8:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:19:9E:3F:C6:70:97:C6:16:C2:03:EB:29:E6:90:DC:B8:EE:73
            X509v3 Authority Key Identifier:
                keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b1:f0:37:33:5a:20:94:f0:7d:49:71:fa:0f:d9:99:f9:98:
         d2:3a:0c:ea:45:0d:8b:9a:06:90:48:7b:04:28:49:4f:e4:63:
         cb:61:c8:68:94:06:f5:6d:f8:5b:98:ce:51:12:00:38:75:ee:
         f5:17:aa:41:39:90:a2:2b:46:08:b5:fc:71:ed:72:70:f0:6a:
         e6:a5:de:eb:2b:0b:c5:31:96:d1:cf:8b:ef:a8:5b:65:6b:ad:
         59:1d:90:7e:60:4a:69:6d:9b:51:fa:65:a4:85:e4:67:2e:cf:
         b4:e8:81:eb:62:28:bd:08:70:2e:47:f3:88:62:63:d6:30:55:
         9c:ac:27:fd:b3:10:59:e9:5c:27:66:61:a9:3e:60:93:47:c5:
         55:13:60:af:a5:e3:f6:40:b4:39:3e:3b:cb:2e:0b:da:b2:9a:
         6f:08:62:d8:6d:09:05:f5:a1:4e:23:48:a0:3f:d7:b1:53:20:
         33:9a:38:39:b0:f6:c7:d0:e3:1b:d4:bd:12:53:3f:03:53:05:
         85:16:bb:69:30:43:11:df:fd:ae:c2:60:bc:4a:27:b0:b5:ff:
         0b:a4:f9:f7:34:df:8c:ef:43:82:66:3a:cd:84:b7:5b:69:df:
         f1:a5:c8:0f:28:c6:b2:8e:65:1a:55:cc:19:20:fd:bf:66:78:
         5d:c0:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:07 2025 by rpki-client