Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          bBuicXAPaj+lWpLBV5DJjkTOxKywCJGVGEV71PlGvKs=
Subject key identifier:   F0:5C:BD:BB:52:42:4E:3C:BA:C9:42:B5:AC:D5:66:9B:FB:EB:0B:BC
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       019643D634E9AE353D8DB74FAE36AAC7ECFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0AE9
Signing time:             Thu 17 Apr 2025 13:00:33 +0000
Manifest this update:     Thu 17 Apr 2025 13:00:33 +0000
Manifest next update:     Fri 18 Apr 2025 13:00:33 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: 03YA4Ei8HHXw/1+FmEytxFhrIH6cFgb/nO9ZfehiFmw=)
                          2: YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa (hash: at6X5FWtDhfqKory2gk30h0rP9dNBcyxgRSPjmnHkpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:34:e9:ae:35:3d:8d:b7:4f:ae:36:aa:c7:ec:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: Apr 17 13:00:33 2025 GMT
            Not After : Apr 18 13:00:33 2025 GMT
        Subject: CN=f05cbdbb52424e3cbac942b5acd5669bfbeb0bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:98:c6:80:f1:4e:c3:5b:40:eb:dc:d1:de:
                    0d:61:0f:22:04:87:5b:e7:d6:12:ee:7d:8f:6c:6a:
                    82:2b:ca:e1:7e:f8:7a:46:44:e6:42:35:d9:a8:d5:
                    9d:01:a9:a6:18:5f:9f:68:55:60:42:ca:b3:29:c8:
                    c8:30:85:e9:9f:c4:51:2a:0e:b3:ac:21:39:25:b4:
                    b8:00:ae:aa:03:74:0b:99:7d:47:13:db:43:d6:4d:
                    a4:4a:b2:5d:5e:1a:c6:20:79:c0:fc:87:7a:dc:0a:
                    e3:ba:86:3e:32:6d:c3:f2:4e:dc:76:99:d0:30:49:
                    eb:b9:78:f8:a1:f7:6d:8b:cb:bc:b4:be:75:c1:16:
                    97:c2:cf:da:a3:00:d9:93:e3:97:18:ce:55:f4:e5:
                    f0:29:22:c0:b6:33:d9:15:48:f8:2d:f7:67:57:ce:
                    2d:cd:27:4c:24:50:8e:54:7f:70:a5:97:75:c0:70:
                    ce:4b:fa:11:91:bf:bd:0c:78:f2:69:9e:b2:cc:12:
                    28:d5:b3:06:96:c5:12:b6:04:44:66:ec:e3:69:46:
                    50:d6:05:15:dd:7f:f7:57:1d:45:1b:c9:24:6b:be:
                    bf:76:65:d0:30:e2:c9:3b:dc:1a:41:57:5f:3f:c2:
                    45:c8:b0:60:35:f7:96:eb:5d:c2:3a:23:83:21:1c:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:BD:BB:52:42:4E:3C:BA:C9:42:B5:AC:D5:66:9B:FB:EB:0B:BC
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:69:94:2e:63:fb:87:e9:b7:7d:7f:6f:bc:75:83:d6:04:49:
         d2:85:da:8c:da:3e:32:30:64:df:e0:12:f0:12:45:72:aa:95:
         e6:b0:45:9f:92:e0:a6:0d:07:bb:8c:ac:fe:76:06:a1:36:ef:
         33:ca:07:e0:cc:7e:e5:99:fd:61:46:97:28:af:13:6c:6f:ab:
         18:87:ca:e7:e3:3f:bf:44:45:0e:88:4b:f5:e9:af:16:87:2f:
         54:32:18:12:f5:3f:69:aa:74:46:fa:90:c0:9d:39:21:2f:15:
         98:f5:13:a7:35:b6:4c:46:48:76:f9:8c:c9:d0:53:46:43:6a:
         07:0d:de:1b:25:5f:af:94:e1:b5:23:77:52:67:3a:8e:00:65:
         df:5a:6b:56:84:d1:0c:45:fc:a3:27:a3:f0:4e:1b:b4:53:d1:
         fa:b3:05:d5:2c:e3:0f:05:13:1a:a3:42:58:3d:aa:32:ce:25:
         7f:23:aa:fc:6e:7b:85:59:82:97:69:7e:ba:52:f2:bc:96:d6:
         24:8b:67:b2:d2:8e:c1:40:5b:ad:ce:b3:34:86:e8:9d:81:6d:
         c3:17:78:c2:91:37:c7:20:05:06:2b:71:2c:ec:47:90:86:f8:
         57:d6:52:5a:7b:79:b1:3d:5d:8a:39:30:e7:e5:7d:de:3a:20:
         75:8b:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:20 2025 by rpki-client