Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File:                     7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier:          hFZCztvEUEohN1nC+OlSEEHuWnqGVFt095jw2Ph8OHM=
Subject key identifier:   17:1E:75:55:A7:0B:57:99:0C:89:EC:D5:C9:E3:31:6A:C4:A2:56:E4
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer:       /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial:       01963CF88888D4BB163E8F4A642C7CAD6739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number:          08FF
Signing time:             Wed 16 Apr 2025 05:00:42 +0000
Manifest this update:     Wed 16 Apr 2025 05:00:42 +0000
Manifest next update:     Thu 17 Apr 2025 05:00:42 +0000
Files and hashes:         1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: mCz9+o+7+NbNgxDbs1xJpYUxC81S0TDFlPgvIbUGBLw=)
                          2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:f8:88:88:d4:bb:16:3e:8f:4a:64:2c:7c:ad:67:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
        Validity
            Not Before: Apr 16 05:00:42 2025 GMT
            Not After : Apr 17 05:00:42 2025 GMT
        Subject: CN=171e7555a70b57990c89ecd5c9e3316ac4a256e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:fd:b3:ea:2e:1f:cc:b1:d2:93:c3:d5:a6:
                    9f:cf:7b:9e:af:f9:8a:e9:7e:52:5a:14:86:23:dc:
                    d3:b6:04:3f:a2:11:8c:58:e7:90:e2:31:1b:be:b2:
                    d0:07:43:2c:f2:b0:50:fd:de:29:c2:51:76:82:5e:
                    52:01:f8:68:a6:cd:2c:28:b5:ac:3f:e4:4a:74:c9:
                    c8:2e:38:c3:09:39:57:9d:d6:a5:d2:ae:eb:8e:05:
                    04:26:bd:da:cf:da:d5:af:06:92:c6:96:8f:ac:92:
                    23:c1:c1:67:1e:65:3b:9f:3e:74:0f:88:21:32:74:
                    0e:7f:59:e3:96:2a:4c:dd:36:9a:75:77:bd:b5:f7:
                    c0:7c:99:83:61:bc:1b:03:cd:de:9b:96:d3:14:12:
                    1c:9b:35:c5:70:d6:80:59:20:45:47:68:5c:e2:2d:
                    68:40:48:69:32:63:d4:80:fb:04:9e:38:70:25:06:
                    2e:2c:2a:50:e4:fd:1b:a6:53:81:0f:f1:97:76:28:
                    ba:c1:97:17:f6:24:ad:da:ed:1a:7a:42:56:c0:61:
                    a6:41:57:bb:d3:45:78:4c:89:80:6d:00:b0:b5:f7:
                    03:19:33:02:8b:e1:8e:3e:e7:f8:d7:c2:40:49:55:
                    e5:57:0f:c4:87:92:05:4c:df:b0:79:67:e8:18:b8:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1E:75:55:A7:0B:57:99:0C:89:EC:D5:C9:E3:31:6A:C4:A2:56:E4
            X509v3 Authority Key Identifier:
                keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:20:85:7d:36:ad:f8:27:d3:12:1a:24:b6:bc:d9:ec:75:98:
         db:24:5e:ad:6b:13:ec:1a:e7:e1:4e:01:ec:a2:ff:61:f3:56:
         46:b5:ec:9b:87:6f:28:c9:68:33:13:bd:00:cd:ce:eb:e8:e8:
         21:f8:58:67:e3:92:7c:4d:a0:4c:3c:a7:04:08:91:bf:eb:23:
         f7:96:20:4f:fc:4a:dc:13:cb:b9:ee:a1:fd:15:9e:f9:3d:8c:
         ec:9e:41:1c:c2:5d:44:6e:9c:73:7d:01:e2:86:5b:76:c2:ac:
         b2:ea:94:36:92:44:b8:c4:1b:bd:32:f7:d9:91:18:fe:c6:21:
         fa:7d:bd:10:13:ca:c9:b2:62:06:93:94:c5:f3:70:96:a4:18:
         24:b9:46:f1:ac:fe:a3:e7:7b:34:8a:f2:cb:0c:b2:f3:40:af:
         5b:ba:4d:1c:77:cd:bd:25:f7:3d:46:63:c5:e2:af:5c:e0:21:
         ae:4d:1d:81:75:ca:16:fa:1a:43:6e:2c:ba:5d:9c:5c:0b:2a:
         4b:9c:22:1b:b8:13:51:24:fc:23:1a:c6:37:d0:de:20:20:65:
         93:98:a1:31:da:21:97:06:1c:ff:41:23:a4:a9:ac:92:38:b2:
         7c:3d:3b:36:16:30:9b:3c:bb:74:a7:e8:69:74:c3:c3:1b:86:
         c8:9f:18:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:50:24 2025 by rpki-client