Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File:                     ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier:          Es5iB//COqMfuDPuNGKiNGc4o1h7CbJfnWsMuY/ZP9o=
Subject key identifier:   77:1D:B4:25:D4:94:22:69:A0:F4:45:A3:0F:72:A2:3D:67:7C:15:6C
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer:       /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial:       019655A581E965E744EA1F234554C128A6E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number:          0D0C
Signing time:             Mon 21 Apr 2025 00:00:32 +0000
Manifest this update:     Mon 21 Apr 2025 00:00:32 +0000
Manifest next update:     Tue 22 Apr 2025 00:00:32 +0000
Files and hashes:         1: Z7fNj1YJ8aSn3r_MEyl5vIDYUPE.roa (hash: WsvnlIuXrT6wZCrahcudQBBAK43k6FKEOxnr2kwJ0Ew=)
                          2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: KNTxdXst9ZyS+8ngGRDamIq5awedtZF0EvVXKGOiPd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:a5:81:e9:65:e7:44:ea:1f:23:45:54:c1:28:a6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
        Validity
            Not Before: Apr 21 00:00:32 2025 GMT
            Not After : Apr 22 00:00:32 2025 GMT
        Subject: CN=771db425d4942269a0f445a30f72a23d677c156c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4c:16:bc:a2:56:4d:24:77:41:f2:38:ed:12:
                    c4:61:8c:1b:21:4b:bd:68:c0:66:a0:39:12:1e:95:
                    d4:9e:72:05:76:8e:df:85:e9:38:4b:4b:0c:ed:0e:
                    85:e5:bf:18:a1:ff:99:bc:ef:21:b7:4b:ec:5d:a9:
                    b3:a3:31:71:73:da:d7:26:be:6c:b9:f6:43:b7:ca:
                    08:d2:91:ee:41:ff:46:16:b2:a3:0f:16:55:c5:20:
                    08:2e:ce:5c:21:1b:e3:ea:e8:af:b8:80:07:e5:73:
                    c5:08:96:7a:4b:1f:60:5b:a2:d8:78:1c:89:a4:dd:
                    b8:58:41:aa:f6:e1:72:6c:72:ad:26:41:29:2a:1d:
                    35:93:8c:64:c0:63:48:96:17:83:ca:e8:72:e7:23:
                    1b:67:a3:4e:04:63:a9:ec:e8:1a:72:cd:7f:ed:ff:
                    34:be:c1:3a:32:a5:24:b5:fb:e0:c6:5f:77:3c:72:
                    9a:4d:0b:1f:9b:53:84:43:bc:2c:21:27:49:8c:e1:
                    fb:cb:4c:a5:20:62:a9:1c:be:83:76:73:74:64:c8:
                    03:6b:57:d4:f4:4e:7c:b3:bb:3f:bf:cd:42:ff:c7:
                    82:f2:a4:1a:fa:f7:62:52:40:5b:65:fd:86:01:91:
                    14:06:db:a8:e3:fe:18:0b:42:8b:2e:ff:eb:a9:86:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1D:B4:25:D4:94:22:69:A0:F4:45:A3:0F:72:A2:3D:67:7C:15:6C
            X509v3 Authority Key Identifier:
                keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:68:02:cb:a2:e9:e3:e2:dc:b2:af:b0:81:e6:92:4b:20:4f:
         51:e5:b8:ee:33:6d:75:f1:07:9c:51:08:3c:19:a9:9b:56:46:
         94:ea:c4:af:eb:13:b7:0c:46:fd:a1:6b:09:7d:b4:a5:79:bc:
         87:b5:41:d2:a4:6d:aa:57:9e:63:31:5d:7e:cc:0e:4d:2b:b3:
         6d:3c:fa:68:94:a7:9f:f2:3c:c0:bc:72:a1:d8:3a:e1:05:d3:
         55:25:c8:cb:2d:da:81:a5:b7:01:f4:07:9b:49:77:64:2d:84:
         ac:c7:60:c8:48:4c:fc:3d:47:12:63:4f:74:f3:da:78:df:1a:
         e4:89:cc:a7:df:a3:25:2a:c2:63:b7:0e:5c:1e:b5:c7:9a:ed:
         87:fc:6d:cf:55:a1:37:99:e8:53:c7:5b:20:e3:78:1d:73:e6:
         b9:e4:52:5c:6a:70:c0:2b:6d:08:09:ea:37:3e:b5:4a:ee:b6:
         f4:68:3d:d0:4e:f3:c2:7e:ad:44:ea:83:6f:ef:3d:ce:aa:57:
         91:79:66:ac:d7:b5:22:92:5b:45:91:14:e3:54:1b:d9:c9:c6:
         3f:af:c9:9f:df:65:68:4a:33:d8:ad:c1:35:1c:eb:a4:bf:b1:
         2a:c3:34:b2:8a:3d:26:de:60:9d:b4:8e:c9:6e:27:f4:e3:8a:
         d9:5c:56:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:21 2025 by rpki-client