Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File:                     7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier:          9Krxo7g6lLxsTKHnfxXOAWvBFPL6W7F3zZD9zTzSRmA=
Subject key identifier:   F7:FE:3E:65:65:B5:D5:CB:60:95:A1:32:B8:02:27:EC:71:B7:F9:E1
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer:       /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial:       019510FE3400CA6D0C0767F3DFC59A6E27C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number:          0E7D
Signing time:             Sun 16 Feb 2025 23:00:49 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:49 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:49 +0000
Files and hashes:         1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: 7NVJs6bMfQwaAhAnMqGFZ48P+mWsN4wUT9GCq2zJ2zc=)
                          2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
                          3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:34:00:ca:6d:0c:07:67:f3:df:c5:9a:6e:27:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
        Validity
            Not Before: Feb 16 23:00:49 2025 GMT
            Not After : Feb 17 23:00:49 2025 GMT
        Subject: CN=f7fe3e6565b5d5cb6095a132b80227ec71b7f9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:cf:f1:ba:de:eb:d7:e6:3f:9b:0a:a2:fd:
                    56:5b:9b:6a:7e:bf:b6:c8:00:92:23:b7:8e:95:97:
                    7c:7f:01:24:de:3f:58:14:79:2d:21:d1:ee:e5:03:
                    40:0d:44:97:7a:7c:53:7e:d0:c2:4d:bb:14:c2:57:
                    19:ab:ed:85:86:03:74:a6:46:72:8a:14:b1:af:b0:
                    2d:b3:59:05:d4:c7:ee:b1:d5:16:75:8c:e4:e1:ff:
                    3e:cd:04:33:9d:f0:d3:1f:97:28:37:dc:12:97:0d:
                    1f:9b:e1:ed:e3:32:6b:7e:61:a3:34:64:f5:db:be:
                    01:f6:3b:d8:2a:8d:14:36:cb:77:96:1c:2e:a2:db:
                    08:ad:d8:b0:56:b7:c4:57:cd:e0:de:d0:bc:28:17:
                    e3:56:f6:a0:cc:5a:e1:1c:39:ce:45:f6:84:2c:03:
                    0e:07:1d:c4:b7:c2:62:85:f1:a4:f2:65:4b:3b:f5:
                    04:d5:04:43:ab:11:1b:43:9c:e2:9f:92:40:7a:23:
                    bb:d0:b9:b3:ed:73:14:00:b7:34:83:f3:81:22:63:
                    f1:1c:a7:47:b4:9d:41:5c:86:49:a1:2e:db:b0:70:
                    98:99:48:d9:20:a3:29:8c:1f:65:a5:9c:a9:24:a0:
                    3e:ec:1b:e8:54:67:09:c4:25:54:45:e8:26:6a:5d:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FE:3E:65:65:B5:D5:CB:60:95:A1:32:B8:02:27:EC:71:B7:F9:E1
            X509v3 Authority Key Identifier:
                keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:99:66:78:e1:85:49:f0:f7:e8:48:90:ed:35:99:d9:cf:34:
         c9:99:f5:8d:b3:4c:fd:1e:b4:81:1b:23:88:8c:b2:b7:db:86:
         1b:b2:f1:42:f8:67:7c:5a:ad:21:17:ee:15:2a:09:56:b1:2b:
         1c:b4:ce:6a:ad:b2:cc:b9:21:2f:f7:dc:15:e5:34:2e:18:8a:
         ad:6b:ac:1f:2f:17:75:7f:50:26:8a:90:ad:70:42:36:8b:4c:
         c1:be:4f:cb:63:76:b5:7d:17:85:6a:70:3d:e2:05:02:34:26:
         f3:23:8c:04:3f:af:be:7c:40:93:ec:65:78:5b:10:2d:6d:5e:
         74:6f:65:76:7a:0f:f6:15:7a:3e:50:8b:d7:c5:06:cb:04:48:
         eb:2e:7f:8f:1e:81:3d:df:a9:0a:db:2e:d0:86:f9:d4:02:93:
         23:c5:93:a4:fd:a0:6c:9b:17:4e:cc:5c:1e:ad:b8:57:1f:65:
         df:93:03:e2:a0:38:86:5d:f6:bf:62:be:23:46:e8:4e:9d:8a:
         50:0a:ac:2d:ad:18:da:8b:ee:bd:4f:0e:81:af:ac:00:d6:e1:
         7a:56:b5:72:32:bf:4e:11:b4:7a:58:ba:59:20:49:8d:54:04:
         ed:1d:82:0f:3b:da:2b:2c:92:09:5d:32:a5:e4:9c:1e:d5:46:
         f3:e4:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:21 2025 by rpki-client