Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File:                     7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier:          sdoOyE7fd4XD5s7s70IevcNIw5er0TYqs7ru3ZzUB3w=
Subject key identifier:   C8:98:91:17:80:E5:6A:FC:66:E7:C1:94:3B:34:71:57:47:37:F2:52
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       0196504803CBF6585B4C45F52CBA1B6EA987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 23:00:18 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:18 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:18 +0000
Files and hashes:         1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: nUViNPPZcoVHQK4B8icQi6u+1wELeRsreKZo7FpMVdc=)
                          2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:03:cb:f6:58:5b:4c:45:f5:2c:ba:1b:6e:a9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Apr 19 23:00:18 2025 GMT
            Not After : Apr 20 23:00:18 2025 GMT
        Subject: CN=c898911780e56afc66e7c1943b3471574737f252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:97:22:66:b0:57:3e:cd:5e:8b:86:3e:08:
                    2a:96:6d:0c:45:70:83:2e:2f:6a:97:8c:18:2d:54:
                    6f:6b:a7:10:81:c7:e6:ca:aa:79:51:67:51:a4:4b:
                    e9:63:98:4b:0a:f4:16:02:e5:8d:0b:63:94:6a:0f:
                    85:3d:67:ff:1a:d7:d4:a9:6a:d5:d8:6c:2b:0b:e3:
                    b6:a8:20:ff:5f:eb:6e:2b:57:18:7b:c6:0e:f0:3c:
                    c5:06:89:a0:a3:17:a6:f0:f7:d9:92:05:25:d9:17:
                    65:4a:23:58:25:ae:71:9c:96:ad:fa:1a:2d:43:53:
                    ad:41:e4:a0:1f:25:8a:3b:63:08:a9:cb:b3:b8:c1:
                    18:d3:41:13:6a:1c:23:04:ca:9b:8f:67:1e:27:3b:
                    35:8c:c1:41:30:2f:d2:ff:c4:b4:d6:48:69:0c:9e:
                    87:3a:d1:8a:84:cc:db:24:ca:a9:65:71:e6:5f:5d:
                    20:33:ad:dc:26:ef:c8:88:77:c3:70:8e:a6:b2:42:
                    89:af:50:3d:4c:80:db:f3:1e:d9:00:3b:7d:5f:c9:
                    ef:05:86:af:74:72:0a:9c:5c:59:4c:ee:6d:e2:75:
                    0a:56:c5:f4:68:78:cd:c9:46:42:fb:cd:fa:e7:05:
                    41:c6:cc:68:37:f7:b7:7a:fd:e0:0b:31:bb:c9:69:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:98:91:17:80:E5:6A:FC:66:E7:C1:94:3B:34:71:57:47:37:F2:52
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9d:63:db:ee:a3:84:8a:21:3d:67:95:be:af:96:e5:a6:b2:
         e7:d9:23:f4:e2:32:e2:d3:fb:67:ae:3a:de:4c:9d:2e:ac:9d:
         39:7c:13:6b:b7:f3:29:64:16:9d:32:89:18:ab:a7:70:c1:e6:
         a1:f4:59:4f:b2:73:60:34:18:b2:c2:66:ff:88:a9:8e:f0:1c:
         a6:28:07:a0:ce:65:57:c1:98:cb:19:3e:4f:72:5d:14:c9:c7:
         4a:10:de:fb:0a:55:dd:c4:35:f9:4c:c6:5d:e0:d0:c3:9c:3d:
         ba:f0:f8:5b:45:bc:d3:6b:0c:fe:df:28:06:02:87:6a:28:7d:
         81:fd:ae:0a:ff:b7:d8:9c:b0:eb:38:b6:91:63:68:78:ba:ee:
         1a:a5:0f:41:a9:9c:9d:3f:df:70:d4:f2:f8:9f:e2:d3:f5:98:
         36:bd:9d:97:de:7b:47:cd:19:5d:b0:c3:a4:20:ba:88:18:71:
         6f:99:22:e1:f2:45:ff:8e:f6:67:0d:ff:98:d2:51:91:94:7a:
         ec:30:de:e0:cd:a6:97:59:3c:59:86:51:34:59:36:ec:6b:f2:
         b6:21:92:a7:7c:70:f6:93:d0:e5:21:dc:4e:1e:64:5d:6a:e2:
         87:99:10:4b:7f:fb:d9:10:1f:72:ce:b0:8c:db:59:fd:fc:12:
         52:0b:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:10:15 2025 by rpki-client