Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          yMa2Vv824v/d5HDokdnIAmUUP3j+a4BGG8lBLr71Wac=
Subject key identifier:   90:7C:BA:92:F7:23:7D:5E:45:DF:3E:9D:18:C2:1B:41:E2:C8:55:07
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       0196545C45CD8E65772FC3529363800E8235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          0515
Signing time:             Sun 20 Apr 2025 18:00:55 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:55 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:55 +0000
Files and hashes:         1: 0Mvhcy66vg_hQj0H0BjuRhN8AEw.roa (hash: rLSJr6X2QsQeqUnzUxdyly3b6MStAcI5bnu/3/yjEXo=)
                          2: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: 1qWj/y+CTiz3aJ5RFitlTIv6DsKU8Vi2w/gfT/ileQQ=)
                          3: K-BqbESSRx3Yj4firy2GiSJYedk.roa (hash: ztU8/cjCw1EzlWd4zVd+Pf6WeSXNXfqcpp3+tX5nZDE=)
                          4: fRQm9txJEG9J9ZmTTymAf6TeYIA.roa (hash: w+UnfOFY87SloUZFNx3EhChlSsZ+Do6/267GREfdW2g=)
                          5: icJdEYHRoQ8a2HsX6tAswYTYm1I.roa (hash: yVJLCj9xlz6tDxLUrnxZtc8J67boCW3htMxhNuv+eUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:45:cd:8e:65:77:2f:c3:52:93:63:80:0e:82:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Apr 20 18:00:55 2025 GMT
            Not After : Apr 21 18:00:55 2025 GMT
        Subject: CN=907cba92f7237d5e45df3e9d18c21b41e2c85507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:19:3e:fb:8b:b2:d7:10:03:cb:25:4d:69:
                    bf:7e:cc:c6:04:e0:ce:b3:36:00:4e:47:ff:d3:48:
                    d1:a6:d3:25:37:85:6d:46:e9:f5:1f:5d:b8:8c:52:
                    26:95:11:bb:e1:17:f2:fd:54:07:a1:c9:e1:8a:de:
                    95:60:ef:78:f0:b5:78:e7:c1:1c:37:94:5e:04:00:
                    bf:2b:c9:08:02:7d:63:ee:dc:88:d4:9a:d0:67:f8:
                    25:a7:03:1f:ec:bf:a1:f2:08:f2:a6:fa:48:11:f6:
                    df:83:7f:36:36:a2:01:a8:69:91:2f:8b:e5:0d:bc:
                    bb:82:a4:55:aa:da:91:0b:91:cb:15:b9:38:87:d2:
                    ea:95:60:d0:86:90:8d:59:9f:87:05:7d:03:b1:6c:
                    3e:d8:6b:c9:0b:c0:5f:41:5a:d6:bc:29:bd:b6:06:
                    01:26:90:de:55:7e:e7:ac:d9:d0:14:70:23:8b:c6:
                    b5:1c:c0:55:47:4c:49:e3:02:4f:60:dc:79:ea:0d:
                    fc:f7:17:10:3d:06:5b:15:69:b0:84:df:a5:47:cd:
                    37:b1:9c:cc:0c:a1:86:1e:71:0a:90:ed:07:c6:11:
                    e3:ff:8f:b4:fd:62:7f:94:ec:14:02:88:ce:11:e5:
                    11:f4:6b:4d:85:97:e8:e3:10:d6:fe:d5:cd:4e:ed:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7C:BA:92:F7:23:7D:5E:45:DF:3E:9D:18:C2:1B:41:E2:C8:55:07
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:00:a9:f0:6c:d2:8c:b5:60:d2:8c:45:ef:05:9a:b2:d7:
         d4:15:2b:75:11:f2:0f:e8:04:40:5c:3e:93:57:6f:8f:e4:ea:
         75:3f:2b:a9:6d:95:1c:2d:e4:c3:1b:ee:11:d0:7e:2b:ec:16:
         7b:4b:0b:3e:6c:19:2d:f7:3f:b9:b8:c4:0e:a4:aa:06:ae:3d:
         d0:97:62:2c:9d:95:14:67:d8:3d:da:e5:03:87:bd:d1:02:72:
         11:90:ea:01:99:d2:47:e3:00:18:8a:15:3d:92:9f:12:e5:c7:
         62:2c:93:38:1a:3a:1c:6a:3b:93:12:17:79:c0:87:96:f0:85:
         81:e7:4c:eb:a2:f2:62:96:a9:5b:05:e7:80:00:2a:8e:5f:d3:
         43:bd:ee:1c:6c:5b:e1:84:0a:6a:fc:61:d5:12:8d:17:2d:6e:
         6b:af:15:93:e0:a3:44:56:4c:c9:7d:a8:57:72:34:d0:83:52:
         15:b7:6a:f8:91:2a:6a:55:65:d8:6c:e9:0d:ec:ce:95:ab:04:
         81:c0:34:8c:13:1e:f4:83:d4:01:12:e3:0c:70:60:4c:10:20:
         b6:9b:ef:04:57:c0:54:ff:95:bb:a4:d6:56:19:cc:88:42:5d:
         1e:e7:c2:cd:4c:b1:5a:8a:25:70:60:bc:9b:18:45:0a:80:c8:
         f3:d3:24:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:10:59 2025 by rpki-client