Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File:                     7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier:          msl/AQrdrrCwJULXtf7o3IkntwP3O755hGcIE7Md6go=
Subject key identifier:   52:F6:7F:C3:BE:4F:CC:B9:F9:45:34:6D:88:F4:AD:DC:93:90:D0:C2
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer:       /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial:       019645C5666E801F2F7DB79E6AAE3915F2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number:          0A8F
Signing time:             Thu 17 Apr 2025 22:01:26 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:26 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:26 +0000
Files and hashes:         1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: pe6VDXdcBmUYVI8EU6Vm2u+zwsZa0MOaPaglZENObxw=)
                          2: Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa (hash: 5FSjbaTtR9k8SDOj/2LjE1uuErnl+zHIrGSKMQg96EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 22:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:66:6e:80:1f:2f:7d:b7:9e:6a:ae:39:15:f2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
        Validity
            Not Before: Apr 17 22:01:26 2025 GMT
            Not After : Apr 18 22:01:26 2025 GMT
        Subject: CN=52f67fc3be4fccb9f945346d88f4addc9390d0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:fb:37:fd:71:e2:ba:51:69:b0:4b:93:3d:
                    9f:78:61:d3:e5:80:fa:37:df:03:2c:8a:ee:63:d8:
                    2f:ac:74:03:4c:54:b0:14:38:19:59:b5:2f:d3:14:
                    f1:0f:aa:4a:0a:a0:6f:a3:39:72:99:6d:a0:7b:48:
                    b6:c4:0c:f4:34:85:11:6f:2d:76:e5:08:5e:a3:a9:
                    eb:a4:1e:87:6e:b8:cb:8f:f3:b7:9c:5e:7e:21:7f:
                    84:29:43:a3:48:4e:2d:eb:f2:73:38:3e:03:04:ae:
                    8a:5e:0d:c6:6d:ea:a4:4d:86:25:c4:4b:41:d8:be:
                    77:cb:a4:06:fd:cc:b5:10:c0:f8:15:38:cf:e1:ec:
                    a9:b8:c6:fe:46:51:c3:dc:45:bc:1f:53:97:c8:b0:
                    b0:07:b7:a3:e4:83:4c:8d:4d:c2:f2:b5:7b:39:c5:
                    f7:c1:16:72:46:aa:c2:2a:dc:4a:eb:1e:e4:11:c4:
                    fe:23:83:41:a1:21:1a:2b:a0:4d:e9:54:4e:38:26:
                    aa:3f:c6:57:3f:8a:57:3c:94:21:3a:a2:b1:81:f9:
                    8b:0c:59:e7:86:4d:88:75:1f:02:f3:bc:88:28:f0:
                    1d:b5:87:6d:23:68:04:2a:e6:06:e1:73:1c:7c:04:
                    51:6e:87:95:d4:8c:7f:03:60:0a:7d:7a:69:a0:8a:
                    1a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F6:7F:C3:BE:4F:CC:B9:F9:45:34:6D:88:F4:AD:DC:93:90:D0:C2
            X509v3 Authority Key Identifier:
                keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:7d:8e:8c:fd:dc:9f:3b:34:cc:dd:de:91:a2:58:f9:25:
         40:14:35:6f:a6:7d:87:f8:ca:aa:e5:38:ec:e7:df:38:aa:95:
         e5:4a:3a:1d:2f:67:be:8a:08:37:7a:85:58:de:8c:5a:4e:92:
         ad:a6:55:b7:be:80:a1:31:af:6f:d2:01:d3:9a:d4:1a:4b:05:
         f8:05:f5:13:05:fb:95:36:35:a5:4c:b5:e5:99:c7:09:59:21:
         68:c5:9d:01:cc:e0:76:7b:e9:6f:81:2a:10:97:ea:6b:44:79:
         03:49:1b:32:52:6a:67:8a:95:c8:14:ff:32:fa:f2:a0:2a:96:
         1b:80:c6:e0:14:64:16:f1:c5:2a:f6:ef:76:36:5b:bc:5f:6d:
         46:43:7a:49:23:5a:7f:d4:72:14:0e:52:e3:21:f5:1c:f7:d0:
         5e:3b:90:03:9f:32:ca:7f:8c:d4:a1:9e:c1:3f:23:cd:d9:9d:
         58:6c:01:28:09:0c:07:bf:54:e4:84:aa:b3:a7:21:65:c8:37:
         95:e7:8a:d0:06:dc:21:ee:63:84:da:33:a7:19:28:c1:d4:a5:
         98:28:a0:43:d2:57:2c:93:06:76:52:fa:e7:5b:e1:c3:e8:59:
         8f:bd:92:39:e1:98:58:d1:b6:4e:20:0f:35:89:10:58:31:d3:
         6c:e1:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:17 2025 by rpki-client