Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File:                     7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier:          EZlPUpzhzfw8mVJKjHPqQOstLTaWfhLY6DU5OGojCGg=
Subject key identifier:   D3:EE:47:7B:0C:3C:CA:38:87:09:F6:BA:BC:8A:F2:9E:7D:91:4D:8C
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer:       /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial:       01964D7DF968593E3A058AB9D9E036321CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number:          03B1
Signing time:             Sat 19 Apr 2025 10:00:23 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:23 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:23 +0000
Files and hashes:         1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: ueSK4Tki2jTuVpkY7UQwyZnuMCr4uN82T3uTH+iPQXk=)
                          2: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
                          3: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (hash: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7d:f9:68:59:3e:3a:05:8a:b9:d9:e0:36:32:1c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
        Validity
            Not Before: Apr 19 10:00:23 2025 GMT
            Not After : Apr 20 10:00:23 2025 GMT
        Subject: CN=d3ee477b0c3cca388709f6babc8af29e7d914d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:98:d5:1f:75:24:ad:f5:c2:6b:11:5c:98:5a:
                    b9:6f:ef:2c:9e:0f:1a:04:d6:ac:f0:51:d5:8f:90:
                    b9:f4:ec:b0:e8:25:c9:c4:08:f2:73:3d:ad:9c:1c:
                    73:0c:fe:81:3a:32:99:e4:53:ec:9e:21:8a:a2:a9:
                    cc:d4:ed:a9:ff:33:09:12:48:83:b4:ba:dc:91:8b:
                    a4:ba:ec:c0:48:4b:25:67:bb:e7:e3:49:a2:9b:36:
                    e5:ba:f3:d4:36:38:b6:42:31:ae:e9:86:03:45:4c:
                    91:0b:22:5f:3f:71:51:4c:02:5e:74:e3:cc:47:e6:
                    5d:b5:1f:8b:d6:c1:1b:0a:77:30:0e:e9:24:05:0b:
                    16:37:a4:b2:c4:66:d5:26:c0:8e:ed:a3:ac:00:0c:
                    d0:b1:e7:79:f7:92:93:e7:98:07:29:19:3c:8d:1d:
                    de:21:f9:48:69:79:00:5f:8d:a9:61:02:10:8a:29:
                    9a:6c:ed:01:14:69:0b:1d:e0:db:d5:53:54:ef:93:
                    ba:e0:c6:0d:a5:8b:fc:c9:90:cc:bb:d6:ca:02:72:
                    75:7f:9f:59:6d:66:c5:93:ca:e7:64:b1:f8:5a:32:
                    05:bd:af:ba:ac:e4:a5:94:ea:de:00:69:e8:25:47:
                    34:c3:ee:d4:df:26:b3:2c:74:a6:3a:2c:86:a1:e2:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EE:47:7B:0C:3C:CA:38:87:09:F6:BA:BC:8A:F2:9E:7D:91:4D:8C
            X509v3 Authority Key Identifier:
                keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:50:2c:a9:50:2d:18:4d:f5:07:af:f4:15:29:9d:c1:5a:07:
         00:13:f8:f0:6b:da:7b:d2:fb:77:06:25:5d:b1:55:40:b1:bc:
         f1:56:a7:d8:80:7d:4b:c3:fc:a7:c9:58:5c:48:1d:8b:93:d7:
         bd:2e:a6:c3:92:3c:84:6f:5b:0b:33:7d:a6:5d:87:35:ea:2e:
         c0:dd:5a:47:c6:8e:10:b7:d0:e3:1f:43:a2:67:fb:a8:db:54:
         f7:99:78:ed:10:5e:86:7d:08:fe:64:ef:c1:9e:75:e0:9b:08:
         76:d4:6c:27:1d:e1:82:ec:28:67:ee:f5:3b:cb:82:2d:74:df:
         d6:97:a9:5b:cc:37:13:6c:4e:d1:76:63:2e:01:41:3b:d1:7e:
         25:85:f6:b6:97:5f:75:30:a1:86:d2:b3:52:43:9b:b1:bc:e0:
         ac:99:72:e8:ff:61:92:0f:e9:44:9f:07:88:13:91:4d:6b:2d:
         ba:78:b6:04:82:85:b6:53:8c:c3:4a:a0:4c:68:91:89:63:3e:
         4e:fe:48:db:86:b6:7c:bb:3e:ec:4d:cb:47:1a:46:ba:d1:05:
         09:7d:60:62:bf:41:cf:c1:69:c7:85:f3:2d:06:82:65:98:0b:
         99:7e:fb:31:1d:37:03:d2:cc:4d:f5:43:fd:89:98:0b:bb:96:
         de:a3:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:02:56 2025 by rpki-client