Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File:                     m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier:          NGhplG1dnDzL0nzpyTVUvY385CHTasNsts9y9mpe0ro=
Subject key identifier:   E2:4B:A1:26:06:FE:CB:72:A2:3A:44:A5:C3:98:84:7F:18:1D:2E:8A
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer:       /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial:       019650489CB7129D8A4874BB8536D9E00D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number:          0B7C
Signing time:             Sat 19 Apr 2025 23:00:57 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:57 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:57 +0000
Files and hashes:         1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
                          2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: 19tvOEmTq4A1CpsLtstMwI0fNFc1SzX2dt2V8Sg5q5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:9c:b7:12:9d:8a:48:74:bb:85:36:d9:e0:0d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
        Validity
            Not Before: Apr 19 23:00:57 2025 GMT
            Not After : Apr 20 23:00:57 2025 GMT
        Subject: CN=e24ba12606fecb72a23a44a5c398847f181d2e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:6d:27:45:8a:66:1e:7d:62:37:27:3c:18:
                    1f:00:d2:60:91:8f:c3:b8:fe:3a:59:c7:e9:cc:e2:
                    68:9c:7e:06:0e:21:34:89:4b:65:61:43:98:e3:4f:
                    a8:c6:b9:19:d3:f7:1d:66:96:fa:97:45:e4:4c:3e:
                    e1:0d:c7:51:ac:75:25:38:74:06:5d:44:20:90:6f:
                    fd:1a:b2:b9:b4:1e:a0:0a:de:9e:e1:69:9a:d6:af:
                    99:43:8d:be:1f:e8:ff:cf:d1:3d:5c:0f:87:c5:b9:
                    60:34:5d:e8:79:48:7b:6e:ec:14:8e:41:ca:d6:3b:
                    fe:36:7d:f4:78:68:d8:ac:a6:2b:0d:f3:c7:1a:b6:
                    79:82:cf:d0:50:71:6f:91:11:a3:87:9f:7d:98:73:
                    49:be:74:65:f1:f6:5b:9b:74:7c:47:d8:ce:38:9b:
                    b0:14:c8:a0:59:1a:51:31:a3:56:75:2f:fe:3f:b9:
                    d0:6f:02:3d:f8:cb:0d:17:34:88:fb:d1:e5:a7:be:
                    e1:df:3b:bb:62:1e:c6:fb:a3:b1:78:28:fb:81:fd:
                    31:8d:34:45:26:f2:4b:b7:67:8f:ac:cf:17:ff:83:
                    7b:9f:1f:3b:c4:e5:12:d1:f9:c2:05:44:ac:bb:1b:
                    9f:53:a2:15:55:19:4b:32:7a:1a:41:18:f8:0e:37:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4B:A1:26:06:FE:CB:72:A2:3A:44:A5:C3:98:84:7F:18:1D:2E:8A
            X509v3 Authority Key Identifier:
                keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:86:91:a7:3b:51:ef:a9:80:16:18:d5:a2:e5:80:13:56:21:
         bd:08:58:b5:3e:19:88:71:6a:09:37:95:1c:1e:bc:1b:ea:22:
         9b:8a:6c:63:58:1f:0a:2c:12:ed:76:dd:49:66:60:9a:5f:3a:
         cf:eb:6c:9c:b0:64:80:70:0f:ba:af:c5:f3:1c:e9:45:6e:70:
         89:db:b1:cb:1a:6d:db:76:15:b5:45:ef:7d:5c:76:58:ec:15:
         85:43:2f:7b:62:b0:44:89:c7:d3:ce:ae:38:f4:8f:47:af:06:
         9e:df:dd:13:74:ae:8e:e8:8d:15:fd:46:88:5e:8a:c5:7a:4e:
         77:e9:2b:39:27:2f:49:95:cd:d2:e9:d0:50:83:30:5b:5b:34:
         9f:be:b8:83:24:cc:03:66:b2:80:b7:c9:a4:59:4f:b7:9c:28:
         ee:4c:fb:af:e2:07:f4:29:26:f1:f0:60:1d:a6:a6:ea:cd:1f:
         c2:9c:a8:1b:72:af:a7:59:03:57:79:5d:a7:48:5e:79:32:71:
         ce:29:79:d9:6e:78:bc:0e:eb:18:8b:25:1e:28:45:cc:0a:a0:
         24:15:a8:e0:af:bf:c0:7b:18:1e:64:15:8d:e5:ea:dd:aa:72:
         cf:e6:3f:be:6f:d2:82:6f:6b:bb:d7:33:17:f4:33:96:86:a5:
         96:04:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:09 2025 by rpki-client