Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
File:                     8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json)
Hash identifier:          JL0+USHL1bN9OPRIjAoNEMhOI3cBe2oqVrBkY1ypxM8=
Subject key identifier:   6E:DB:FE:32:CF:A5:94:84:54:B1:95:9E:5C:B5:E6:52:9A:3C:CA:84
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Certificate issuer:       /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial:       019656138BAE03E9654DE10DB2F5740DA2BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
Manifest number:          14FF
Signing time:             Mon 21 Apr 2025 02:00:43 +0000
Manifest this update:     Mon 21 Apr 2025 02:00:43 +0000
Manifest next update:     Tue 22 Apr 2025 02:00:43 +0000
Files and hashes:         1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: hXvF0XlCdum8m/mVdIbFh3BmYC9jvFz+GD0eoH/E/5s=)
                          2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:13:8b:ae:03:e9:65:4d:e1:0d:b2:f5:74:0d:a2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
        Validity
            Not Before: Apr 21 02:00:43 2025 GMT
            Not After : Apr 22 02:00:43 2025 GMT
        Subject: CN=6edbfe32cfa5948454b1959e5cb5e6529a3cca84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:15:48:97:48:d2:06:3e:bf:da:6a:94:a8:
                    ba:60:65:14:1c:0b:fc:0a:af:e6:a1:72:2b:08:31:
                    30:b3:14:cd:3a:88:16:77:fb:ca:a7:63:4a:21:ef:
                    3f:66:7b:13:51:57:53:55:c7:18:42:4c:29:bc:a6:
                    95:b1:ac:f5:e4:85:f1:03:7d:45:9c:75:a3:a1:5b:
                    69:da:b6:21:f6:b9:f6:42:3c:87:7f:6b:24:69:57:
                    f2:c3:3a:0e:5f:2c:83:90:45:b7:2a:4e:65:a7:df:
                    5b:5f:59:83:af:4a:dd:1a:71:97:0a:49:a7:f9:42:
                    f8:94:1a:46:e4:83:d9:85:c8:6c:86:e0:a0:11:9f:
                    87:0a:67:4e:5f:f7:0f:78:25:31:8a:af:74:6a:92:
                    a2:a9:e7:36:ce:4e:fc:77:33:e3:c2:ad:29:13:91:
                    b4:31:b8:56:f6:77:42:68:f2:d4:9d:3c:51:5d:c1:
                    78:ea:4d:b7:df:e0:6d:9a:15:4a:94:41:b2:40:59:
                    16:b1:3b:31:93:de:b0:33:86:c6:ea:29:80:a6:c3:
                    4c:dd:1c:b1:eb:c5:06:ba:6f:69:b1:de:d6:02:68:
                    3d:8c:1a:af:5b:96:13:25:c8:3c:4f:15:71:9a:09:
                    ea:43:8e:3d:82:1d:1e:7e:e3:8a:5a:3a:43:52:01:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DB:FE:32:CF:A5:94:84:54:B1:95:9E:5C:B5:E6:52:9A:3C:CA:84
            X509v3 Authority Key Identifier:
                keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:5b:b6:2a:9e:b7:9a:af:f6:ae:5e:a2:a3:b5:52:57:3f:
         75:4c:00:1a:62:d3:6d:4d:96:7e:c6:76:b5:91:11:e4:48:c9:
         97:49:db:31:02:f1:0b:e0:23:bd:cb:c3:17:f4:81:05:7e:21:
         7f:29:e0:b5:2e:d2:72:5e:47:c5:d2:ba:52:41:45:99:32:21:
         10:1e:ef:5b:6a:69:ec:66:42:c6:ee:56:be:08:e5:01:67:d5:
         0d:4b:69:37:ef:01:36:38:bd:4a:35:0f:4a:7f:6a:17:0b:25:
         98:6e:a7:2d:b5:b0:b8:b4:bb:c3:f3:c9:20:ba:dc:26:c9:d1:
         70:dd:16:ff:3c:84:08:0c:9b:f6:f2:7a:4e:aa:ba:5a:95:21:
         0b:75:4e:01:7c:ab:bb:37:92:f5:50:f7:26:ae:eb:09:cb:5a:
         e6:07:d2:f9:0e:ae:a2:7f:fa:a7:f1:32:c2:e8:8f:7e:27:3d:
         0a:25:6a:1d:7d:f0:b6:54:61:50:2b:3b:f1:af:74:50:47:03:
         fb:60:d5:e3:ce:7f:99:c3:2d:20:9f:10:f5:88:aa:67:44:c5:
         9f:e8:55:cd:c2:cc:6e:eb:eb:37:0d:76:87:00:b3:4d:d2:9c:
         06:1d:a1:be:94:f8:bc:3e:78:96:0e:d0:cf:a0:c8:23:26:bd:
         2a:11:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:30 2025 by rpki-client