Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File:                     t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier:          Aj4Tg8p6dVYZDfF7vxOekCxRCyFqm8irEsWHoinNGjw=
Subject key identifier:   DB:CC:90:13:37:F8:2E:C1:E9:96:AF:AD:05:E7:99:5D:CB:25:FA:ED
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer:       /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial:       01964C6BCCA8674775D0F292E2C1C2302315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number:          034D
Signing time:             Sat 19 Apr 2025 05:00:55 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:55 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:55 +0000
Files and hashes:         1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=)
                          2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: jUlhntrJiljiL8s9/GhEMJ9nwo2lvFokny7I6gCvG5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:cc:a8:67:47:75:d0:f2:92:e2:c1:c2:30:23:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
        Validity
            Not Before: Apr 19 05:00:55 2025 GMT
            Not After : Apr 20 05:00:55 2025 GMT
        Subject: CN=dbcc901337f82ec1e996afad05e7995dcb25faed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:fc:17:15:42:58:bb:bd:38:86:6f:9e:9a:
                    ee:0c:61:d3:2b:39:89:a9:22:47:1f:46:d5:38:79:
                    bc:23:f1:bb:c8:a3:b1:dc:0d:04:5c:6b:56:d0:12:
                    82:5c:7e:f4:ed:af:eb:95:aa:7a:d9:31:65:8f:a0:
                    ad:a5:e8:d9:33:f8:46:3c:28:ad:28:5b:a0:c7:db:
                    99:b3:cd:b5:9b:20:81:db:64:be:38:ff:14:97:51:
                    a1:02:0b:e3:97:06:a5:6f:c0:bb:97:c0:8a:21:22:
                    32:f3:ee:a9:d4:9c:42:ff:a6:0e:1f:8b:7d:17:10:
                    00:49:7b:74:1d:0e:b9:7f:b1:6a:0a:b0:80:8a:c4:
                    56:01:35:a0:1a:11:fe:dc:73:7d:fe:9a:93:67:8a:
                    e2:39:ec:be:0e:1b:c1:62:d2:f8:d8:24:99:43:97:
                    2e:01:75:8d:5d:4d:f9:e1:63:25:19:b7:1f:d7:3a:
                    5d:36:4d:14:fe:b6:7e:b9:49:0c:4b:e9:ef:9c:19:
                    f4:e8:97:cd:63:02:7e:c0:38:52:5f:26:f9:62:19:
                    94:1f:fe:ff:41:15:fb:58:1d:10:a5:31:58:9b:67:
                    70:1e:74:34:67:b9:70:42:2b:e9:40:42:c4:2c:08:
                    2c:ed:dc:6d:f5:9b:24:f3:c1:93:13:fb:41:aa:8b:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CC:90:13:37:F8:2E:C1:E9:96:AF:AD:05:E7:99:5D:CB:25:FA:ED
            X509v3 Authority Key Identifier:
                keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:bf:c8:9d:de:fd:59:d8:25:f4:61:09:b4:77:7f:e6:ec:
         9a:2f:a5:38:37:81:09:1d:cd:74:85:d9:83:3e:79:93:6a:a1:
         65:fa:50:c8:44:e5:b4:fc:56:d8:06:51:ae:16:cb:1a:cb:2e:
         6f:20:ac:0e:90:78:42:6c:a6:11:54:16:90:6f:f5:5c:e9:14:
         d8:b9:65:e3:ab:09:f7:c9:1c:eb:e1:09:20:00:d6:f9:80:b1:
         13:9d:d1:fd:2b:0f:07:98:e0:44:9b:e8:aa:c0:f6:06:49:e3:
         a8:c5:9d:3d:7e:fd:c7:5a:0d:4a:fb:be:6f:72:3b:36:dd:15:
         e1:db:9b:54:f9:48:bd:ea:ed:3b:a7:55:e5:60:ce:05:13:2c:
         f0:c9:61:d1:88:ba:e0:77:ca:9a:b4:f0:f9:2e:03:60:56:69:
         13:d3:40:b5:54:49:5e:d8:0e:e4:6f:b3:b8:46:5c:58:b1:aa:
         cf:f0:5d:6b:6b:ad:af:de:7b:97:94:66:46:a5:67:17:1c:9b:
         c6:f8:78:f9:b7:58:39:1d:f1:ac:8d:96:b7:2b:0f:e3:19:10:
         c9:3d:bf:46:9a:82:1c:be:26:1a:0c:0f:25:68:ca:ac:f4:7e:
         29:b7:67:b4:c9:c1:08:11:3c:9e:69:d0:bb:eb:0e:be:c2:66:
         56:49:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:52 2025 by rpki-client