Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          duhhIrPkSvWS8ba8/DoOaLp1twiP4DjP5Rme7TDYWAg=
Subject key identifier:   23:A8:B2:ED:F4:FC:CC:3B:AA:F4:1E:DF:E6:1B:13:7C:41:6A:4F:91
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       01967378F8A42C990CAAADEADCA07762E240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          09E3
Signing time:             Sat 26 Apr 2025 19:00:29 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:29 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:29 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: XWqR7T/iQVBeRW88/RuFhjBCZLe5teXdwfaX5b0Lo0g=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:78:f8:a4:2c:99:0c:aa:ad:ea:dc:a0:77:62:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Apr 26 19:00:29 2025 GMT
            Not After : Apr 27 19:00:29 2025 GMT
        Subject: CN=23a8b2edf4fccc3baaf41edfe61b137c416a4f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:a7:f2:7a:75:e5:d9:5b:19:e8:c8:59:04:
                    0d:e4:23:a1:02:56:35:8a:f6:3b:b5:3b:8e:00:51:
                    8f:41:f2:37:27:6d:0b:8d:a4:f1:b2:dd:0d:5d:b3:
                    42:b6:70:68:b1:cf:b7:61:9c:86:c3:88:39:16:b4:
                    9d:67:3b:f7:65:4c:07:7d:68:80:e8:b7:d6:f8:fb:
                    46:73:d4:36:4b:42:d9:38:16:3f:8a:93:3b:8b:2d:
                    ff:3e:ec:54:15:84:3f:a5:f9:87:7e:5f:ce:fd:4e:
                    e4:d4:52:09:9d:4f:82:68:97:cc:b5:93:d7:23:73:
                    86:cb:69:15:a8:1e:91:41:90:66:b3:0f:92:af:b5:
                    ec:b3:04:98:72:e4:85:02:a6:ef:a5:fe:04:a9:b8:
                    72:0f:68:82:ca:1f:d7:2f:37:8a:cb:f0:5c:0d:9e:
                    26:6e:69:5e:80:7f:d6:00:ac:26:c8:54:cc:d5:8b:
                    f3:40:be:2a:17:3b:35:59:8b:1f:70:c9:8d:25:ed:
                    20:d2:49:cd:25:3e:93:07:8e:9b:b8:06:74:6d:99:
                    7f:ce:13:2d:0d:6b:fe:71:14:bf:88:13:42:97:25:
                    df:8c:0d:90:e5:aa:94:b0:24:8a:b6:ab:c3:c3:95:
                    ec:86:d7:af:43:f7:00:86:78:21:a2:fe:6e:e3:8d:
                    78:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A8:B2:ED:F4:FC:CC:3B:AA:F4:1E:DF:E6:1B:13:7C:41:6A:4F:91
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:d2:9c:56:4f:88:01:0a:8c:85:fb:d7:b4:62:a9:35:2c:
         e0:5f:9f:21:67:60:04:b9:f3:d9:ed:71:be:7e:c0:c1:22:3d:
         9c:6a:46:ea:ce:93:6f:f8:1e:1e:a4:31:53:50:dd:d4:7a:56:
         40:5f:9d:d5:6d:7a:ed:1d:84:94:1d:75:37:76:9d:e0:88:ca:
         58:f6:dd:ee:66:24:73:36:bf:7c:23:25:f4:0b:ec:01:81:25:
         aa:e8:52:2e:73:cc:82:b6:a9:db:cc:f6:a9:1d:1c:7c:98:f4:
         bd:de:e1:dc:c1:a4:6b:36:e2:58:f4:7c:0b:3d:30:e3:9c:87:
         2a:bb:d2:12:6d:40:8b:9a:ac:1f:18:06:96:b8:02:d7:ee:58:
         a8:04:f3:34:5d:f1:d7:b5:27:2c:ef:9c:cc:ff:5e:d6:3f:c0:
         4a:82:49:38:a6:83:9d:b9:25:14:09:67:31:8a:a1:2f:7a:6e:
         49:d6:5f:7a:0f:0f:9f:db:7e:14:66:f8:2f:68:9d:02:1b:eb:
         57:c8:01:49:73:19:a5:8d:3f:80:16:c4:87:73:f0:3b:87:7f:
         a6:36:b9:e5:f1:d8:57:1b:84:5c:f3:77:8e:51:0c:bd:1b:f3:
         2a:a2:10:a5:05:08:3a:6c:b3:59:01:46:09:62:de:28:bb:33:
         d4:b1:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:27:12 2025 by rpki-client