Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File:                     336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier:          Xk3SUXhHkjoIo+dxw8gAyvR0bGfoPSdfjG2zxdSVomY=
Subject key identifier:   EE:0C:51:97:AA:36:38:69:EF:63:33:F7:17:E2:2E:62:46:AF:F4:2E
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer:       /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial:       0196827E7AE8BD82B3E885BBCFC2281D3C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number:          11D7
Signing time:             Tue 29 Apr 2025 17:00:48 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:48 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:48 +0000
Files and hashes:         1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: MKv2ryhQrj3mHvmfUDl94bGTobCfowCmznelFMrBies=)
                          2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:7a:e8:bd:82:b3:e8:85:bb:cf:c2:28:1d:3c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
        Validity
            Not Before: Apr 29 17:00:48 2025 GMT
            Not After : Apr 30 17:00:48 2025 GMT
        Subject: CN=ee0c5197aa363869ef6333f717e22e6246aff42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:54:2d:d5:97:d7:0a:e0:c9:ff:a4:26:20:e4:
                    9c:fa:ca:65:05:8e:7a:5c:12:64:e2:3f:84:65:f5:
                    5b:0c:f1:2e:0e:a4:d2:52:ac:c1:1d:26:50:85:d9:
                    0f:9c:a5:68:fa:24:b4:9a:d1:48:07:cd:24:12:ed:
                    e3:56:59:79:dd:4a:cc:a6:61:37:c3:8c:04:ec:99:
                    1a:44:08:70:9a:3d:14:de:04:57:52:08:84:ca:50:
                    c3:e6:cb:75:4d:69:34:ea:da:c8:c2:8f:b9:bf:b3:
                    6a:30:ea:8b:a3:b0:73:86:3b:a6:26:ab:b7:23:6e:
                    09:5b:4d:ee:91:a5:cc:50:56:fb:9b:e7:ec:5c:35:
                    d2:e6:56:45:77:ab:8f:18:71:ab:e7:1e:40:12:c4:
                    77:4d:fc:a5:b4:e4:b4:17:49:d9:8b:ed:b9:8a:ac:
                    ca:92:55:3a:70:e4:79:e2:0d:8f:d8:89:dd:dd:a2:
                    0e:80:4b:c3:cc:d4:ae:f3:14:a1:2f:1d:6f:bf:16:
                    58:11:8d:3b:36:40:6a:b1:bb:da:78:80:96:b8:cd:
                    0b:21:18:a2:24:bd:55:99:a3:4a:bf:6e:54:4a:6c:
                    ec:2a:53:ee:ec:5b:01:e8:7c:9e:c6:2c:60:1d:54:
                    34:08:3e:68:64:0c:2b:8c:b7:3d:ee:b7:47:50:f6:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0C:51:97:AA:36:38:69:EF:63:33:F7:17:E2:2E:62:46:AF:F4:2E
            X509v3 Authority Key Identifier:
                keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:81:a3:16:a4:57:a9:2d:ef:e7:51:92:24:2c:f6:a4:94:
         92:d4:f3:10:de:b6:9c:bd:b3:9c:22:f6:58:67:db:cc:ec:70:
         b5:54:6f:5a:25:42:7d:ee:7f:65:23:e3:46:03:72:c0:1e:cf:
         db:b4:1f:f8:86:c6:cd:de:6c:da:72:26:05:f8:67:c4:f8:aa:
         ff:1a:17:cb:0a:e7:5c:cd:a9:af:14:82:fd:06:c0:c1:09:19:
         94:cb:5d:b0:25:fa:62:7e:72:58:9f:8a:60:fa:e1:d9:71:2c:
         3e:d2:c0:8b:e9:33:8a:94:04:70:64:4e:1f:cf:f8:a3:37:cd:
         13:89:34:55:20:82:01:38:33:b1:77:90:4d:c0:96:6b:a6:93:
         92:60:83:b0:b5:ae:2d:f0:40:bd:14:69:19:03:4c:05:ee:85:
         f7:38:66:2e:dc:65:5c:e2:ff:45:c1:71:aa:d3:ea:ef:0c:8e:
         55:c4:08:bb:09:6e:ab:04:83:73:47:2a:77:03:71:9c:75:a7:
         01:6d:29:2a:38:df:bd:33:09:11:89:8a:8c:5c:d4:0a:5e:1b:
         98:5d:d4:85:47:a3:4f:60:a1:4d:3c:a3:44:38:61:ca:4b:fb:
         4b:87:00:95:37:30:4c:13:de:ee:23:b6:fb:ba:1a:25:94:62:
         27:4c:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:46:37 2025 by rpki-client