Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File:                     7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier:          RJEL6ZfcqjlrwpqCPDao3Ha8onh0WnytOx4bLkRLYVE=
Subject key identifier:   E3:92:30:A8:C0:CB:B0:A9:C9:7C:1B:72:38:3E:EE:E2:12:FF:88:A3
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer:       /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial:       019677FBA35ABDA2329E9490A0545CDCD549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number:          063F
Signing time:             Sun 27 Apr 2025 16:01:41 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:41 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:41 +0000
Files and hashes:         1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: wpshsc2qXWeoQu1XckA7OpsdYGEOqUBpsB72ToqA758=)
                          2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
                          3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:a3:5a:bd:a2:32:9e:94:90:a0:54:5c:dc:d5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
        Validity
            Not Before: Apr 27 16:01:41 2025 GMT
            Not After : Apr 28 16:01:41 2025 GMT
        Subject: CN=e39230a8c0cbb0a9c97c1b72383eeee212ff88a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:0a:32:83:58:c7:e0:d3:b3:db:19:41:53:
                    69:72:e4:67:6c:25:46:c8:ee:f0:66:38:74:f4:24:
                    6d:bc:d9:24:43:03:68:77:bb:28:51:ac:32:df:e0:
                    b7:ee:89:4f:7d:62:eb:2c:74:92:7e:c3:8e:8b:6b:
                    c7:45:cb:3e:3f:f0:cd:e8:9c:c1:13:60:c1:b5:f9:
                    09:5f:7c:72:f3:d4:7f:d7:f1:0c:1f:d0:ca:9a:b7:
                    d3:2c:81:8c:c1:74:f0:95:5f:22:27:dd:6a:d2:63:
                    e3:c8:0e:ea:a1:aa:16:e4:cb:b6:8f:c3:62:cb:50:
                    45:50:92:90:f4:3a:00:fd:08:aa:6e:04:ce:11:04:
                    19:eb:c4:63:16:75:93:11:66:13:db:ef:fa:db:d6:
                    9e:14:8a:7c:43:cc:69:c8:cf:a1:51:d5:41:ae:be:
                    c7:ea:9b:c3:df:38:f6:b4:04:4b:90:a7:44:41:75:
                    e2:30:7c:4d:18:0e:e7:d5:75:e0:ac:f6:5f:18:4b:
                    07:4c:3f:39:21:d7:52:56:28:14:cf:02:3b:b3:f8:
                    e2:b8:ef:11:57:17:0c:92:f1:78:72:25:3e:43:a7:
                    cd:54:cb:20:7d:bf:cf:ec:be:e7:78:92:5a:b2:ec:
                    47:70:f8:8b:e6:8f:2d:3a:6e:5a:fe:f1:9e:02:8c:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:92:30:A8:C0:CB:B0:A9:C9:7C:1B:72:38:3E:EE:E2:12:FF:88:A3
            X509v3 Authority Key Identifier:
                keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1b:61:78:08:bc:5a:44:4c:98:33:78:b0:61:5c:39:e4:2d:
         9f:f9:ff:3e:32:a1:c5:5a:08:ce:dc:47:8c:a5:b9:f5:32:6e:
         fb:55:0b:53:ae:58:e4:c5:c2:92:e1:4f:00:1b:0c:d0:9d:a6:
         a4:5e:47:c0:9a:d7:8a:d4:9c:39:26:fe:d1:2e:9d:4c:74:ca:
         b6:53:cd:22:e9:31:61:58:5f:b4:fa:06:b6:5c:5c:c5:96:85:
         87:44:3c:d7:b9:6a:5d:25:73:bd:20:ac:e9:90:a1:9c:5e:61:
         7d:0b:a6:10:b6:e6:26:3f:42:42:74:c4:d7:7a:d9:6d:6e:e8:
         28:49:d8:0e:a3:97:49:56:26:e6:b6:54:6e:f1:ed:a9:9c:d1:
         6c:da:f9:7d:6d:c0:0f:79:d6:a6:11:e1:0d:0e:82:13:32:9b:
         cd:d1:14:d3:94:a3:1b:19:cd:1f:ec:93:95:e6:dc:c1:ba:db:
         cf:84:f5:df:9c:ed:77:3e:ab:9c:8e:22:fb:d9:1e:2e:cb:46:
         95:f6:e4:fe:06:52:17:59:73:1b:81:0c:de:12:33:93:e4:7d:
         4d:2d:6a:3c:c3:02:4f:b8:79:10:39:3e:5e:f6:b7:dc:7a:2c:
         d0:e3:76:6c:ba:74:a3:49:9a:d6:95:de:47:75:db:e1:60:9c:
         5e:12:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:02 2025 by rpki-client