Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          sR4JvCNRhi6kdXyKmENqW2u4CjAGhfHHWAwyPovjb/w=
Subject key identifier:   1A:A7:0E:2B:1D:D3:CF:09:DF:01:54:16:95:C1:CF:BC:60:B1:01:A3
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       01967755F4A8A65F34CD62071CE74599E0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          1087
Signing time:             Sun 27 Apr 2025 13:00:43 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:43 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:43 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: iuo/WxN7YbtkeREuiPK9U14gbQLV2uAVna+DZjtKC3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:f4:a8:a6:5f:34:cd:62:07:1c:e7:45:99:e0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Apr 27 13:00:43 2025 GMT
            Not After : Apr 28 13:00:43 2025 GMT
        Subject: CN=1aa70e2b1dd3cf09df01541695c1cfbc60b101a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:4b:55:aa:32:63:5f:e2:76:0d:d3:e4:7c:
                    a1:e1:7e:88:c7:1b:ae:59:02:d5:4b:65:39:57:17:
                    48:6b:fe:68:1c:70:b4:66:21:57:03:62:0a:57:9c:
                    60:7b:c5:50:3b:0f:8f:17:e2:7f:e0:f3:fa:89:02:
                    56:44:d9:07:54:cd:5e:19:33:e7:45:e1:7c:0a:3d:
                    ac:fb:c9:07:4f:92:6f:48:08:90:f8:e8:74:a2:b0:
                    77:85:92:a5:8b:c7:65:d4:79:31:75:7e:60:7f:1d:
                    37:1b:3b:3e:eb:78:8d:62:55:18:c6:3c:dd:4d:77:
                    7d:3c:a9:8c:e3:85:74:15:22:1d:4c:d5:4a:07:6f:
                    6a:f0:78:e6:04:1a:15:d4:70:90:bb:3f:6c:4c:0d:
                    48:ad:d4:cb:a9:fc:1a:89:87:db:17:63:a8:7d:56:
                    28:34:6c:19:86:5f:df:37:8e:2e:ae:62:15:83:3c:
                    2b:97:ae:9e:97:d9:2c:4d:dc:ed:d5:c5:ac:cb:d4:
                    03:10:ae:6e:48:15:7b:9d:3d:dd:bd:ce:7a:72:7e:
                    55:ee:a2:da:34:81:62:a6:1b:bd:ec:f1:23:37:3b:
                    ab:09:3d:c1:7a:2d:f6:c7:6b:6f:ce:3b:85:b0:d3:
                    0d:30:9f:28:da:1b:c9:2e:e0:51:75:cf:7c:b7:d2:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A7:0E:2B:1D:D3:CF:09:DF:01:54:16:95:C1:CF:BC:60:B1:01:A3
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d1:27:95:59:e9:b6:59:47:d4:6b:86:f2:3f:c3:4c:c4:16:
         ba:0a:96:7c:b1:62:7d:d8:1b:33:64:28:6e:07:43:d7:14:12:
         7d:40:5c:35:d8:3a:40:cb:b0:53:89:90:08:e8:f2:3a:9b:a9:
         f5:7d:b8:a6:7a:f0:f4:63:ee:89:a2:a3:7d:fd:61:0a:71:3f:
         0a:c9:e3:72:59:15:c1:f6:8b:8c:7b:1b:53:f0:50:60:63:31:
         69:7f:15:5f:f8:02:1b:ab:c1:17:d3:2b:26:80:0b:e7:8e:54:
         88:ac:0e:5d:c8:99:eb:19:d3:ed:e3:c2:b9:f2:f0:55:42:d9:
         5b:45:8c:02:e8:5c:72:b8:1f:f4:51:c5:a4:cf:4e:af:2e:c6:
         c8:56:a9:93:04:36:20:cf:61:c5:1f:80:28:b1:71:99:04:25:
         6f:af:68:16:39:02:3d:6f:01:35:ab:e6:b4:39:f8:b9:ca:cf:
         d5:12:89:9e:e7:02:ab:0e:bc:23:90:f5:95:d0:1c:ca:75:b3:
         2f:ba:ee:02:95:c1:38:6c:50:b7:e6:99:a5:d0:eb:f2:23:eb:
         70:cf:1a:da:28:39:66:99:3c:09:8a:82:53:2d:d3:26:36:66:
         92:bc:93:bb:9a:40:bd:29:4c:7d:be:a7:44:8a:fa:b2:bc:86:
         1f:82:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:42 2025 by rpki-client