Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
File:                     7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json)
Hash identifier:          1oCeClYF58e1x7aJRhCfGe5Ha0qLq0CWHD4reqXME7U=
Subject key identifier:   B8:60:29:A8:B9:EF:BE:13:50:49:E8:71:49:4F:67:F1:D6:31:9B:8B
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Certificate issuer:       /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial:       019697178D9F49028DE866BE2BCFC708CA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
Manifest number:          1223
Signing time:             Sat 03 May 2025 17:00:25 +0000
Manifest this update:     Sat 03 May 2025 17:00:25 +0000
Manifest next update:     Sun 04 May 2025 17:00:25 +0000
Files and hashes:         1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: FtgHtIhLXDa+dwfgBjHRgYmJHQLCpRvXsGjW127eDQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:97:17:8d:9f:49:02:8d:e8:66:be:2b:cf:c7:08:ca:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
        Validity
            Not Before: May  3 17:00:25 2025 GMT
            Not After : May  4 17:00:25 2025 GMT
        Subject: CN=b86029a8b9efbe135049e871494f67f1d6319b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:2e:26:a0:91:b6:55:5f:85:4d:57:6b:4f:
                    67:94:28:27:68:05:8a:01:bf:c6:90:71:53:25:c7:
                    df:92:c2:3d:ca:1a:bc:09:3e:e3:41:ca:1a:d0:87:
                    40:76:3b:9a:d2:da:12:1d:7f:11:70:77:72:2d:2b:
                    e7:31:aa:d6:60:7c:6a:40:d0:4b:16:8f:65:f9:73:
                    9b:e9:74:73:4b:6d:b7:63:e4:92:3a:2a:fc:3b:cf:
                    4a:77:24:82:24:85:75:84:15:25:4b:ba:e9:47:ba:
                    10:ba:2d:d3:f1:3b:2b:6c:7e:64:77:00:7e:35:57:
                    42:ad:a6:d0:a1:d6:fb:54:c2:1b:86:0c:9b:07:72:
                    4c:e9:22:22:80:62:26:42:8c:65:07:04:27:e0:93:
                    e9:6d:21:1e:e8:80:6e:b9:c3:37:7d:d7:fc:0d:ed:
                    b0:17:d6:22:4a:54:a3:ff:49:88:b7:ae:f9:71:88:
                    9d:d4:b3:a6:98:0e:1c:f0:01:1b:d0:d4:f7:3e:12:
                    4a:d1:62:a1:59:5e:16:7e:35:63:34:9c:de:68:22:
                    bf:62:e7:79:79:c9:af:62:fa:e7:a6:d5:b8:85:39:
                    74:b9:d9:29:ba:a3:5c:10:73:8b:98:aa:60:7c:40:
                    d0:bf:e2:c5:3a:aa:9a:a3:ac:65:06:ab:53:12:90:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:60:29:A8:B9:EF:BE:13:50:49:E8:71:49:4F:67:F1:D6:31:9B:8B
            X509v3 Authority Key Identifier:
                keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2b:4e:77:ee:3b:11:67:97:62:a6:6e:1a:28:94:8a:d2:2e:
         b7:57:c0:6a:b8:97:78:e0:e4:67:76:fe:01:78:15:d0:d3:9a:
         b0:3f:aa:ba:93:35:5f:4b:65:2d:34:74:cd:45:1b:98:03:3a:
         a9:05:c7:24:78:0d:df:9d:ba:47:75:c6:9a:44:9e:4e:36:44:
         65:b6:71:d6:c4:3f:c9:15:ba:65:4b:b0:db:d3:fa:7c:95:63:
         d0:68:f0:15:29:47:86:65:de:7b:f0:1f:71:46:a3:06:f5:97:
         92:0f:84:f1:99:f9:21:21:1a:b7:89:34:10:2c:a7:1c:d5:e7:
         25:58:c0:c2:e3:af:26:5b:3f:fb:b6:52:15:22:0e:e4:e8:4a:
         d8:d3:c3:6a:ce:8f:d5:69:5a:ef:11:b6:07:da:2b:a1:2c:33:
         7a:67:8c:69:1f:d0:fd:ee:e3:aa:20:da:ad:bf:3d:21:fe:0c:
         81:c2:4d:c7:ae:2a:38:40:e6:5c:d1:9a:33:92:2e:5e:99:50:
         fe:ea:50:48:53:20:36:e5:16:b3:c2:90:47:0d:e2:35:14:a0:
         5c:42:12:d3:5c:a4:b5:6c:16:2e:87:44:43:19:e7:14:de:e1:
         39:ac:c7:97:43:0b:20:38:4e:08:ec:36:61:45:00:50:22:97:
         0b:0e:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:54:49 2025 by rpki-client