Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File:                     7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier:          lk7QnqdNtcIz+4UJkbonOSE8un7mx6KytHGJQOnspiE=
Subject key identifier:   0E:BA:A5:67:DE:0F:33:57:E7:0B:62:5C:26:4C:C5:C7:78:B6:A7:E6
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer:       /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial:       01967FB4ABBEC2AE83D279E1C543CE331C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number:          1512
Signing time:             Tue 29 Apr 2025 04:01:08 +0000
Manifest this update:     Tue 29 Apr 2025 04:01:08 +0000
Manifest next update:     Wed 30 Apr 2025 04:01:08 +0000
Files and hashes:         1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: K3pThp/pRrjtulM2fkDRanGDi656A5AaEhlgI8rWNLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:ab:be:c2:ae:83:d2:79:e1:c5:43:ce:33:1c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
        Validity
            Not Before: Apr 29 04:01:08 2025 GMT
            Not After : Apr 30 04:01:08 2025 GMT
        Subject: CN=0ebaa567de0f3357e70b625c264cc5c778b6a7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:e7:f7:63:6f:e7:e6:31:06:8f:3c:d1:b9:
                    05:18:fe:21:b0:3a:13:a2:38:4b:13:f5:d2:3d:73:
                    bb:13:25:94:23:96:b6:39:58:a7:a1:26:2a:3a:6e:
                    ef:92:7c:e1:7f:f6:37:86:16:56:2a:ad:93:23:5b:
                    0e:fa:7a:c4:90:6c:aa:82:7b:ac:02:f5:a5:51:1c:
                    47:e1:61:20:f8:c7:e9:7c:bb:41:a0:97:fd:29:4d:
                    32:5e:10:1b:dd:b5:6a:1f:6d:d1:1f:c3:17:47:fc:
                    f7:c9:0b:ff:42:09:66:ad:c4:f7:10:22:de:e2:26:
                    8f:cc:08:3c:12:5d:f8:b6:38:0a:68:58:fb:3f:8c:
                    03:ca:43:3d:dd:f0:e1:96:8d:4c:73:be:33:44:11:
                    2f:72:aa:cf:de:86:af:78:66:e4:d8:c6:0a:c1:25:
                    b6:b1:a4:93:10:55:bc:62:de:94:7b:1d:df:29:8e:
                    22:fc:df:2c:4e:76:ee:9e:39:b5:8c:67:9e:87:ad:
                    70:50:67:5a:d6:39:ce:a7:e4:8f:0e:31:bf:34:bd:
                    33:a7:52:03:60:6d:21:03:27:ac:4b:e9:84:69:8c:
                    31:42:3b:e5:26:f7:3a:73:df:c7:ea:38:2f:18:9e:
                    72:6c:9c:79:78:45:74:48:c2:9a:7f:15:9e:24:e2:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:A5:67:DE:0F:33:57:E7:0B:62:5C:26:4C:C5:C7:78:B6:A7:E6
            X509v3 Authority Key Identifier:
                keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:cf:b7:6c:6c:32:1b:65:be:f6:14:59:83:bf:ce:ad:74:
         09:87:af:7c:b5:bb:46:0f:24:1e:e2:b1:41:7a:af:92:33:c3:
         78:f4:14:4e:d5:1b:3d:39:4a:e5:bb:97:d1:f1:ea:d3:16:2b:
         20:00:85:fb:7c:77:4f:7b:98:28:3b:05:9f:f4:6c:1f:47:51:
         ed:14:46:56:e7:80:d0:9b:e1:53:38:9a:fc:53:0c:c7:bd:8f:
         8b:e6:01:94:87:7d:9f:24:66:44:2b:b1:cb:75:b5:b8:ac:c5:
         ac:8c:6e:5b:42:fd:fd:ee:22:60:62:9e:00:ba:98:9a:60:7d:
         98:cf:c3:61:41:08:ab:37:cc:1c:63:9b:cf:11:a5:68:15:4c:
         36:bb:27:e8:ea:54:07:c4:05:d1:4f:17:23:12:2e:1a:88:33:
         c3:e3:da:c1:32:4d:4a:15:48:78:20:fe:54:84:c3:6e:bd:2b:
         85:05:d7:2f:70:6b:39:30:fd:9f:db:2d:6c:aa:5c:8b:20:34:
         6a:bc:c2:c5:4b:f9:82:a8:71:e5:97:90:3a:0c:75:b6:1e:87:
         55:c0:fa:6d:70:8e:b9:b7:e2:1f:32:40:ef:0f:43:de:ae:43:
         6e:b8:67:c4:09:fd:dd:82:bc:7d:df:4e:2a:9e:cb:c6:ff:2a:
         57:24:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:29:41 2025 by rpki-client