Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
File:                     59CqrsABapJr7tz991g1gVW3G-8.mft (raw, json)
Hash identifier:          LRlvpxTmvCCk2pLEE9SSft+y86TGEGtYFfSwNc3XGEg=
Subject key identifier:   74:29:A5:B1:AF:E1:95:36:7F:06:24:3E:E2:48:E8:13:3D:D2:A2:94
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Certificate issuer:       /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial:       01968BB8DC7E8F3D1358166C1C784B7B99F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
Manifest number:          07A8
Signing time:             Thu 01 May 2025 12:01:09 +0000
Manifest this update:     Thu 01 May 2025 12:01:09 +0000
Manifest next update:     Fri 02 May 2025 12:01:09 +0000
Files and hashes:         1: 59CqrsABapJr7tz991g1gVW3G-8.crl (hash: /UTeM3yiC1O6urLuUxdmSfw2RgXQeTTrRp5Xyx5QY4M=)
                          2: TWbavJSlzl0yvrhE4VudASOWZFo.roa (hash: ur2N9sV1aoXG7CrT2cW2W2OoDmeobx2g2/VRIr5D2Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:b8:dc:7e:8f:3d:13:58:16:6c:1c:78:4b:7b:99:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
        Validity
            Not Before: May  1 12:01:09 2025 GMT
            Not After : May  2 12:01:09 2025 GMT
        Subject: CN=7429a5b1afe195367f06243ee248e8133dd2a294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:62:14:d7:df:aa:f9:d6:35:46:3a:b8:02:e0:
                    2a:fb:11:cb:31:5c:9e:77:b9:b8:b6:f3:99:9f:fe:
                    19:3b:43:42:27:6f:46:cd:79:da:a2:21:45:28:ae:
                    95:b9:95:7f:2c:1a:4c:0e:13:d4:97:43:56:0c:cf:
                    9f:16:73:0f:20:dd:6d:0a:53:d9:56:a2:2c:c6:51:
                    e1:4e:bd:15:ee:ba:60:16:fe:ce:85:67:45:ab:ee:
                    63:be:8a:cb:34:f3:f5:60:64:49:d8:b2:df:74:97:
                    fe:5c:8a:c6:05:df:be:a2:56:d5:77:7d:13:2a:92:
                    55:1f:dc:fe:ce:f2:41:e7:24:3f:cf:25:48:c4:c1:
                    3a:8e:4e:e7:6e:9b:07:21:52:02:4a:a5:84:15:b7:
                    3a:2f:7c:77:a8:f0:c7:90:71:2e:b1:ea:b5:d5:10:
                    f5:23:55:46:64:f4:b2:1b:3c:85:e1:cb:ac:ab:83:
                    62:76:64:11:cc:fc:e9:fd:1e:20:9e:a1:38:fe:ff:
                    5f:77:09:b1:be:6e:08:27:08:41:f9:89:75:ec:58:
                    99:49:3a:bb:47:f4:08:b7:00:c7:cd:cd:c3:56:fa:
                    c8:7c:5c:7f:0f:4b:6e:06:4d:ba:aa:f8:48:65:c1:
                    56:8f:c0:50:f9:41:17:ca:e9:cf:69:2f:1d:51:c2:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:A5:B1:AF:E1:95:36:7F:06:24:3E:E2:48:E8:13:3D:D2:A2:94
            X509v3 Authority Key Identifier:
                keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:94:8c:c4:9f:8a:47:5a:84:0c:1d:47:fc:13:42:26:69:cf:
         23:70:45:dc:0e:a4:2e:1a:f3:11:6b:87:35:bd:cf:de:df:e1:
         47:9e:49:bf:fe:64:2f:52:fc:fd:76:bd:83:d6:2a:e5:43:08:
         a1:98:97:ef:f2:23:3c:7d:a1:78:05:77:17:84:44:26:99:7a:
         16:13:86:bc:ac:d9:53:eb:0a:51:f9:b4:7b:ba:ab:69:b4:ee:
         9e:24:54:91:d8:2a:23:3a:95:d9:c2:a0:a0:9d:7d:dc:7c:19:
         bd:13:8c:4c:01:0f:41:48:3a:cc:c8:da:af:cf:2f:01:6f:ea:
         c2:12:f9:ff:ba:42:81:19:6d:77:de:1b:97:e6:19:80:b1:da:
         d7:46:9d:f0:3b:dc:50:dc:1c:d7:f8:c9:4e:7c:b1:47:c0:b3:
         cf:f9:ef:62:01:52:df:d8:4f:47:02:59:64:01:df:15:12:4b:
         ca:3f:7b:27:53:7c:4e:62:a6:6b:96:71:df:b3:81:96:e1:d4:
         99:16:fe:92:71:24:69:51:91:b4:ef:92:5c:2b:02:f5:7b:47:
         55:9d:4d:a8:dc:54:c7:78:30:b7:8f:76:5a:c5:20:0c:c5:28:
         b6:de:7d:f3:88:46:49:9d:a3:2f:12:d2:d2:b2:76:73:af:2d:
         38:c0:5c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:23:34 2025 by rpki-client