Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
File:                     u7MU1-NpAfbep8ApGlFTO7Ik87M.mft (raw, json)
Hash identifier:          yp7fGQFykWjxGXgZztfGAPoF3zC6YUrl2poo66rRpXI=
Subject key identifier:   2A:C2:C7:BF:72:EE:87:D6:E8:BD:50:04:31:C0:16:9B:73:80:34:4F
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Certificate issuer:       /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial:       019683FF5A93C641E7A937CCFEBCDC76CF93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
Manifest number:          0896
Signing time:             Wed 30 Apr 2025 00:01:12 +0000
Manifest this update:     Wed 30 Apr 2025 00:01:12 +0000
Manifest next update:     Thu 01 May 2025 00:01:12 +0000
Files and hashes:         1: u7MU1-NpAfbep8ApGlFTO7Ik87M.crl (hash: hAO1wWiwHNW8AXxfG3wAFdmKyAZg4iO4s3Bah7YbGZA=)
                          2: yfiu2M8plrtU3UaE1tSWQlOfqzM.roa (hash: LGvgYonneT46G/xf4FgiBrT7VrnKx0OUEEnLR8etqrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:ff:5a:93:c6:41:e7:a9:37:cc:fe:bc:dc:76:cf:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
        Validity
            Not Before: Apr 30 00:01:12 2025 GMT
            Not After : May  1 00:01:12 2025 GMT
        Subject: CN=2ac2c7bf72ee87d6e8bd500431c0169b7380344f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:fc:9a:c3:8e:c8:50:70:bc:46:19:dc:90:
                    1c:76:7d:42:50:fc:78:ec:8a:15:b8:10:87:38:1d:
                    5a:44:66:55:e3:55:18:98:c9:46:eb:23:25:25:75:
                    5a:3e:00:61:30:99:c0:cb:41:a9:a3:0e:c1:75:77:
                    1b:14:a2:c9:69:48:87:37:6e:3d:4b:78:8a:25:46:
                    e1:fe:49:0e:b2:a1:c9:91:f3:22:24:f5:46:d6:5e:
                    8d:b1:19:86:92:94:b0:b1:25:b1:e3:c5:5c:1a:f5:
                    71:93:c0:bf:6a:f3:40:df:64:99:76:ec:7c:59:26:
                    f7:e2:94:9a:39:0f:87:3e:24:6f:1f:33:0f:44:e6:
                    1b:8e:ad:41:84:27:76:d5:91:c7:a2:b4:68:cc:92:
                    18:4a:65:2f:c4:d5:cc:c2:d4:d0:99:07:c4:c9:94:
                    46:e7:dc:7c:6d:d5:88:65:40:ce:ac:1c:22:bf:49:
                    30:05:13:ff:0a:29:d5:ea:89:f1:82:3d:a9:fe:78:
                    54:8b:87:d0:f2:aa:b8:de:ba:9b:33:f5:df:0a:e6:
                    fc:05:3d:2e:8f:13:96:3e:4e:1b:8d:1c:4b:f9:39:
                    d0:a4:09:59:36:cf:a8:bb:eb:3a:87:03:d7:e6:b3:
                    cf:20:23:0d:62:22:7d:8f:9b:24:85:78:e3:7f:8f:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C2:C7:BF:72:EE:87:D6:E8:BD:50:04:31:C0:16:9B:73:80:34:4F
            X509v3 Authority Key Identifier:
                keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:c4:26:1b:92:b6:5a:3d:f9:cc:c1:55:39:38:f9:d7:78:
         9a:38:9a:ff:4f:3e:07:ed:3a:7e:36:27:b0:00:6f:7f:ec:e7:
         0b:40:23:d3:ae:bf:c1:23:da:d9:c6:e8:37:9a:55:91:f0:3a:
         05:28:12:79:47:80:04:9c:01:5f:09:42:46:32:38:33:0e:ec:
         77:33:9b:7c:3a:24:5b:f9:77:4d:04:0a:51:1b:8c:a8:87:b0:
         1e:2d:3e:24:f8:9a:4e:8c:b3:12:0f:16:4b:3d:cd:15:89:0a:
         99:d3:18:28:eb:f7:67:59:82:1b:43:ee:86:c7:b9:c0:c2:cd:
         75:b9:03:74:34:75:0c:fd:93:9c:29:c0:e5:e8:d2:6a:f0:b1:
         16:62:96:21:a3:ed:10:6c:1b:db:4c:4a:cf:83:8d:3a:4d:22:
         c7:95:94:72:95:cc:96:61:24:a3:25:51:30:0c:e7:5a:6c:e1:
         a1:ec:90:93:9c:eb:61:91:5b:0d:a7:e2:f4:35:0f:96:21:cd:
         6c:28:7e:36:22:d8:5c:a9:c3:87:34:9c:fc:ae:3d:06:7a:bf:
         95:a2:73:ff:90:07:79:5a:95:8b:0d:0f:75:08:02:8e:ef:25:
         04:f6:2a:1f:b2:4b:8a:ac:67:c0:17:c2:3d:ae:72:30:a8:f3:
         00:41:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:53:21 2025 by rpki-client