Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
File:                     7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft (raw, json)
Hash identifier:          SyAlnVZ5s9hxXKixeoyA12D+hlVebx5huTrKH7QU+Ew=
Subject key identifier:   78:AA:B7:1C:CD:FB:0C:1F:7C:99:10:FE:E9:FA:BC:E5:60:EA:08:11
Authority key identifier: EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9
Certificate issuer:       /CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
Certificate serial:       01967FEB0CDA8885C8490319C9329BA0CBE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
Manifest number:          0E10
Signing time:             Tue 29 Apr 2025 05:00:32 +0000
Manifest this update:     Tue 29 Apr 2025 05:00:32 +0000
Manifest next update:     Wed 30 Apr 2025 05:00:32 +0000
Files and hashes:         1: 7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl (hash: f4dmnV5L20qe+dzqMw3lGEP7QW+zoGl5GlNvjSJxdhM=)
                          2: M_6QebMR4XXc_4ZSk3fzCdN3vvQ.roa (hash: VK66PCYpiRoLnxe0rDgGTNdxCqYRv5AkRtVmGa+QNQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:eb:0c:da:88:85:c8:49:03:19:c9:32:9b:a0:cb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
        Validity
            Not Before: Apr 29 05:00:32 2025 GMT
            Not After : Apr 30 05:00:32 2025 GMT
        Subject: CN=78aab71ccdfb0c1f7c9910fee9fabce560ea0811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:7b:e7:48:fc:02:dc:88:93:b3:c1:72:67:
                    8d:e4:13:07:da:db:ef:45:20:33:6f:1c:20:00:bc:
                    6d:50:73:41:14:6f:e0:6a:6f:f4:ce:36:f8:ec:a2:
                    46:2a:c9:45:1f:3b:af:ee:ae:d1:d4:42:e4:11:91:
                    fb:e6:52:c6:46:d7:ba:16:4d:67:a5:67:de:82:3c:
                    52:ca:25:3c:df:98:b3:78:c5:be:b0:75:75:01:7e:
                    14:d9:ec:f8:0b:84:04:19:19:04:5d:7e:2d:b5:d5:
                    91:07:6a:f4:aa:21:ee:d3:a3:67:ec:b3:49:e6:b5:
                    09:68:e9:8f:5d:5e:52:cc:c9:a6:69:7b:46:4d:f6:
                    f1:cb:14:ba:fd:93:df:14:4d:a5:38:08:f6:cb:f8:
                    a8:09:f6:81:c8:66:b3:49:cf:e8:13:3c:5b:0d:7b:
                    66:ed:7d:42:ab:74:7c:b6:9c:10:5f:ff:d6:83:60:
                    9b:f5:cd:f9:cb:b9:d7:88:18:3e:45:1e:55:57:aa:
                    c9:32:a2:9f:5b:fb:1d:56:24:50:77:df:00:97:d7:
                    9d:b1:04:7d:04:fc:e8:42:93:3a:82:61:17:5d:b6:
                    e5:b5:10:fb:72:86:c2:35:38:49:15:6d:c9:94:7f:
                    3f:2f:bf:20:1e:5c:7b:56:e1:1e:b1:df:f8:46:c3:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AA:B7:1C:CD:FB:0C:1F:7C:99:10:FE:E9:FA:BC:E5:60:EA:08:11
            X509v3 Authority Key Identifier:
                keyid:EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:09:1e:bf:1c:86:cd:19:30:87:8f:87:d9:d5:e6:9f:00:
         a6:b4:de:63:b7:cd:12:d4:1f:28:5e:88:d7:e5:86:25:24:c7:
         30:a0:e5:4b:71:3b:73:f5:59:47:0d:e7:f9:37:e8:46:cc:a6:
         40:a4:91:6b:d5:45:b4:2b:9c:1d:40:91:d7:13:73:1d:58:ad:
         dd:7f:c0:98:e0:26:7a:af:62:8b:f4:3d:67:b7:e2:fb:c8:50:
         15:d8:ea:1a:79:eb:9f:3d:53:3e:43:25:68:a3:e0:21:78:66:
         42:b9:14:09:db:35:96:dc:9c:0e:c0:43:a5:98:37:61:97:bc:
         95:68:a8:37:db:17:bf:3d:46:34:45:fd:97:4b:bb:20:e9:99:
         86:9d:61:a9:c8:24:8f:de:8f:04:d8:bc:e3:5e:70:8a:7d:db:
         c6:49:26:12:6c:da:56:93:6e:51:75:df:7c:17:22:ba:4a:7c:
         c3:76:cb:4a:85:d2:ef:c1:c9:08:63:dd:1d:b5:22:6d:05:4e:
         c4:3e:f0:1e:11:9c:53:fe:95:26:4e:04:cf:5b:ae:b6:95:89:
         30:f2:de:b4:4d:21:80:36:40:fd:eb:39:c0:64:11:92:e9:bd:
         af:1d:69:2e:8f:46:4b:ac:e6:26:7d:6f:57:b7:97:95:75:3d:
         d1:72:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:44:03 2025 by rpki-client