Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File:                     e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier:          mbVNHOGueHstp+GblGs8TXvBhJS+6BuzW2xPUwcC5+I=
Subject key identifier:   E6:3C:2F:CC:B1:2B:35:D7:37:9D:05:60:5E:84:0E:13:7E:F9:74:DE
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       01967F0F493F4A82F46DF6D8F3153A63683F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number:          0807
Signing time:             Tue 29 Apr 2025 01:00:30 +0000
Manifest this update:     Tue 29 Apr 2025 01:00:30 +0000
Manifest next update:     Wed 30 Apr 2025 01:00:30 +0000
Files and hashes:         1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: zoRuCTYIuJPaCpRy8MYPaHeS85/gTQibJF1kBbqQNYg=)
                          2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:0f:49:3f:4a:82:f4:6d:f6:d8:f3:15:3a:63:68:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: Apr 29 01:00:30 2025 GMT
            Not After : Apr 30 01:00:30 2025 GMT
        Subject: CN=e63c2fccb12b35d7379d05605e840e137ef974de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:67:a5:31:fc:9d:e4:4a:92:47:0f:6f:5d:
                    ea:7b:44:4e:64:74:94:cf:12:33:d1:11:3b:11:c9:
                    73:fd:24:c5:8a:4b:27:e2:57:6a:84:96:50:d1:2b:
                    59:52:b9:76:e2:de:87:7c:54:1f:7c:ff:e2:63:d2:
                    40:30:da:d9:14:ad:f5:ab:a3:42:96:ce:60:f6:d2:
                    b9:45:98:cb:ca:82:22:e4:41:a0:e1:72:81:c9:22:
                    f5:90:cc:ec:c8:4a:ff:be:c2:60:a6:52:35:85:94:
                    9f:ee:37:b0:0d:00:65:2b:2f:f5:05:64:4e:05:87:
                    6b:72:14:fa:ec:66:8e:3f:43:3b:6d:e2:7c:b2:ee:
                    0b:22:9d:d2:e1:e4:e1:53:a8:da:f4:ed:99:c5:94:
                    ea:e1:69:05:38:33:9b:64:f5:40:2f:35:85:81:cf:
                    e5:44:04:7b:ea:51:3a:e1:7d:c9:e1:28:cd:fb:a2:
                    cb:4f:ac:05:d3:8e:ee:d1:70:00:25:e3:fe:1a:d0:
                    31:2c:c8:2f:21:d3:a2:b4:18:11:ec:b5:2c:ff:38:
                    db:dc:cc:76:74:2d:a0:44:06:4b:f0:a8:14:d8:5f:
                    0c:0e:46:87:1e:ce:b6:f8:83:66:5b:11:01:ae:e7:
                    cb:2b:b1:b7:46:44:d8:25:e4:3e:24:90:f6:69:8f:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:2F:CC:B1:2B:35:D7:37:9D:05:60:5E:84:0E:13:7E:F9:74:DE
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:05:ca:55:9f:04:93:01:d6:18:6b:ec:92:ba:b9:af:1d:c6:
         23:82:30:8f:ee:77:bb:a9:0d:00:76:7e:a3:99:22:9b:d0:c7:
         1b:20:05:c8:25:31:b1:0c:cb:18:d6:a3:c1:98:13:d2:15:5a:
         1f:45:6c:fe:fa:54:08:da:a5:e1:d8:b5:15:29:9b:21:cf:da:
         28:2a:2c:0e:7c:18:29:38:13:73:7b:36:74:93:12:b8:ae:19:
         ff:22:33:56:b5:f2:36:5a:f7:10:ad:aa:cf:6b:ef:3c:43:40:
         b9:0e:26:24:58:3f:50:c1:1d:25:00:55:03:a1:42:58:8b:16:
         8c:0f:fd:f9:df:97:91:7b:d8:cb:de:21:87:fb:0c:e7:e1:20:
         ac:71:24:48:7e:e0:a2:14:02:46:f0:e5:9f:44:06:a1:18:19:
         b0:db:4f:20:30:5d:fe:99:10:6e:09:e4:bd:05:a7:fb:6d:a0:
         cf:8d:6f:94:49:8b:9c:eb:32:a6:20:2e:1e:5a:46:1d:1e:d6:
         51:42:b5:f1:05:43:b7:b9:86:cc:ae:40:3b:c9:ff:0e:51:88:
         3e:c9:5d:0a:20:55:fa:06:4b:65:37:ae:9a:7b:ba:a2:1f:20:
         26:2a:fb:72:82:de:68:49:2c:6e:1b:4e:e4:56:b2:d9:11:07:
         07:3e:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:31:38 2025 by rpki-client