Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File:                     U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier:          wBULY40Lm1d/PzCkPbXYL2VRMUY42R5gOubEx++KWsc=
Subject key identifier:   7F:B4:CB:A8:FE:7B:48:53:C2:3B:94:00:91:72:76:41:09:2A:8E:C8
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer:       /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial:       019681A2C495C63F0B543309ACEBF242A133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number:          1262
Signing time:             Tue 29 Apr 2025 13:00:50 +0000
Manifest this update:     Tue 29 Apr 2025 13:00:50 +0000
Manifest next update:     Wed 30 Apr 2025 13:00:50 +0000
Files and hashes:         1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: 2l90+GzNhKxs31/NafaeZvD4iViYzWn0GF9XZ8AYe9I=)
                          2: lbTglUB_cuWwuUtQ0HuYFd1iErc.roa (hash: SqLRBaYjg0lLeWRsw+zkUvg9dbqxK2qZeJXDb+7pMGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:a2:c4:95:c6:3f:0b:54:33:09:ac:eb:f2:42:a1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
        Validity
            Not Before: Apr 29 13:00:50 2025 GMT
            Not After : Apr 30 13:00:50 2025 GMT
        Subject: CN=7fb4cba8fe7b4853c23b940091727641092a8ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:72:14:bf:af:e8:f9:10:98:68:22:a5:18:
                    3c:38:e7:81:8d:9b:6d:aa:9b:43:b7:39:63:6a:b2:
                    0a:31:a8:58:b4:ad:8d:ea:fb:1d:e6:89:ea:d2:28:
                    ba:3f:92:d4:6d:aa:47:c6:4a:cd:89:f9:e4:2a:35:
                    b2:8c:df:71:cd:3f:45:c0:83:e8:34:e3:4b:63:9b:
                    67:3d:4b:3d:c5:53:e5:15:a3:57:69:22:d4:8a:e5:
                    10:77:da:a8:f9:51:0d:60:87:82:67:a0:53:2c:e4:
                    81:79:db:f9:33:b1:78:8a:2e:4a:0c:f6:f6:41:d9:
                    f3:28:ac:41:5c:80:f8:cc:8f:07:90:79:aa:0e:fe:
                    a5:eb:c7:96:51:03:70:c0:c3:c1:78:15:95:14:33:
                    71:87:b6:df:22:37:f8:f8:0f:92:3c:06:7e:7b:99:
                    4b:c6:86:12:f2:1c:b1:e3:5b:32:a9:f2:cb:76:1b:
                    b8:1d:cf:0c:88:a7:f9:51:ba:8f:ae:05:e3:76:96:
                    d7:71:97:2f:72:df:63:e1:9f:b0:8e:7b:ac:9a:a2:
                    75:08:81:0d:08:4c:1d:df:10:3b:9b:41:da:29:86:
                    16:99:d7:3b:70:ae:80:1b:41:c6:8b:a2:74:22:ed:
                    a8:6a:c3:0f:e4:90:65:57:31:9c:cd:93:6f:cc:06:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:CB:A8:FE:7B:48:53:C2:3B:94:00:91:72:76:41:09:2A:8E:C8
            X509v3 Authority Key Identifier:
                keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:bc:68:62:36:84:0d:f2:18:05:bc:0e:07:e4:21:81:00:
         0b:81:7f:4c:08:8d:a9:16:10:80:46:be:cd:65:3b:b7:bc:44:
         e8:74:93:c7:14:88:0a:b2:72:34:13:ea:c2:5a:96:a2:88:83:
         c7:63:d0:7c:c6:11:24:42:ac:b2:b7:0f:af:91:5a:95:46:f3:
         c5:ba:17:73:bc:1c:20:59:d3:e8:0d:b8:6f:0c:b4:08:81:68:
         5a:30:77:c7:20:3f:e9:d3:b3:99:f4:e7:79:ff:db:41:40:f0:
         7f:63:cd:73:72:91:d5:9a:9c:21:32:ec:15:96:2f:e0:e4:e1:
         8d:c4:97:49:4c:6d:57:f1:33:64:4e:23:db:07:03:f5:d5:c1:
         79:aa:98:ff:e1:0e:b4:60:98:d3:bf:8b:57:bc:9b:75:7f:5e:
         68:6c:07:84:7e:f4:d8:7a:51:16:0e:1f:58:f8:14:cf:40:35:
         20:8e:8c:46:93:ce:9b:bf:08:b6:4c:48:1c:80:07:c8:81:24:
         50:be:15:bc:af:ec:ad:b8:c9:44:be:40:61:f7:3f:39:ba:a4:
         39:50:de:91:43:02:10:c4:34:f6:e7:01:eb:95:7d:af:ff:6b:
         a2:b9:da:b3:91:5a:1d:df:15:da:10:7a:6a:a6:e6:d0:44:f8:
         fd:5f:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:30:00 2025 by rpki-client