Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
File:                     x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft (raw, json)
Hash identifier:          ERJdISdHNyg2L1+RUdawsdtTBPhx8CsQqS1cw2QxHX4=
Subject key identifier:   0A:65:4B:8B:CA:83:AD:23:83:7B:C8:76:45:D7:27:54:98:E2:07:C2
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       0196851148EC581D11C79341CE5E2461FCB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
Manifest number:          040D
Signing time:             Wed 30 Apr 2025 05:00:24 +0000
Manifest this update:     Wed 30 Apr 2025 05:00:24 +0000
Manifest next update:     Thu 01 May 2025 05:00:24 +0000
Files and hashes:         1: 6-bbeNLNkmIuyu3Lo5b34863iOM.roa (hash: lZJjYseqmXABz+2OUcMEvZWapoY92B+aQI4gDW+iLHY=)
                          2: EDJJIlUMrCN3cPb4YyplYaUa4mY.roa (hash: xSeFXRQr0ff+ENa0I7t8r/hMXg9ue9s9da6FSArG9HI=)
                          3: UY4B6ai0IUqpic2uyFBbXClXwVs.roa (hash: EpiSZtVV+62huL/J924f304WF/rHjhsYoh5R56nHB5w=)
                          4: Yq2uZcc2qRRP7aZ2CUk5bhls2PI.roa (hash: agQEn6bOXbJu8VUCvK5DiwKHmR8d/UEd/+IhzGxQaIo=)
                          5: x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl (hash: 06o+aegTCLaVsqQOJx28srysJMa9YUj2n0wqUy7bt0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:11:48:ec:58:1d:11:c7:93:41:ce:5e:24:61:fc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Apr 30 05:00:24 2025 GMT
            Not After : May  1 05:00:24 2025 GMT
        Subject: CN=0a654b8bca83ad23837bc87645d7275498e207c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:32:85:da:82:e5:f1:ba:f0:ab:55:d8:f9:
                    a1:04:48:08:da:b5:86:16:2c:8e:37:03:80:c2:a9:
                    8c:81:c7:0d:94:74:22:5e:d9:12:2c:f5:78:73:79:
                    89:94:43:a2:5b:fb:03:52:7c:74:f5:22:38:cd:8d:
                    6c:71:8e:d8:7e:54:67:74:29:d3:d3:63:ce:63:4a:
                    34:bc:8f:f5:c9:28:9f:ae:93:dd:22:87:6e:d5:c9:
                    4f:60:fd:23:76:a7:8a:5a:08:3b:e6:1e:e1:46:16:
                    fb:cd:29:17:46:5c:2d:44:b4:43:e0:0e:2b:9c:f0:
                    46:42:d4:d1:36:2c:83:d0:a3:a0:42:f0:9b:74:99:
                    a0:08:f5:67:52:c4:7d:14:75:24:e1:b0:f1:9e:0b:
                    a3:f6:03:42:a1:5f:94:f2:bb:c0:eb:91:31:b2:db:
                    1c:a2:d5:f0:f4:9d:5e:df:43:69:99:77:63:54:f5:
                    1f:50:8c:f1:ac:ea:4e:ca:05:92:74:c4:7b:7b:6d:
                    bc:ea:6e:e1:9e:77:15:57:24:02:80:e1:14:30:9b:
                    bd:af:56:29:e3:ef:fe:4f:32:70:b9:6c:2c:aa:75:
                    71:af:04:fc:54:6d:11:37:a8:63:19:e7:51:ec:b6:
                    e7:57:b6:fe:c3:e4:df:45:5a:67:21:c8:c3:6b:d7:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:65:4B:8B:CA:83:AD:23:83:7B:C8:76:45:D7:27:54:98:E2:07:C2
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:0e:17:eb:74:86:44:28:ec:39:e9:2c:fd:84:6b:ce:60:
         a8:3a:3b:19:b8:11:a5:24:4f:c0:a3:05:fa:00:a9:06:c4:f5:
         39:67:0b:3d:ff:5f:88:93:c8:23:f9:18:36:ae:3c:bb:13:78:
         0a:7e:71:f3:a6:e2:f4:c2:38:87:f0:fb:21:81:da:c7:cb:2a:
         3d:29:c6:c6:80:bc:34:df:40:11:ac:d0:0d:4b:ab:15:99:4e:
         59:59:ae:b1:4b:3f:2d:a1:a4:95:31:75:12:00:8c:1c:95:38:
         ee:8d:93:46:10:4f:d0:9b:37:47:66:b1:c2:1b:8f:95:5c:12:
         99:95:d1:df:c7:ab:67:21:17:95:10:34:8a:cf:2c:ba:cd:55:
         51:a4:6f:45:cd:3e:92:2f:98:0d:6c:9b:1f:e6:2b:bb:dc:63:
         73:8f:d0:5b:48:bc:f8:bf:c2:be:d6:21:33:fe:35:09:3f:ff:
         e3:bb:f4:eb:59:ee:b2:77:8d:d4:3c:24:3d:ce:72:19:99:67:
         bf:fd:83:7a:a8:b2:94:b2:dc:eb:f8:87:b9:8d:ec:61:85:9e:
         8d:9a:81:00:83:f4:95:f1:6f:5e:06:de:77:ec:83:50:02:23:
         ea:9d:58:7c:b2:9c:dc:11:f5:a9:05:67:2b:d5:08:b8:81:d3:
         ab:3b:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:23:20 2025 by rpki-client