Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          f2QUqZAgmDE+SW4qjDnSUyvDcoHqlihZ7msYiB4lK28=
Subject key identifier:   41:94:7C:ED:CC:7A:F5:B8:F9:51:ED:98:C3:7B:84:F1:F3:87:6A:F1
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       0194BB29523B52689DE6AF7A496255948766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 07:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:34 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: H24vi+e2gvIdNE03so5gGAPZOkW4mslejSTuRQSe+ws=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:52:3b:52:68:9d:e6:af:7a:49:62:55:94:87:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: Jan 31 07:00:34 2025 GMT
            Not After : Feb  1 07:00:34 2025 GMT
        Subject: CN=41947cedcc7af5b8f951ed98c37b84f1f3876af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:d0:6d:0a:6d:9a:ee:96:ac:66:83:ad:d3:
                    81:cc:47:23:82:a5:db:c7:50:bc:40:9b:6c:37:e5:
                    9c:3c:01:20:99:b8:a1:ca:66:84:10:d7:e3:ba:5e:
                    12:5e:72:b9:19:76:e7:66:fa:64:ac:67:3b:a1:8a:
                    67:e9:a0:f5:9a:c3:c3:12:0d:89:1f:58:77:b9:9e:
                    b7:72:0c:94:2b:45:65:1c:d7:eb:a9:ff:76:11:40:
                    62:d1:6a:e2:a0:27:09:e8:64:5d:4b:8d:dc:98:87:
                    c5:dc:39:85:d9:af:e5:7b:b5:c8:56:ec:c0:ca:72:
                    2a:04:36:32:c6:26:fc:eb:c2:04:e8:7a:0d:76:5d:
                    2b:37:ba:63:34:26:68:ac:5c:fe:b0:c9:45:59:0b:
                    a1:b6:01:1e:d3:43:e1:4f:e0:0c:85:26:01:2c:b6:
                    51:fe:8f:af:41:87:c0:50:60:ce:13:f1:15:c0:30:
                    85:46:c0:25:8f:b9:0a:7e:3a:ae:5a:4b:cc:b3:48:
                    e2:ed:a9:7f:ef:2d:41:c7:05:9e:2c:63:11:53:1c:
                    5e:c8:ee:02:b0:ad:4f:e1:ab:ef:bb:55:11:2c:ef:
                    68:eb:44:18:bb:37:b2:22:f1:8a:d7:23:67:c6:9d:
                    46:56:06:65:a3:5c:e6:f7:31:52:1b:c3:7e:af:39:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:94:7C:ED:CC:7A:F5:B8:F9:51:ED:98:C3:7B:84:F1:F3:87:6A:F1
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:ab:7c:7a:77:72:0a:5f:67:c5:e4:7a:f1:85:05:48:cd:
         5a:e4:d2:c1:4d:3b:b6:bb:9a:4c:c4:53:78:5c:1a:d1:15:6a:
         f8:57:61:fc:45:c7:f5:b8:6b:47:be:bb:9b:b2:cd:59:c7:aa:
         ff:df:96:2c:5a:e0:63:80:3a:c5:76:d4:3b:e1:5a:f5:10:4b:
         68:00:88:49:97:01:86:19:ac:c3:6a:41:29:19:e3:ef:fb:16:
         02:67:8d:d1:3d:e3:c0:ee:35:c8:13:84:c1:ce:ec:fc:63:b1:
         4d:95:54:8a:27:e4:4e:0b:f9:65:f6:fb:6e:40:cc:3a:e4:20:
         13:38:e1:a8:4e:18:c0:44:9d:5b:41:6f:71:76:fe:a7:77:9e:
         a0:fc:33:41:23:48:a5:f9:69:51:ef:f6:c0:ee:ba:8c:c3:bc:
         63:e8:18:fa:fb:bd:09:85:1d:14:fc:35:ed:2b:2a:5b:53:70:
         0c:e5:bb:3c:7e:e3:ac:22:07:b6:74:d8:e7:da:d6:cb:e3:29:
         24:ba:fb:8d:a5:7e:2e:8b:02:ff:d8:c4:a8:07:8a:56:4a:d4:
         28:06:3d:59:8a:f0:b8:3e:5e:a0:d5:d3:e2:41:b0:b9:1c:5e:
         85:46:b6:b3:57:51:fc:bb:32:df:39:5a:f9:35:d6:ff:df:68:
         d8:34:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:40 2025 by rpki-client on console-fra.rpki-client.org