Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File:                     cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier:          nGCQwvi2tp52roLzJRp66sZkR/wKkPUZTuNM7QEzGIU=
Subject key identifier:   6E:7A:54:EF:B3:88:2E:D7:30:DB:5B:EB:BC:C7:E6:B9:9A:4A:FD:62
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer:       /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial:       0196760CFB1A92AC5F7580E1878F619C1152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number:          1512
Signing time:             Sun 27 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:24 +0000
Files and hashes:         1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: EXRXGd6fnu3P9pLgFu0abxeUVxBtnM+fHIBWuHH319s=)
                          2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:fb:1a:92:ac:5f:75:80:e1:87:8f:61:9c:11:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
        Validity
            Not Before: Apr 27 07:01:24 2025 GMT
            Not After : Apr 28 07:01:24 2025 GMT
        Subject: CN=6e7a54efb3882ed730db5bebbcc7e6b99a4afd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:04:b0:f2:03:23:49:cb:9d:df:49:e1:d8:
                    ff:36:2b:f8:fb:be:76:a8:09:47:12:1d:21:35:43:
                    3e:4a:51:96:1b:ee:f7:24:a5:21:fc:bd:6b:da:74:
                    49:6c:2f:57:8a:44:ba:c3:31:1f:8a:d8:84:c7:ae:
                    ce:35:a3:15:d1:7d:3c:5a:26:11:ef:7a:12:e3:a9:
                    13:0b:8b:f7:d7:d9:07:77:61:01:fb:e5:0e:7f:6f:
                    e1:8c:f9:55:39:90:9a:f3:5a:36:0a:27:ee:86:c0:
                    64:e2:13:cb:c8:36:46:9d:90:72:2e:db:31:4d:e3:
                    b2:25:a5:a0:50:49:d4:df:be:4f:5a:72:4e:c1:c9:
                    38:3d:ac:d8:59:9f:0b:81:20:a8:06:42:87:8c:90:
                    d5:a8:e3:c6:b0:35:ab:9a:a0:84:dd:74:71:fd:86:
                    80:27:33:a1:07:4d:a2:50:28:c1:2a:2d:9b:56:93:
                    f5:66:b9:1d:39:33:4d:59:be:15:d3:48:ca:23:15:
                    cd:c1:e7:1b:88:a7:5e:d0:c0:48:a3:e8:d2:6f:18:
                    4e:6b:b0:bb:49:0d:37:65:56:30:8e:fc:65:f4:17:
                    66:6e:38:37:59:e9:36:49:42:d3:9d:2f:b2:ea:4e:
                    71:2a:f5:b7:6a:af:53:c3:e3:50:89:2e:07:83:dc:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7A:54:EF:B3:88:2E:D7:30:DB:5B:EB:BC:C7:E6:B9:9A:4A:FD:62
            X509v3 Authority Key Identifier:
                keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:9b:2f:e6:c2:18:31:bf:e7:5f:b2:a6:5c:6d:eb:77:61:
         d6:1f:0f:ba:c9:44:a5:3d:70:57:ab:ed:e3:74:4e:06:11:3f:
         54:90:dc:25:4a:9e:ad:91:ee:ed:a3:d0:a7:12:d5:74:a1:5a:
         21:df:53:60:1b:72:0d:ee:42:20:d1:24:fd:ad:e8:0c:02:59:
         e6:32:ef:2f:a8:b5:07:98:70:5b:45:3b:75:59:7a:99:af:52:
         3b:b3:f6:54:1e:49:c8:fd:36:cb:34:32:d8:67:7c:5b:90:27:
         6a:8b:59:11:06:83:0c:7a:82:23:f0:74:aa:f3:46:a3:a5:95:
         7b:9f:03:da:5d:c3:b7:9f:74:5e:54:b6:4c:2e:db:bf:7b:5b:
         80:08:f2:3b:6f:ed:cd:9e:8d:0d:65:df:00:08:f0:8e:ad:a0:
         41:9b:d5:6a:a2:b2:2a:62:2d:2a:6d:08:04:f8:0f:04:3c:b8:
         66:b2:1d:94:04:1d:de:07:03:dd:30:48:f2:ca:0e:07:b5:dc:
         38:c1:cc:c2:18:5c:06:fc:90:d0:5b:0f:f5:b2:28:88:12:33:
         6d:b6:17:80:73:b6:80:ce:5c:4e:9b:45:48:27:6f:a5:7d:76:
         c0:f2:7d:ae:9c:8e:e0:2f:b1:ab:db:18:ea:a6:b1:5f:36:66:
         32:b0:4d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:09 2025 by rpki-client