Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File:                     7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier:          WRt8yPIJTAjALYmTorO7tux2+84a8XUEkrER31MStTU=
Subject key identifier:   FC:F7:CE:E3:1F:F5:1C:67:17:7E:87:13:F5:7D:EE:E9:D2:25:7F:55
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer:       /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial:       019671C233CEF68FF0C7FDD0D83ADA6B66C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number:          150C
Signing time:             Sat 26 Apr 2025 11:01:14 +0000
Manifest this update:     Sat 26 Apr 2025 11:01:14 +0000
Manifest next update:     Sun 27 Apr 2025 11:01:14 +0000
Files and hashes:         1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: vAS9zMvC+eH1o/WFs42jqxsRTXida03KSwx99v5ft68=)
                          2: 9fGQxsuW9o57MuSnTQw97jZkBOE.roa (hash: YnRNIOwoiTRXwdxivY6tYKVNEPgEv0Qon+zlyQpniFM=)
                          3: QQXV9PR2UUw9UDrT_DWglwU8ZS8.roa (hash: uF9Uh/MfGV5Li33CKiFO0iwqxXl5ow/SpNSUJI6hYY8=)
                          4: _y3NM5_0f7MsfhtkcKzuJLDPoBk.roa (hash: bwtNcBrGNEEfhGhbBMEoAmqI9q4hwa8bfh0IBzWlro4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c2:33:ce:f6:8f:f0:c7:fd:d0:d8:3a:da:6b:66:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
        Validity
            Not Before: Apr 26 11:01:14 2025 GMT
            Not After : Apr 27 11:01:14 2025 GMT
        Subject: CN=fcf7cee31ff51c67177e8713f57deee9d2257f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d4:92:b0:b2:43:28:a7:7b:e2:b1:0f:14:5b:
                    99:03:d6:d2:9e:21:6d:3b:1d:3e:59:07:9c:2c:95:
                    f1:01:30:df:af:ec:71:32:df:97:5f:1b:91:2f:20:
                    c4:f1:5e:0c:df:3f:ac:07:60:3b:57:e3:c4:d8:5f:
                    9b:be:71:5a:8a:56:a2:bb:0b:39:b5:ee:10:22:ae:
                    52:9a:d2:4f:c0:a0:08:40:9f:86:91:c9:3f:1e:50:
                    ca:e6:ad:ca:c9:4f:09:10:54:c3:20:5a:72:cf:f6:
                    7b:ee:5b:b0:da:7d:be:ec:1e:22:bb:24:65:7d:d6:
                    d4:12:f8:da:6e:9e:63:ed:1d:9b:bb:db:39:ea:44:
                    3c:57:ac:75:e4:ec:47:76:35:6d:03:38:00:cd:26:
                    c4:f2:3d:be:d6:99:90:12:43:4c:55:52:75:6b:d5:
                    d9:b8:c9:93:14:c5:e2:1a:da:a4:63:af:9b:c1:3c:
                    45:fd:41:ab:0b:2e:8d:99:78:1e:64:bf:5f:c7:fc:
                    b8:b0:ae:80:91:ed:16:4b:72:36:55:99:34:51:17:
                    b7:1b:a2:e6:eb:37:12:9f:a0:17:53:fa:b8:aa:76:
                    07:59:ba:0d:3d:63:69:5a:1b:ae:be:f3:2c:27:0a:
                    19:98:62:f9:ab:94:be:f5:ec:78:d2:79:e2:3d:f4:
                    00:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:CE:E3:1F:F5:1C:67:17:7E:87:13:F5:7D:EE:E9:D2:25:7F:55
            X509v3 Authority Key Identifier:
                keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:4f:32:e8:a5:cd:76:a9:9c:4f:12:61:ea:b3:61:5d:65:
         11:7b:c1:12:70:f9:f6:fe:e8:b2:7d:49:94:a7:c3:57:29:0f:
         0f:91:a1:65:e4:c5:fd:96:30:4e:c6:9c:5c:8d:12:83:d3:57:
         2f:93:8d:be:9c:1e:17:3d:6c:84:08:2c:52:3c:5b:0f:c8:d4:
         54:14:1d:9d:a8:50:ff:ca:bc:45:b6:3e:5c:38:d2:7d:50:87:
         85:60:c5:84:03:a0:a2:0e:27:ae:95:2b:11:70:bb:32:e6:84:
         fa:16:f8:6b:ff:46:b0:a1:24:9f:57:92:fa:27:da:fa:a2:79:
         68:23:27:86:d6:44:76:c1:38:c2:97:dd:39:87:6b:17:43:e0:
         9a:44:d2:93:1d:fd:6e:e2:9d:47:00:11:cd:c4:71:f5:e6:a5:
         47:c4:b6:40:f6:35:36:26:22:99:fd:fc:00:a6:11:bb:12:11:
         5a:12:e5:81:f8:26:d0:eb:55:36:af:ca:23:8f:06:56:e7:9a:
         d9:e0:a3:de:a0:e2:6b:c5:c0:a1:31:31:f6:7d:bb:9d:8a:5f:
         08:a7:64:c7:c8:96:6c:ef:ae:d7:4c:9b:51:01:84:0a:63:69:
         81:e9:7a:ce:03:87:de:6c:04:cc:0f:ec:66:9b:2b:fe:df:2b:
         71:6f:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:27:10 2025 by rpki-client