Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File:                     _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier:          8jT+baMtt5AnrRzeNS8uWtUqdwSu2Frs9vfAhNlGTJI=
Subject key identifier:   78:27:B4:3D:6A:77:68:5B:6E:C2:7A:FF:45:68:A2:7B:F5:AA:26:BE
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer:       /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial:       019679B1E129D045E6B4971B5B54329FBABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number:          01BE
Signing time:             Mon 28 Apr 2025 00:00:22 +0000
Manifest this update:     Mon 28 Apr 2025 00:00:22 +0000
Manifest next update:     Tue 29 Apr 2025 00:00:22 +0000
Files and hashes:         1: CyralhGuX94DIISxgcLaFGkuwEE.roa (hash: jbaQiBUIOwYyUUxeUd5k0D2sxSHilcS8Ozj2S6lNjj0=)
                          2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: xLufcw/Q1m6KcadsBayt0ZzCDYYDNY4qbLZkTeNB04I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 00:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:b1:e1:29:d0:45:e6:b4:97:1b:5b:54:32:9f:ba:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
        Validity
            Not Before: Apr 28 00:00:22 2025 GMT
            Not After : Apr 29 00:00:22 2025 GMT
        Subject: CN=7827b43d6a77685b6ec27aff4568a27bf5aa26be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:9b:25:51:74:d5:53:7a:5f:a2:c6:63:de:
                    48:25:5d:31:55:b6:e6:dd:1c:bd:36:9a:9d:b8:e9:
                    28:d1:03:18:6d:42:a0:e2:8f:ff:cc:61:ff:6f:77:
                    4f:78:d2:17:d2:a6:62:58:26:c9:7b:17:6a:4e:86:
                    bc:e9:0a:32:ee:1e:2d:d2:fa:60:27:19:9e:ad:ca:
                    90:6e:37:fc:c5:10:e6:ab:12:d2:61:8e:ee:8b:25:
                    b3:b9:1b:92:dc:98:a1:9c:1e:2a:09:e7:8e:6b:d6:
                    3c:90:6a:4a:c2:6f:0e:04:dc:15:f6:58:87:1c:85:
                    82:07:d3:95:0c:6f:c1:82:91:e1:dd:76:bc:ae:88:
                    fd:87:0b:90:45:65:75:9e:aa:cc:2d:2a:7b:40:67:
                    dd:40:a1:ad:46:eb:60:95:96:f7:e2:5f:40:9d:ea:
                    13:e9:05:bd:ba:5b:0f:f0:07:a8:ce:c6:47:62:84:
                    34:25:27:e9:9c:e4:43:b2:e8:81:51:88:9d:79:9a:
                    7f:50:0a:ff:7f:7d:11:15:d5:32:a9:09:0c:26:42:
                    84:91:57:50:38:3a:51:ab:cc:51:58:80:49:f7:ad:
                    a9:b4:46:02:5d:c7:3c:a7:0b:98:a7:3f:61:e7:4e:
                    4b:bd:8b:a6:97:eb:23:17:61:d3:1b:33:57:de:25:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:27:B4:3D:6A:77:68:5B:6E:C2:7A:FF:45:68:A2:7B:F5:AA:26:BE
            X509v3 Authority Key Identifier:
                keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f1:45:65:11:3a:bc:e2:22:0a:d4:47:e8:03:9a:d5:9a:59:
         d4:b0:3a:17:cc:6d:84:af:90:5d:73:78:c1:80:03:0a:b0:5b:
         48:68:58:0c:e3:33:6d:30:4a:ce:e5:15:34:e9:04:5b:24:cd:
         a3:f0:a0:03:cf:55:37:3a:5a:4c:99:c2:52:66:76:29:f5:79:
         53:1c:11:96:3c:99:26:f6:63:e2:9c:28:97:91:ec:7e:76:e0:
         67:0b:c5:27:a4:24:7f:49:e5:4d:5a:8c:e4:74:bc:ab:cf:dc:
         d6:26:4a:b7:9f:37:68:9e:6a:3d:4d:ec:92:83:0c:36:31:a4:
         5b:42:98:7a:73:4b:2e:6d:ff:31:4d:71:f2:be:72:86:dd:a7:
         66:cd:a8:19:30:09:dd:e9:94:b6:a4:0f:70:0b:78:bf:c5:cb:
         5c:68:a0:73:4a:ac:b8:b5:06:3c:0e:7f:19:7e:9f:99:38:13:
         d1:55:cb:13:f4:80:d2:a8:0d:93:c3:a7:3e:ab:b7:ca:ee:f9:
         8b:07:16:8f:83:c4:b6:0c:cf:4c:50:11:87:db:2d:88:6d:a2:
         79:04:49:b3:f3:6a:94:d4:bf:5c:88:d7:ed:fc:a9:9e:75:b5:
         6d:64:53:22:f0:2f:6b:e1:28:e5:ab:d4:63:7d:8a:09:08:46:
         75:fd:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:01:22 2025 by rpki-client