Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
File:                     7600TrX36x3uS4-ENftbnYdmPp0.mft (raw, json)
Hash identifier:          QUsEszNEeXLtpW2mrIOQOVhU5UNKbRf3z2BWqIM1+/o=
Subject key identifier:   3C:65:F6:63:F8:D2:01:C3:57:AD:50:50:28:19:E8:18:A1:85:09:23
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       019678682CF91A5CD4B710CE37DF8A1BE781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
Manifest number:          0C5D
Signing time:             Sun 27 Apr 2025 18:00:15 +0000
Manifest this update:     Sun 27 Apr 2025 18:00:15 +0000
Manifest next update:     Mon 28 Apr 2025 18:00:15 +0000
Files and hashes:         1: 7600TrX36x3uS4-ENftbnYdmPp0.crl (hash: k2ntkBIE71JZ9PCLY3zVcO5Yy1uHP9PWsR+UpQ3bs+I=)
                          2: CpsNBPf3z13iAJuT2Uc6xn49v3k.roa (hash: aqK12du8rkPezSSK2zWASPAljBp90XN1tNxFt4RE07M=)
                          3: U_VYKpyLv0RVfRm74yG5a_Vrkf4.roa (hash: el4MUGQYFxb5aJybMsuuruh6kVWrWKqPLvaGeVjGVyY=)
                          4: WywaCMaoX-4Vjd6cVj-u89uGhyI.roa (hash: AYAIVJDWWfRtiSD4573Cq+miJDAAqjH32NCsFxgcKF8=)
                          5: ffazbT6AbJ_NkXPmtMeO7T90zvE.roa (hash: kXE92CHJw3Af4w1YJfdAvjGIp3FRE0AuqHI90/fFPps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:2c:f9:1a:5c:d4:b7:10:ce:37:df:8a:1b:e7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Apr 27 18:00:15 2025 GMT
            Not After : Apr 28 18:00:15 2025 GMT
        Subject: CN=3c65f663f8d201c357ad50502819e818a1850923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7a:2f:24:27:de:0c:d5:b8:be:05:a0:7f:93:
                    9d:75:7c:00:d8:db:0d:ec:9a:37:ab:73:c8:b5:db:
                    b8:4a:e5:6e:bf:a1:ae:83:98:df:59:c0:c1:6f:e7:
                    d3:ba:74:d9:00:d4:c4:12:c3:ac:a3:30:af:13:ac:
                    01:cc:ce:de:77:d5:2a:45:2b:bd:8d:1d:ad:4d:82:
                    40:7b:13:d4:f9:b7:64:f7:e4:2b:0d:b9:f8:c0:cd:
                    49:8c:cb:c0:91:58:f2:93:22:e6:f5:1e:28:5e:7c:
                    53:0c:c1:b9:5b:ab:53:63:1d:d3:5a:7c:35:e7:95:
                    5e:97:86:b7:80:09:f0:ee:72:25:1d:8c:07:e1:2d:
                    c0:a7:3a:54:dd:ff:84:2b:41:e2:2b:cc:a9:42:90:
                    de:2c:e0:a9:7c:b8:7d:bb:f3:12:b7:85:0f:bd:ff:
                    73:73:63:fa:51:6c:b3:15:54:0c:73:9c:fd:ac:67:
                    89:7b:05:16:d8:b1:6b:34:75:f7:ac:53:f0:63:e3:
                    d3:fa:a6:70:f4:8f:88:7f:96:2a:1b:bf:cc:e3:ea:
                    a1:41:b7:8f:f8:5a:64:a3:76:bf:08:fb:9b:8b:1c:
                    7a:0d:1e:93:4f:d5:71:5f:a1:c9:cf:45:77:95:3a:
                    dd:3c:6b:27:2d:55:ae:ba:7d:33:98:b8:90:05:21:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:65:F6:63:F8:D2:01:C3:57:AD:50:50:28:19:E8:18:A1:85:09:23
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:54:b1:69:f8:66:c4:a8:3c:4a:06:7d:8b:39:5e:34:ba:c9:
         5e:05:a3:89:e5:a1:97:de:ec:9a:7e:4d:91:3e:81:ab:99:a5:
         14:a0:01:6b:8a:27:b3:2e:b4:80:77:07:16:c8:98:0c:a9:1c:
         de:79:63:f8:00:13:22:c6:a8:48:d8:1b:e7:89:7e:5c:12:1f:
         22:3e:5c:b3:c1:9c:d2:2b:6f:cd:c7:4d:55:83:57:e7:db:dd:
         a0:02:41:a9:25:b8:61:94:4b:c7:ef:1e:b4:40:07:98:4c:e5:
         ea:c6:e7:5b:dd:ad:a8:18:dd:1f:39:f2:70:e3:51:15:0a:37:
         b4:b2:15:b7:42:2f:17:5f:c3:93:05:85:e1:f1:b6:c0:e2:5d:
         27:ff:13:57:da:56:8a:35:60:b2:83:26:97:46:62:57:fd:ed:
         12:34:6c:00:3c:36:6e:d3:f0:ea:d1:f6:dd:24:7f:4d:6e:8c:
         f1:87:24:f4:36:0a:96:69:ae:4e:3c:7f:ef:f0:0b:e5:28:21:
         b0:55:34:ea:a3:10:c6:27:d0:bd:ff:d6:7d:3c:88:62:9e:9a:
         45:52:a6:5d:3b:ea:50:f8:de:6e:96:c5:d7:ca:88:bd:8d:83:
         1b:c5:1f:e3:5d:28:65:03:1a:e7:36:fa:0b:38:b2:cf:ad:01:
         c7:07:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:12:58 2025 by rpki-client