Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File:                     C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier:          8Rf/ntwBOopvPYYtEx0KiIK9B9QQNJYc7Rf8fR2zEME=
Subject key identifier:   7D:3E:3F:32:AF:11:62:BB:08:66:5B:78:20:99:F5:9C:00:E8:6C:61
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer:       /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial:       01967D8EE18A381517FE7FCB76FFC91F9B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number:          07CC
Signing time:             Mon 28 Apr 2025 18:00:37 +0000
Manifest this update:     Mon 28 Apr 2025 18:00:37 +0000
Manifest next update:     Tue 29 Apr 2025 18:00:37 +0000
Files and hashes:         1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=)
                          2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: kqTvQMbGtrf5azAc1Spj8+eYmodm6n2Oze31B6v/EV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:8e:e1:8a:38:15:17:fe:7f:cb:76:ff:c9:1f:9b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
        Validity
            Not Before: Apr 28 18:00:37 2025 GMT
            Not After : Apr 29 18:00:37 2025 GMT
        Subject: CN=7d3e3f32af1162bb08665b782099f59c00e86c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:af:60:e1:f7:4f:a6:a9:68:40:35:7d:5e:
                    49:b1:fa:0b:53:03:03:8e:b2:ae:9e:80:b2:f9:7d:
                    e3:fd:cf:c3:e8:80:25:3b:3a:f6:36:2b:08:89:32:
                    6f:dd:c4:a9:32:17:41:a9:0e:71:17:4c:64:49:26:
                    a5:22:fe:e9:df:e8:20:4a:83:0e:da:7e:7e:8c:f3:
                    af:5e:0f:a5:2d:06:40:f3:4f:2a:a6:1c:a9:51:79:
                    0e:06:25:b9:0a:04:62:04:d3:3c:29:d3:bf:4e:91:
                    87:44:2d:6f:b8:86:09:12:77:d9:42:f0:89:ab:e6:
                    ca:e2:ce:f4:26:e9:55:a5:04:f2:58:7a:30:13:fc:
                    3b:90:7d:b6:ad:ad:b5:27:7c:3b:e3:28:db:4e:74:
                    56:df:8c:39:b6:2a:ba:18:49:4f:40:5a:f4:8d:ce:
                    b9:1f:85:37:fb:1e:d9:e3:17:fd:03:44:14:7b:d3:
                    90:66:9a:14:d2:83:0d:a0:cd:a2:98:c2:16:9e:42:
                    8b:2f:4f:d9:f4:2c:1c:70:57:0f:64:01:df:64:ee:
                    42:3b:b6:d9:cb:8a:47:7e:c3:d4:81:93:78:37:00:
                    a9:5d:27:15:1b:ab:ad:ee:83:de:52:3a:ae:56:95:
                    52:6f:25:5e:1a:ef:ee:bc:c3:1b:bc:59:ca:b8:22:
                    8b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3E:3F:32:AF:11:62:BB:08:66:5B:78:20:99:F5:9C:00:E8:6C:61
            X509v3 Authority Key Identifier:
                keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:af:75:33:d7:82:cf:8d:09:90:3e:67:58:35:47:98:62:06:
         e2:71:d8:0e:2c:c5:e2:47:f3:b1:ca:db:03:72:13:5b:96:b3:
         d7:14:4d:6d:02:c5:16:7a:e2:13:d2:f7:4b:29:cf:4c:80:40:
         6a:62:73:ad:e9:ab:cc:db:f7:30:c5:ac:d4:e5:ba:05:c1:4d:
         8d:12:07:f0:ca:c5:e2:99:32:0e:ec:29:a4:a0:f6:54:b8:45:
         2a:30:0c:7e:08:01:cb:fa:ed:a8:61:25:34:fb:6f:01:06:32:
         d7:9f:e4:56:9e:99:e4:bf:5a:4e:11:55:0b:ef:29:30:42:99:
         41:36:c7:74:81:66:b2:3b:d3:51:09:48:bc:d3:fa:c0:4c:38:
         73:28:95:a7:f2:0d:76:5d:54:5b:87:d9:c0:5f:0a:d9:56:73:
         f9:ef:e3:19:79:71:f3:90:2d:ee:f3:7c:8f:a7:1c:b4:e5:19:
         26:db:2a:21:82:53:32:18:30:8a:22:9a:4c:4e:ee:a9:7f:92:
         d0:c4:1c:92:f6:39:06:6d:06:17:1d:5e:63:71:46:c9:da:d1:
         15:f2:5a:61:d2:9a:53:1b:07:b1:a9:a7:e7:83:08:87:98:ec:
         31:53:da:c3:01:5b:bc:32:3c:ae:38:6c:56:ff:ff:a2:c2:85:
         f1:a4:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:07:16 2025 by rpki-client