Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File:                     2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier:          ll5rUouWOovhYrwDrp4XB8nUcvRD5HFF74uyInPofoY=
Subject key identifier:   B7:D3:A8:31:14:F5:44:07:38:CA:5F:2F:DE:A7:2E:8F:E2:56:3A:31
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer:       /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial:       0196759E736BDB2D3CA666267BCF5843C067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 05:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:40 +0000
Files and hashes:         1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: s44IPlmoy6cajnOUXbko8nZBfzWPz/Bi5ZOLfDIiVzw=)
                          2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:73:6b:db:2d:3c:a6:66:26:7b:cf:58:43:c0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
        Validity
            Not Before: Apr 27 05:00:40 2025 GMT
            Not After : Apr 28 05:00:40 2025 GMT
        Subject: CN=b7d3a83114f5440738ca5f2fdea72e8fe2563a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:c7:ad:b7:37:01:94:b3:04:61:7f:a9:07:
                    60:e3:51:24:01:13:01:ac:02:9b:42:9a:f4:ba:83:
                    6b:92:a8:f9:31:14:93:df:32:95:d7:b3:0c:be:91:
                    fc:2e:ac:c7:09:60:c9:b7:00:6a:2e:b0:bb:b1:94:
                    bd:28:5c:45:d5:95:47:39:56:2e:24:67:ed:ce:ff:
                    5e:c9:7a:39:06:4a:96:2b:43:75:5f:ba:d8:9f:9f:
                    bc:48:2c:55:fd:c8:16:b3:5a:5a:f2:2b:96:82:b5:
                    4b:2a:06:23:7f:eb:cd:a8:c0:6c:68:19:5d:74:4c:
                    f4:f3:60:13:ce:1c:95:20:c3:06:a9:6b:85:33:46:
                    51:c2:37:6b:03:96:ac:48:60:65:02:a5:8d:5b:de:
                    f9:de:7c:8f:e9:88:97:13:4a:c0:01:25:f5:fc:dc:
                    64:a3:f3:7f:48:d1:5a:3f:c3:75:5a:1c:0c:ed:4c:
                    70:88:4e:54:c7:fc:09:32:60:c5:7d:cf:f7:61:ba:
                    a8:bc:2c:e4:c7:83:d3:e5:43:92:6c:f7:0d:de:fd:
                    e2:37:6e:37:52:aa:1b:63:3e:fb:f6:19:89:f5:03:
                    72:4c:e5:83:a4:17:a5:bf:8d:ec:ea:3f:f0:fe:33:
                    5c:f0:5d:cf:f3:08:33:99:5a:f2:83:8a:6d:bc:96:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D3:A8:31:14:F5:44:07:38:CA:5F:2F:DE:A7:2E:8F:E2:56:3A:31
            X509v3 Authority Key Identifier:
                keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:50:95:c5:92:c5:5c:8a:1c:1c:70:aa:e0:e5:c9:55:8e:65:
         38:c0:45:3b:be:1f:fb:76:8c:d9:fb:39:a8:3f:0a:8b:ca:ea:
         8f:0d:8f:1d:a1:97:5c:1e:e1:37:e6:fa:a7:a4:25:55:06:45:
         0f:e0:3a:b2:8f:da:43:7c:b0:39:ee:39:aa:0d:25:e0:4c:34:
         55:5e:7d:f0:cf:a6:2f:fb:62:27:51:88:89:94:bc:d6:28:76:
         a7:2d:5c:0b:f1:9e:9d:67:81:47:1b:34:c7:f9:f4:fa:a8:8a:
         fe:11:e7:1d:78:a5:31:36:01:4c:8e:11:28:c9:ba:03:06:f2:
         86:1a:6a:da:e1:1e:d2:74:37:a0:09:47:6f:09:54:92:0c:79:
         f8:16:6f:59:ba:22:c8:36:7d:1b:d3:11:45:d8:8c:5b:09:f2:
         1c:03:e5:5c:72:53:c1:9d:b7:c4:c5:bf:bd:77:4b:c0:3c:39:
         f2:ae:e5:f4:14:6e:41:b0:20:08:0f:e9:5f:18:0e:24:4b:98:
         58:d0:1f:4c:5e:f4:e5:95:a9:0e:c2:db:25:ca:f6:f0:62:f9:
         24:59:1b:02:a0:43:06:b2:be:bd:ee:3f:ac:7b:3f:62:1d:01:
         2a:af:42:45:cf:8e:db:97:20:0e:05:60:8b:aa:a2:70:cd:78:
         02:71:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:30:17 2025 by rpki-client