Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          HA1OtGXSffymS7l2r1ee6znohPbu1+ZdEYQ012oqEP8=
Subject key identifier:   EE:C6:66:4D:7B:47:7F:15:25:02:1E:CC:40:5F:55:66:28:92:D1:38
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       01968021BB04A0B1873FAA6AFF1B46E07AFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          1059
Signing time:             Tue 29 Apr 2025 06:00:16 +0000
Manifest this update:     Tue 29 Apr 2025 06:00:16 +0000
Manifest next update:     Wed 30 Apr 2025 06:00:16 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: Bzl1AM+MTZmW3sDeq8oBPzMNXVedO8w4gsUEhzfhmkY=)
                          2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:21:bb:04:a0:b1:87:3f:aa:6a:ff:1b:46:e0:7a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Apr 29 06:00:16 2025 GMT
            Not After : Apr 30 06:00:16 2025 GMT
        Subject: CN=eec6664d7b477f1525021ecc405f55662892d138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:58:07:07:57:2c:95:4d:b4:3a:ee:47:64:
                    af:29:d4:de:75:1d:4a:03:b0:4e:8d:d9:f1:ad:02:
                    c2:d2:8c:fb:85:4d:57:4f:41:42:e9:89:22:2a:b0:
                    c6:b2:dc:c9:d5:1a:61:70:43:96:9b:e1:c0:f6:59:
                    29:fa:c1:87:f2:29:93:bf:7a:c3:97:88:32:7b:fe:
                    32:ca:00:5a:df:99:96:f8:61:11:2f:74:c3:30:92:
                    b2:29:8b:89:40:d4:8e:f1:2f:69:31:c1:fb:d9:83:
                    bd:00:56:76:db:79:ba:0a:3c:d5:be:95:de:52:64:
                    08:a9:0a:87:7d:37:a7:60:53:d3:0d:5f:f4:7e:2f:
                    df:89:71:8c:6d:65:eb:25:3c:1b:e4:e9:73:88:48:
                    2f:f1:45:72:25:26:15:24:bd:5f:f4:54:ad:19:e9:
                    1c:62:88:e8:e3:a3:96:19:b0:46:12:95:d1:8b:98:
                    ad:e9:34:84:10:e9:6d:be:86:df:89:c5:93:14:6a:
                    c1:a0:ce:c4:ea:38:ba:57:8e:06:f3:74:f8:f9:65:
                    c8:fe:0f:10:4b:f6:c0:c4:2a:93:82:46:5e:53:67:
                    ed:d0:05:68:37:85:8e:79:27:45:62:a3:23:f3:05:
                    3e:ce:13:5d:a7:24:44:3a:ea:43:40:77:16:28:df:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C6:66:4D:7B:47:7F:15:25:02:1E:CC:40:5F:55:66:28:92:D1:38
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:02:2c:d4:a7:b0:04:ff:88:73:b6:15:81:c0:f9:81:05:aa:
         a0:38:4e:23:ea:08:38:3b:32:7e:93:b7:9e:19:ae:bc:91:bb:
         c1:23:76:f3:d3:a4:57:39:46:ce:93:bf:65:34:86:55:f3:d8:
         5d:1d:49:b9:94:ec:8a:fd:82:7a:a4:72:68:0f:4f:d4:0e:ec:
         0f:83:b2:c3:32:73:de:5b:43:d8:f9:de:85:d2:02:86:c6:24:
         4f:50:71:a9:ee:5e:bc:f3:2e:60:e6:5f:fe:e9:83:6a:c9:95:
         64:d9:e5:5d:e3:0a:65:e5:ae:c7:c7:59:52:15:4a:bd:cb:35:
         e8:f9:83:ae:ec:ea:88:47:5d:e6:82:d5:6f:82:5d:3e:f9:10:
         a5:fa:21:4a:39:dd:d4:9f:62:8e:b6:61:bd:a9:d9:75:f3:d0:
         ca:ea:de:a6:40:72:74:45:ff:ab:91:0a:df:2b:d9:e2:14:7d:
         d9:b1:00:d4:14:ca:d5:08:b9:22:1f:47:2c:18:49:87:fc:fa:
         64:bb:98:6e:02:1c:b7:e2:48:f6:f9:80:2c:b5:42:38:54:a4:
         f5:87:a0:81:6b:71:fa:6d:94:2c:9c:5d:b3:40:d2:3b:b4:78:
         b0:54:88:3d:1d:42:d8:36:49:ce:63:2b:df:a2:88:50:a5:01:
         0e:0c:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:17:46 2025 by rpki-client