Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
File:                     78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json)
Hash identifier:          Oy6RlRR5OtRepLhxJ3PgJc3w4U4H6TN681IHJ/IqMZA=
Subject key identifier:   A1:03:D7:74:6F:25:26:4B:84:59:75:E8:9A:EA:7A:B5:D9:48:F4:41
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Certificate issuer:       /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial:       0196764326E844A6D03E9FEFBA7E677DACE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
Manifest number:          1106
Signing time:             Sun 27 Apr 2025 08:00:34 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:34 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:34 +0000
Files and hashes:         1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: FYmXa06+0uz5jNz8C+zfl6x39Og+bmAcT/YI3x54axE=)
                          2: xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa (hash: HUhxo6JRum8cUC4GCldE8jMW5HQn+DFBF6vESEvE0ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:26:e8:44:a6:d0:3e:9f:ef:ba:7e:67:7d:ac:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
        Validity
            Not Before: Apr 27 08:00:34 2025 GMT
            Not After : Apr 28 08:00:34 2025 GMT
        Subject: CN=a103d7746f25264b845975e89aea7ab5d948f441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:82:e7:b7:74:0d:e5:75:23:aa:e2:ef:c1:
                    cf:9b:a3:5c:27:7b:4f:44:93:96:84:54:6c:bf:83:
                    a7:d8:5f:9a:b3:70:6f:10:7e:3e:67:0d:22:36:48:
                    e4:6f:63:e9:3a:13:05:70:e4:7f:f2:0c:74:d1:61:
                    c5:5b:13:74:55:65:92:71:34:07:f7:21:57:37:da:
                    a6:ec:97:87:2d:15:8e:59:6a:ce:0c:82:a5:1b:77:
                    d9:6e:dc:8c:57:c3:f0:11:76:3f:73:f4:f1:6e:fc:
                    14:b2:ed:db:d0:53:2d:52:f2:fc:01:35:35:5d:e5:
                    86:7d:c0:88:58:a1:1e:67:27:3e:34:b7:52:99:1e:
                    99:cb:1f:a3:d9:70:f5:85:d9:be:8f:09:37:70:1d:
                    d1:1c:c8:90:df:0a:9a:bf:3d:88:43:e8:2b:96:e1:
                    6b:1f:6d:f9:67:d6:b1:a7:95:8d:7e:3e:14:00:f0:
                    26:10:93:32:2e:b5:6f:20:5e:ff:2e:b2:a2:87:38:
                    21:b6:2e:51:34:3c:4b:62:d3:15:26:0d:59:f2:24:
                    6e:90:83:5c:fd:73:73:1c:ea:c4:f4:da:fc:df:c6:
                    0f:96:26:89:a1:a3:4e:9e:c7:94:19:2a:de:ff:d8:
                    f3:6f:82:31:6e:27:9f:ce:cd:db:42:9e:7b:25:fe:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:03:D7:74:6F:25:26:4B:84:59:75:E8:9A:EA:7A:B5:D9:48:F4:41
            X509v3 Authority Key Identifier:
                keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:55:a6:9a:91:f8:6b:3e:f2:2c:73:d9:7a:82:b0:f9:6f:
         f4:81:bc:85:3c:58:50:03:b7:de:72:e0:c0:60:20:97:0e:8e:
         5b:2a:4f:dc:d4:c2:d5:fb:21:b7:b6:a8:97:db:61:75:1f:05:
         81:c7:18:bc:1b:67:56:9f:51:81:3c:af:c3:9b:3b:9b:b0:5a:
         41:49:e5:61:1e:ff:ce:7e:34:d4:c6:9f:f3:aa:1b:aa:2b:01:
         cb:85:a7:88:8d:4d:33:d2:3b:a1:a7:7c:f2:02:42:78:db:0e:
         67:bb:b6:88:b8:d6:53:6f:fe:32:f7:7c:3c:e8:db:72:0b:67:
         6b:15:4d:4d:5d:a9:6d:95:c5:81:85:13:d2:bd:dc:54:58:79:
         f3:2b:c3:e7:91:47:31:cf:f4:db:5d:4c:2e:51:5d:c0:1a:ad:
         f4:1b:54:21:2f:cd:14:05:d8:b6:11:fd:89:ab:38:60:4f:0e:
         b7:f8:87:39:0b:a7:f8:ea:fe:47:f9:3e:d8:66:05:8b:69:11:
         bd:df:57:e2:2c:d3:8a:06:f5:03:6f:10:6c:23:b1:c7:37:20:
         02:78:b5:b4:aa:1f:6e:9f:1f:54:d1:ab:85:6d:2e:f4:3e:06:
         a3:1b:d5:83:8f:5e:98:5a:f2:61:a6:93:6c:e7:0e:a3:98:b4:
         4d:b0:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:41 2025 by rpki-client