Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
File:                     7UV_lpwP7DW5JtD3KkfdRLizAPU.mft (raw, json)
Hash identifier:          K171EoFDBecFy8QcCEepYMCf8qCbs3zeAOtTzWxxECw=
Subject key identifier:   B8:8B:92:73:8A:DE:54:80:30:0C:EA:D0:55:CC:C4:F7:A1:F1:47:59
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Certificate issuer:       /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial:       019690031004FA08F2C56A356C0C1E9304C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
Manifest number:          151F
Signing time:             Fri 02 May 2025 08:00:41 +0000
Manifest this update:     Fri 02 May 2025 08:00:41 +0000
Manifest next update:     Sat 03 May 2025 08:00:41 +0000
Files and hashes:         1: 7UV_lpwP7DW5JtD3KkfdRLizAPU.crl (hash: eLhqhgQGMuxlNW1A0gLGMmFbFK/KTPw2c6VeUvUuyH0=)
                          2: g_JNH7gOaAOj_YX1GFwMG5EgUSc.roa (hash: eApqZboLkQTa+wGga+MD4NN9O/ClMD233tgVbWU1Quc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:03:10:04:fa:08:f2:c5:6a:35:6c:0c:1e:93:04:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
        Validity
            Not Before: May  2 08:00:41 2025 GMT
            Not After : May  3 08:00:41 2025 GMT
        Subject: CN=b88b92738ade5480300cead055ccc4f7a1f14759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:55:66:14:79:7b:75:f2:6d:25:5d:e3:c2:
                    39:60:31:77:51:da:c1:55:5c:89:ae:c1:45:08:78:
                    6f:f7:82:e5:09:ac:9f:b9:9c:ed:67:e0:d0:63:65:
                    17:27:c9:8a:d8:9e:11:44:62:38:ea:bf:06:26:e1:
                    f8:e6:e0:e7:63:13:ea:93:88:6c:54:9e:4c:b9:86:
                    e8:38:34:6f:60:bb:9b:f8:7e:b7:97:77:8a:7c:b1:
                    87:6e:df:0a:ea:52:6f:e7:fb:0f:7c:7b:6e:e6:b0:
                    83:ff:e1:bd:53:b1:0f:f6:e9:ec:39:11:cb:d4:84:
                    c5:9e:8c:1a:7f:09:88:33:c0:00:ef:65:40:ab:7c:
                    6c:3b:f2:cf:80:84:14:24:5a:9a:02:50:c3:cd:44:
                    42:a4:ac:b2:2f:3c:c0:69:6b:87:dc:38:6b:e3:7d:
                    1c:b8:5d:36:48:2b:68:1f:06:6a:47:94:c8:7e:ea:
                    40:5a:24:ed:1e:ed:51:f9:c2:7e:02:46:a3:06:97:
                    15:72:32:48:77:84:5d:7a:a5:51:4a:a6:4e:64:34:
                    90:8d:df:ef:ee:fd:55:07:eb:72:25:2e:45:31:2c:
                    26:d2:8c:7b:5e:02:25:48:2b:43:d2:e3:80:11:ed:
                    3c:58:30:97:89:8d:41:bd:ae:d8:b1:27:30:1d:f6:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:92:73:8A:DE:54:80:30:0C:EA:D0:55:CC:C4:F7:A1:F1:47:59
            X509v3 Authority Key Identifier:
                keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b3:f4:0d:78:93:27:0c:ad:76:55:c1:68:fa:28:7f:6e:d6:
         1b:03:03:93:09:84:cc:9a:05:e5:0a:e4:91:fa:75:ee:8e:9a:
         6e:0b:de:41:8d:4e:27:83:7b:62:99:ab:60:fe:49:eb:5c:dc:
         a0:ae:e1:22:6c:e6:84:7b:8b:34:45:b9:de:80:e4:f3:3a:ab:
         9b:4a:bf:83:76:10:bf:9c:df:d1:73:29:91:a0:0b:57:56:f2:
         27:90:10:37:cb:15:17:de:7b:11:d8:94:ec:a5:22:9c:24:ed:
         c3:3a:67:57:b8:47:1e:94:c2:cf:08:c8:f3:73:f5:43:b6:18:
         55:34:75:9c:05:dd:ab:c3:1a:2b:68:8f:c0:ca:df:92:f3:b0:
         88:ad:3b:0c:2c:a2:cf:46:9f:cb:92:e5:86:1f:73:61:55:29:
         e2:f5:f6:20:eb:5b:1b:0d:c2:c9:9f:da:80:f5:90:fa:24:67:
         0e:de:a6:04:4c:d9:83:0a:9b:0b:d0:c2:6c:9c:0d:87:de:1c:
         98:fb:45:12:dc:35:e9:2a:e2:8c:e6:e6:34:cd:21:02:3c:01:
         bb:04:cd:25:dd:57:d7:be:01:22:cf:86:d8:f6:e0:25:03:6a:
         2c:1d:fa:88:7f:3f:55:fc:2f:35:4e:32:f5:f5:bc:da:83:ce:
         f0:7a:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:03:57 2025 by rpki-client