Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File:                     7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier:          2YlBg6nBEoSJKKh54H5yqU3pIVqfoDf+O4vLZli7660=
Subject key identifier:   9E:88:F4:80:6F:1E:C0:5C:8E:0E:2A:3D:EE:BF:1B:05:15:DE:38:64
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer:       /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial:       019674F980C836D3BF019C46E5C455A291FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number:          14A2
Signing time:             Sun 27 Apr 2025 02:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:30 +0000
Files and hashes:         1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: TlGuOO/yPXUvin/NJeVWToydeFr+/wh2Z7kO4QLLEAQ=)
                          2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:80:c8:36:d3:bf:01:9c:46:e5:c4:55:a2:91:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
        Validity
            Not Before: Apr 27 02:00:30 2025 GMT
            Not After : Apr 28 02:00:30 2025 GMT
        Subject: CN=9e88f4806f1ec05c8e0e2a3deebf1b0515de3864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:3a:69:47:f0:ea:ff:80:b1:98:2b:fd:73:
                    0e:a0:07:22:d3:36:94:e0:2b:df:0c:fd:5a:84:c3:
                    59:3e:b5:fb:5e:b4:8c:c6:ef:9a:1c:8f:9e:9b:9f:
                    d7:d8:8a:9a:08:d4:fc:5f:99:3b:a9:c4:64:eb:8f:
                    36:66:73:47:80:ad:a9:12:20:1e:ca:26:2d:ce:1e:
                    ba:21:02:1b:a1:95:f8:e3:4a:5c:6a:ad:64:a8:d8:
                    d1:b0:03:de:1e:5b:22:73:ca:b3:cb:6f:39:f9:25:
                    5b:64:89:66:87:1a:5f:a3:35:be:76:74:36:eb:97:
                    1c:6a:6e:46:e1:70:77:9e:ed:e8:6e:39:30:cb:27:
                    fc:f3:d2:64:1b:fa:d3:f2:19:fa:be:25:8d:69:d8:
                    e0:e4:c9:f3:05:99:9c:e0:39:51:b3:a3:55:34:02:
                    9f:cb:9e:15:25:98:ec:25:3e:7a:79:0f:6b:9f:09:
                    37:4d:7e:28:10:07:e1:1e:bb:2b:2e:d8:e0:0b:37:
                    27:b1:d6:88:0e:66:99:73:38:15:ac:fc:6b:0d:e9:
                    fd:98:81:39:a5:95:e0:aa:9c:de:00:c2:b2:08:d7:
                    d7:8e:aa:95:97:14:e7:23:da:69:5b:b8:5b:70:5f:
                    d3:ff:96:92:05:39:ee:94:ca:4d:9b:74:b0:61:c2:
                    47:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:88:F4:80:6F:1E:C0:5C:8E:0E:2A:3D:EE:BF:1B:05:15:DE:38:64
            X509v3 Authority Key Identifier:
                keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:19:3c:2f:9b:7c:7b:c7:df:dc:19:c6:1b:f2:60:23:76:
         25:02:fc:61:22:45:0f:62:78:f2:16:f1:1f:40:c3:15:88:53:
         a0:f4:7e:09:e4:bc:51:49:8d:8a:af:f3:18:23:2b:27:60:3e:
         3f:47:d3:63:13:aa:5e:04:ba:d6:51:6f:1a:b3:03:c1:c0:58:
         b0:1d:7c:9c:50:55:25:4b:08:ce:25:ff:72:53:36:59:e5:8e:
         37:78:cb:38:ff:b8:6f:97:ed:01:7c:19:7d:a2:fe:2c:cc:a6:
         1e:c9:5e:01:27:d7:a7:1e:ed:6a:c0:d6:96:cd:bf:5d:48:1f:
         3b:57:0a:6c:de:f3:49:d6:c2:65:cd:c0:3f:ef:aa:cf:cc:6a:
         dd:8d:8b:64:e0:a2:38:6d:0b:df:89:fb:4d:ec:58:7c:08:5d:
         e0:f0:c2:f0:5b:0b:7b:57:03:ae:fd:c8:1a:9a:d0:a3:8f:2f:
         e9:a7:73:15:9f:11:91:72:72:64:6d:1d:ff:69:49:cc:3a:d5:
         39:c3:7f:ad:17:52:9c:f0:19:74:22:e1:24:21:82:f8:01:c8:
         9d:23:fe:95:ad:c1:00:d6:e2:e2:c0:76:fa:7b:29:1b:9a:49:
         1c:be:17:45:47:2f:8f:c4:e1:48:81:b9:fc:23:48:8c:1c:af:
         c1:9f:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:10 2025 by rpki-client