Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File:                     7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier:          +jx6/VnyQWSP2vxs4EffwSvcflbxYH5U7fkG1RgAULA=
Subject key identifier:   76:E2:18:93:69:80:23:BA:81:40:39:A1:8C:8F:5D:5C:3A:39:99:58
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer:       /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial:       01967DC6BD4A23093041BAFE81DB1187A4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number:          089B
Signing time:             Mon 28 Apr 2025 19:01:38 +0000
Manifest this update:     Mon 28 Apr 2025 19:01:38 +0000
Manifest next update:     Tue 29 Apr 2025 19:01:38 +0000
Files and hashes:         1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: 0Q+4H4sgUJrVZTJY7zccnpsY3T4Vc1qGg5pkeQjR/oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:c6:bd:4a:23:09:30:41:ba:fe:81:db:11:87:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
        Validity
            Not Before: Apr 28 19:01:38 2025 GMT
            Not After : Apr 29 19:01:38 2025 GMT
        Subject: CN=76e21893698023ba814039a18c8f5d5c3a399958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:aa:17:a5:e5:81:af:e0:40:1b:74:89:29:
                    0f:5e:14:81:7a:36:2a:35:b2:3b:64:93:a5:a3:a1:
                    3e:d9:0b:01:1c:bd:b0:30:50:9a:7a:10:ec:8d:fb:
                    33:d0:f2:1b:5e:09:9a:ba:6f:1b:d8:09:c7:0e:2a:
                    96:81:b7:b5:69:77:48:6a:57:86:c8:bf:5e:88:c0:
                    8a:72:b2:98:9c:91:b7:bd:7f:93:29:a4:82:48:02:
                    27:a6:41:84:4b:2d:2d:81:70:cf:d0:43:f6:db:f7:
                    fd:c7:e6:e8:c4:b2:fa:2e:08:48:a7:0d:d3:41:81:
                    53:4a:44:e1:ab:b7:65:70:3e:6f:ef:c9:92:90:e9:
                    47:de:59:29:e4:76:7e:33:0f:b8:82:a0:48:f4:41:
                    84:3d:f0:b0:91:84:57:e8:36:80:6b:40:aa:c8:1f:
                    e3:13:17:81:ed:ad:31:78:0c:ac:17:08:5e:3e:9a:
                    26:f4:4c:5e:05:57:20:ce:ee:c1:6a:67:5e:a8:c9:
                    d5:34:2b:ce:fe:0f:d6:d2:6b:77:c4:14:94:3b:fd:
                    31:78:f8:72:bf:ec:3f:94:f6:d8:ac:cd:e3:7f:4b:
                    dc:bf:df:c9:b0:33:15:04:7b:43:3c:e1:f7:0a:f5:
                    68:4c:27:1a:23:52:8f:5f:9c:0a:2f:51:e4:92:d7:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E2:18:93:69:80:23:BA:81:40:39:A1:8C:8F:5D:5C:3A:39:99:58
            X509v3 Authority Key Identifier:
                keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ac:51:ea:b0:1b:12:6d:34:b0:25:ce:3c:12:08:01:ff:5e:
         6a:74:44:31:53:10:22:3f:50:ca:dc:45:a9:68:ae:4a:ce:73:
         de:6c:16:a5:5c:75:42:8d:7d:f0:ec:30:59:c4:60:66:fe:20:
         83:cc:ff:69:14:f8:d0:b0:06:0a:53:61:b3:8b:59:b6:e0:a0:
         a7:cc:48:55:36:f2:df:47:0b:7e:a5:41:22:d2:0a:5e:61:2a:
         d3:06:5a:50:94:fb:d5:12:1d:f2:d1:a0:af:e2:0a:ce:04:6e:
         94:42:ef:40:cc:11:56:39:34:25:59:e0:b2:da:c5:c2:24:2e:
         29:2c:93:5e:9b:4a:d5:77:46:db:eb:24:ea:f1:a2:63:17:2f:
         30:fd:9d:5e:74:54:09:6d:02:c4:74:51:71:af:ae:81:09:1e:
         8b:c8:b7:c1:0a:cc:96:a4:2b:92:db:d8:18:c3:a0:10:ef:a5:
         10:f3:fb:07:64:3b:6f:23:e4:ea:94:14:1b:78:dc:09:c3:c9:
         90:4f:2e:3e:ae:53:78:c4:3a:56:b5:4a:75:85:57:ac:95:3f:
         bd:dc:1d:da:f3:31:2f:37:7a:52:6b:e5:cc:78:ad:ec:e2:b6:
         00:ea:d2:de:71:3c:fc:d7:ce:26:b4:a2:8b:d4:63:3f:b8:4b:
         ae:49:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:36 2025 by rpki-client