Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
File:                     Vz035lyCKPeT9IuOmiDxLC-AuIM.mft (raw, json)
Hash identifier:          RQoiWfCzS7z2YzYd6loNhSyFAqRKun/C+QJOVYpQgKY=
Subject key identifier:   7F:F5:1D:A3:4A:7F:53:F4:78:39:A8:1C:61:ED:67:28:41:67:BD:D4
Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Certificate issuer:       /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Certificate serial:       019684355FB62AFEC1690AA79D19B6ACADAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
Manifest number:          028A
Signing time:             Wed 30 Apr 2025 01:00:12 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:12 +0000
Manifest next update:     Thu 01 May 2025 01:00:12 +0000
Files and hashes:         1: Vz035lyCKPeT9IuOmiDxLC-AuIM.crl (hash: pI4HxHpuyuhJn+fCOtCTlotA85JSO26cZQtZW8No3oY=)
                          2: me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa (hash: KdRhruoB4ssCK1ecxTO4OFeivwA74VFCDUNtwELNI14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:35:5f:b6:2a:fe:c1:69:0a:a7:9d:19:b6:ac:ad:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
        Validity
            Not Before: Apr 30 01:00:12 2025 GMT
            Not After : May  1 01:00:12 2025 GMT
        Subject: CN=7ff51da34a7f53f47839a81c61ed67284167bdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:e6:7e:67:21:23:e8:4b:0a:36:fc:c6:01:
                    2d:0f:dd:75:15:eb:05:ca:b4:79:7b:35:ec:e1:6c:
                    b2:43:e9:99:d4:06:3a:11:41:bc:f2:5b:e8:e1:87:
                    33:c2:f2:40:6a:0a:77:bb:d8:8c:a3:a7:e7:1b:88:
                    d4:0b:6b:3a:c8:08:7b:ef:b6:56:13:39:c2:e9:32:
                    e7:97:25:49:50:6f:ec:1e:2f:c9:0c:54:a2:fd:47:
                    b9:ae:15:71:d2:19:dd:a2:34:df:90:d1:26:14:91:
                    1b:a3:16:45:66:bf:25:45:9a:ba:77:d4:83:65:7a:
                    e2:ef:4d:73:98:fd:23:0f:32:b9:93:21:ae:17:aa:
                    a0:c5:ee:2a:b5:da:ea:89:97:37:95:e3:08:7f:d5:
                    ce:99:b5:a6:18:86:82:48:e9:15:ba:30:ed:2c:75:
                    3a:02:44:8f:b1:d8:2e:5f:cb:15:04:75:97:8c:44:
                    8f:13:19:92:1f:32:58:9f:61:04:ba:05:b7:8f:3f:
                    7b:37:81:94:0d:7e:49:e8:bc:90:1c:61:0e:81:af:
                    48:fe:c1:ca:f4:41:a3:35:38:43:85:28:fd:19:3e:
                    d0:68:88:27:74:12:e0:64:cc:77:67:96:1a:75:bf:
                    c6:44:53:62:77:ca:e4:37:22:c9:ba:60:80:c4:0c:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F5:1D:A3:4A:7F:53:F4:78:39:A8:1C:61:ED:67:28:41:67:BD:D4
            X509v3 Authority Key Identifier:
                keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6f:00:d1:1d:1b:8a:8e:21:19:21:32:d3:53:f5:6f:e7:08:
         ab:91:de:2d:a9:f5:c8:77:4a:f7:95:47:3c:45:47:f8:0e:a6:
         15:37:4c:2c:4f:aa:da:54:79:41:6c:97:f9:12:bb:22:3a:ff:
         cd:90:17:83:6b:7f:d5:75:9c:30:ec:63:e2:14:5b:28:72:3e:
         2e:d4:e7:20:f1:71:85:12:6c:d2:b9:a7:35:72:34:eb:25:7b:
         76:f9:23:d6:76:35:cc:c3:ee:e1:c5:46:f6:72:b9:69:17:01:
         a5:aa:fa:95:3d:d5:aa:76:31:24:d3:38:17:4a:6a:46:05:d3:
         26:bc:19:c1:7a:48:4f:23:f3:89:0d:5f:b5:01:cd:75:c2:b8:
         a3:7a:37:0b:c8:ca:37:3b:2d:21:0e:80:67:94:90:96:d6:01:
         75:f4:2f:ba:85:e7:34:da:fb:c1:fc:01:53:73:7e:64:41:5d:
         75:a3:b9:40:85:42:2b:7a:84:92:71:f2:2f:10:a8:7e:4f:39:
         64:9f:9f:ae:b0:65:bf:e7:a9:73:83:86:f0:a5:f1:e8:e5:31:
         e9:5d:7c:71:b0:46:b5:6a:64:fd:c8:c0:66:09:af:bb:ac:97:
         7b:c6:e1:64:56:29:41:c8:6b:b7:f1:12:81:8c:39:ac:a9:66:
         11:7d:0a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:36 2025 by rpki-client