Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File:                     eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier:          8U7nIs779v+B32bvJO/pX3I/ZbWkJlaPkH5sMSJbVcM=
Subject key identifier:   A8:6D:7F:A5:CF:28:FE:A1:12:16:54:59:2D:A5:B3:6A:5B:52:55:84
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       019699E1DC5E2166DCBA69012B5830174A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number:          0408
Signing time:             Sun 04 May 2025 06:00:38 +0000
Manifest this update:     Sun 04 May 2025 06:00:38 +0000
Manifest next update:     Mon 05 May 2025 06:00:38 +0000
Files and hashes:         1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: rWiyylhyEblPZEg8DnOL+kY3m7m7LzykIkiNp25gI3E=)
                          2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:99:e1:dc:5e:21:66:dc:ba:69:01:2b:58:30:17:4a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: May  4 06:00:38 2025 GMT
            Not After : May  5 06:00:38 2025 GMT
        Subject: CN=a86d7fa5cf28fea1121654592da5b36a5b525584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:65:d6:71:04:8b:1b:90:30:a0:f2:e8:0a:
                    59:38:68:82:34:b7:49:47:50:d3:93:f0:8f:d4:ea:
                    2c:6d:e9:44:5c:ce:43:c0:c6:1b:7a:86:ac:c3:6d:
                    d3:16:1d:e6:d6:59:c5:10:e9:1e:65:02:9e:a3:84:
                    af:3f:26:2b:1c:60:d7:68:8c:f9:30:41:85:ab:04:
                    ea:77:56:87:7b:a1:10:c7:20:2a:22:a1:80:6e:dc:
                    b9:2f:ef:33:0d:e4:8a:8f:23:26:27:96:6a:f4:cb:
                    06:d7:31:af:7b:a7:f4:57:6d:6d:e7:0c:f7:52:6b:
                    4c:5e:25:b0:f9:88:9e:6c:f3:94:44:fa:36:29:b2:
                    da:91:7c:22:85:a0:a7:23:85:0c:6a:b8:2a:2d:97:
                    49:fa:3d:b0:63:2f:83:03:01:7f:e8:d3:82:fa:ca:
                    dd:c6:a6:69:48:6c:f4:6a:da:ec:9d:a1:14:2e:a9:
                    54:09:40:c9:8d:a6:7c:d4:3f:79:b4:2e:f7:8a:c5:
                    d1:98:87:1d:ed:3e:f4:94:e1:62:a2:d9:30:f5:ae:
                    d6:a1:a5:03:6d:ab:f8:8c:67:0c:92:c5:d3:ec:a1:
                    e0:66:3a:d6:67:6d:2c:e3:d6:e3:75:4d:a9:93:70:
                    b4:69:df:5c:85:d3:49:e6:7c:d7:7f:4c:6b:51:ca:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6D:7F:A5:CF:28:FE:A1:12:16:54:59:2D:A5:B3:6A:5B:52:55:84
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:a1:6e:c0:7c:05:d9:9a:f3:e8:98:88:ee:85:6e:c2:5a:
         05:b6:ce:b7:9c:d9:ad:ac:98:ea:76:d8:1b:65:67:41:33:bd:
         67:2c:56:7e:fc:9d:b7:5b:38:1e:57:53:c1:fa:69:27:99:6a:
         2d:4d:a8:b5:b5:91:8f:85:63:a4:39:c5:8b:5e:85:c0:68:f9:
         00:97:3f:c9:dc:b8:ad:ae:ea:c3:94:3f:1f:e0:02:69:e4:63:
         f6:1b:30:a2:14:5b:0e:a0:6e:6a:ed:2a:c0:8a:06:cf:d6:23:
         68:fa:80:5b:d4:a2:67:ba:b3:aa:ea:6e:a7:f7:13:83:0b:77:
         21:51:d9:04:af:33:c2:b6:fb:82:d2:e5:af:74:66:b4:3e:be:
         9b:fd:51:ae:23:0a:23:ea:6b:d0:c7:16:c0:0f:5c:2c:2f:91:
         28:21:65:ed:62:52:26:de:99:d7:17:74:cd:aa:49:d2:fa:20:
         6c:51:ce:ab:73:18:ee:9a:2e:c6:97:b5:bb:41:df:35:25:ce:
         24:8d:bb:0a:74:e1:c7:ae:2f:b1:24:54:0c:6d:3e:86:f1:68:
         67:60:89:a7:29:1f:fe:97:43:8a:9c:fb:86:97:47:55:d7:66:
         2b:0b:93:83:6a:de:73:2b:ed:6e:6a:7f:6b:6a:db:aa:e0:01:
         b0:4d:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:27:00 2025 by rpki-client