Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File:                     7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier:          5llf9J85DTgx9pIreQs+DXiUDXDYYxinh97r16Yk36U=
Subject key identifier:   AB:A3:6D:6B:02:85:42:97:EB:7F:48:BA:E5:EB:20:2F:C8:76:DC:F5
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer:       /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial:       019671C1E521BCAADF0BF0F36F565D902C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number:          150C
Signing time:             Sat 26 Apr 2025 11:00:54 +0000
Manifest this update:     Sat 26 Apr 2025 11:00:54 +0000
Manifest next update:     Sun 27 Apr 2025 11:00:54 +0000
Files and hashes:         1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: wIlPrenMfDy+c+plYnsOXWyaDVlTd4XCoUuksvUkEPQ=)
                          2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
                          3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c1:e5:21:bc:aa:df:0b:f0:f3:6f:56:5d:90:2c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
        Validity
            Not Before: Apr 26 11:00:54 2025 GMT
            Not After : Apr 27 11:00:54 2025 GMT
        Subject: CN=aba36d6b02854297eb7f48bae5eb202fc876dcf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:38:a0:36:a2:1a:93:5e:5a:6c:70:99:74:
                    8d:27:7e:72:a3:c8:a7:09:79:31:86:75:f7:50:e3:
                    fa:a0:0c:a4:71:c4:f6:33:eb:05:6e:38:83:ff:06:
                    dc:ec:82:2e:64:2c:9c:30:94:a1:2e:42:5e:e1:af:
                    a1:77:a8:b4:22:6f:a5:d1:2d:fd:58:f8:64:dc:5f:
                    f3:8f:0b:5b:98:f8:00:c9:55:3d:fd:bd:c3:94:11:
                    3c:1b:9e:f7:df:38:a3:18:64:7b:e8:46:f4:10:94:
                    c2:7d:a0:f6:68:26:c1:84:1b:5a:9f:2e:df:94:26:
                    f2:2c:ad:4a:54:85:1c:78:82:f7:b0:ac:fe:15:18:
                    c9:42:25:fe:62:ff:b7:5c:3a:02:3a:b0:6d:33:b0:
                    31:ba:27:08:f5:ee:99:5d:66:66:80:4b:b8:f8:e0:
                    b7:34:74:70:c0:40:4b:bd:cf:cb:67:ce:9c:f3:44:
                    04:54:96:69:80:52:00:fa:02:02:ab:19:1e:a6:69:
                    93:e7:d2:e2:ed:33:4f:f8:47:74:22:e2:4a:cf:0f:
                    15:44:0a:be:01:3a:1b:61:f0:0e:46:1a:65:7d:d7:
                    6b:46:b0:fb:68:a8:ba:bf:e5:3c:e7:69:69:50:fd:
                    a9:9c:78:3a:91:30:10:c6:26:c4:6d:c7:5b:41:e7:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:6D:6B:02:85:42:97:EB:7F:48:BA:E5:EB:20:2F:C8:76:DC:F5
            X509v3 Authority Key Identifier:
                keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ae:7c:a0:f0:0a:c1:3f:9b:15:5e:de:90:8c:a5:22:94:6b:
         13:77:3b:5f:10:4b:d2:1b:5a:4b:60:67:59:b6:5b:0c:6a:75:
         f6:9b:25:45:f5:14:3d:2d:21:51:61:60:82:65:f5:ab:a6:15:
         bb:6e:cf:86:e4:a7:10:9e:ba:1b:d6:02:25:96:03:76:36:3c:
         15:c7:cd:ba:e2:fd:98:65:9b:a2:13:09:3b:61:cd:06:69:dc:
         cf:e6:c1:e4:6a:6c:34:23:25:6d:ff:df:ee:ab:84:f7:45:cb:
         91:45:70:30:1d:dd:b2:ec:33:20:e6:0a:e1:e4:bd:7f:a2:e6:
         b9:5f:40:f1:94:20:dc:80:8e:45:96:f8:62:76:56:42:02:23:
         79:59:76:d2:e0:a2:3a:28:54:2a:d8:3c:7a:cb:2c:07:81:c0:
         88:ae:ff:5c:ed:9e:c4:43:78:84:60:4c:2e:29:6f:6a:a5:c7:
         e2:a0:a9:22:f2:9e:3b:cc:49:11:16:f2:c4:b7:18:46:81:61:
         02:ff:b5:fa:91:39:ad:6d:a9:ba:7a:16:31:06:57:67:9b:c0:
         19:40:2a:62:a3:75:c6:1a:8d:00:09:16:9c:3f:1c:8f:ee:72:
         71:df:cb:24:66:7a:b5:53:94:0b:ad:fc:4e:53:75:16:e4:1c:
         ae:c8:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:04:05 2025 by rpki-client