Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File:                     DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier:          iF9Guxh0q6NagsuBmaY8esHU+7NYzXcsFUI+w9W5yW8=
Subject key identifier:   71:7D:2F:AB:55:1D:07:41:16:3D:20:DB:D1:E9:E5:21:5E:40:EB:58
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer:       /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial:       0196741DF461DD409E50902431CA2EB474C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number:          0BB2
Signing time:             Sat 26 Apr 2025 22:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:42 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:42 +0000
Files and hashes:         1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: EzHD/wsvjTKP+DHBpACJx1UVJX5NiYjTHkRNzlpG/lY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:f4:61:dd:40:9e:50:90:24:31:ca:2e:b4:74:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
        Validity
            Not Before: Apr 26 22:00:42 2025 GMT
            Not After : Apr 27 22:00:42 2025 GMT
        Subject: CN=717d2fab551d0741163d20dbd1e9e5215e40eb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:45:97:5d:07:62:79:b5:76:b0:01:47:af:
                    58:09:d4:bf:aa:fa:25:b7:fa:01:4f:aa:34:af:eb:
                    44:7e:61:2d:e8:00:df:99:ad:61:22:73:01:58:22:
                    e0:1f:65:4c:68:37:ef:42:df:76:a4:70:94:0e:43:
                    78:d1:12:de:15:f1:ee:73:0d:91:25:fb:85:76:75:
                    dc:ae:34:38:20:28:4a:8b:ec:3a:0f:7a:39:68:fc:
                    85:62:22:29:eb:d1:cc:a5:ee:25:f9:40:b3:90:cd:
                    f2:09:d0:04:61:4b:9f:23:be:ed:8c:ed:60:e6:4a:
                    78:ba:65:46:15:f6:ce:2b:dd:5d:92:15:e7:32:b5:
                    66:a1:68:7c:4d:32:4a:81:4e:ed:00:2a:3f:69:57:
                    53:2b:e2:4c:ef:7e:a0:c4:c6:f4:95:8d:ee:9c:68:
                    76:75:17:5c:bd:be:ce:e3:ae:84:6b:5c:4b:40:7f:
                    a7:4f:0c:b6:95:43:b2:d1:c8:66:07:04:b2:86:2f:
                    48:54:71:39:7c:b3:8d:8b:5c:9f:fc:81:f1:47:97:
                    ce:3b:2f:72:0a:0c:e9:51:4e:0d:c2:b8:5f:04:88:
                    ad:73:0a:ac:fb:0a:0e:bd:28:68:b4:40:b1:c7:65:
                    35:f1:e9:fa:a5:d0:94:b6:f6:ba:57:d0:2b:1b:08:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7D:2F:AB:55:1D:07:41:16:3D:20:DB:D1:E9:E5:21:5E:40:EB:58
            X509v3 Authority Key Identifier:
                keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a8:28:17:56:14:a5:59:67:bf:66:71:d1:09:b4:15:74:be:
         a1:cd:9d:cc:de:9e:4a:e5:08:1e:9f:d7:f2:04:49:5a:aa:bb:
         71:5d:aa:ee:64:9d:5a:d8:a7:95:ef:82:ba:17:b8:74:70:65:
         ea:69:1e:ea:00:df:78:d8:b6:d3:21:4f:ae:08:1c:f0:96:6d:
         a2:75:a0:bd:a8:30:15:6c:87:63:64:f1:df:03:50:0f:1b:9b:
         85:14:41:3b:d9:b9:ba:b0:a9:f6:89:0a:32:b4:8c:b5:bf:54:
         2f:f7:98:f6:76:f5:0f:70:87:c9:eb:89:b1:6e:3d:3d:b8:ed:
         77:ee:d0:78:59:dd:8a:07:94:ce:ec:16:15:d2:14:7f:97:34:
         0f:63:5b:ec:84:c0:d9:91:66:8c:0d:cb:f1:6e:65:c9:10:1a:
         18:d7:88:9c:fa:b9:ad:37:cc:a6:e8:06:45:84:56:2f:43:eb:
         b4:0b:f9:fb:0e:b9:9a:89:6e:e4:70:dd:cb:f2:96:dd:97:fc:
         de:70:52:d8:da:03:41:cb:d6:c9:4a:5b:03:a0:b1:dd:29:46:
         06:3e:43:2c:e1:e4:88:6d:83:e4:19:96:a0:21:83:42:cc:66:
         c3:57:c9:6b:60:26:dc:00:dc:a5:7c:2c:3d:dd:32:56:5d:90:
         73:cf:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:09 2025 by rpki-client