Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File:                     F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier:          Wz8JdEri646BjJAFoG+MIzIqtiz586bAdn+kXr1eSOM=
Subject key identifier:   A7:59:52:90:80:79:67:D9:30:17:B4:AC:97:0B:A2:71:01:2A:95:89
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer:       /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial:       019699AA88B2BFAA0A0352BD8E424F32E433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number:          07F0
Signing time:             Sun 04 May 2025 05:00:12 +0000
Manifest this update:     Sun 04 May 2025 05:00:12 +0000
Manifest next update:     Mon 05 May 2025 05:00:12 +0000
Files and hashes:         1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: wlAmm9luAV6+2/dnw2jEU+bxYQzijVGM9PNMBTPbd/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 05:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:99:aa:88:b2:bf:aa:0a:03:52:bd:8e:42:4f:32:e4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
        Validity
            Not Before: May  4 05:00:12 2025 GMT
            Not After : May  5 05:00:12 2025 GMT
        Subject: CN=a7595290807967d93017b4ac970ba271012a9589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:e6:a5:7c:53:b6:c0:cd:b4:46:97:0c:3d:
                    80:75:e6:00:ec:11:21:be:b0:d1:81:72:e8:e0:8d:
                    ff:1e:bd:b6:7b:cb:47:85:ad:28:0c:47:1d:24:8a:
                    b0:68:ab:2a:53:4e:a8:71:a4:25:70:2f:8a:66:41:
                    ec:e5:a5:ab:b2:ed:2c:52:f0:f7:d9:50:de:1f:bc:
                    28:2a:5f:42:2e:cc:96:7e:a4:ed:1a:68:be:d5:f7:
                    90:5e:4d:c6:c8:49:dc:96:4a:41:c0:9d:44:eb:11:
                    72:68:39:fc:c2:e9:30:3b:14:0f:06:57:c6:bf:e1:
                    12:84:4a:9b:75:48:1a:99:fe:ba:ac:6e:71:5b:a6:
                    3e:67:05:b3:44:29:58:80:72:a5:5f:53:dd:55:68:
                    57:da:a1:cc:8a:9d:85:75:38:ad:02:d3:e7:6f:9b:
                    f0:1e:50:a8:ad:72:9b:44:9d:9a:06:07:bf:cf:b0:
                    a6:87:43:db:af:ab:77:f2:1e:f3:bb:2a:5a:bf:19:
                    e4:74:32:d0:46:3d:61:04:6d:21:85:f8:32:d2:14:
                    d9:5f:56:79:8e:2a:89:66:8d:5a:d1:c4:6c:57:9f:
                    33:80:d3:74:a5:f3:90:e9:96:37:b8:c4:c2:4b:de:
                    59:a7:ff:39:0e:64:e5:de:d2:34:ed:7b:d5:22:1e:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:59:52:90:80:79:67:D9:30:17:B4:AC:97:0B:A2:71:01:2A:95:89
            X509v3 Authority Key Identifier:
                keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:34:e3:92:2e:2b:9d:8c:ce:b2:a8:e4:fb:e9:b5:2c:2e:ee:
         3b:e3:6f:e3:ed:3c:91:0b:09:f2:0e:63:26:2c:b2:1e:38:a1:
         fd:5b:ad:a3:4b:fa:d4:ef:c6:ac:34:aa:23:8e:8f:d1:94:28:
         79:2c:f4:b6:2a:64:30:c0:08:b2:85:14:38:fb:28:dd:74:80:
         78:c5:33:7a:6a:09:99:27:5a:67:3f:0e:f2:90:97:92:f0:23:
         10:9c:b3:47:a1:09:0f:3a:2b:41:64:9b:9a:a5:9c:33:5f:25:
         f1:2a:d2:72:b4:51:61:be:42:ee:3f:57:aa:dd:b9:d1:f7:df:
         37:cb:b8:d2:71:aa:88:a4:a6:95:af:14:c3:4f:2c:e1:c2:3e:
         0f:30:02:80:9b:f4:d4:4a:28:ca:94:02:73:96:80:98:22:aa:
         79:47:01:53:df:87:53:2d:04:b5:28:f2:ef:ff:ff:67:25:fc:
         dd:80:2a:79:6a:84:cd:2a:69:a7:91:67:e6:d4:e6:85:f3:2f:
         1b:35:51:fa:54:c8:91:35:13:51:52:87:a7:f6:e0:33:3f:b5:
         83:95:64:ad:75:9b:08:dd:43:b3:9f:e9:f8:63:02:fe:d7:42:
         f7:bd:61:fc:e2:73:98:bc:66:db:ba:b8:9b:65:de:a5:b8:7d:
         96:7a:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:33:17 2025 by rpki-client