Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
File:                     7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft (raw, json)
Hash identifier:          0/0xawWkhJKXL+OjrzpcnYdF4xAjd5Wu2bUxoipTM5s=
Subject key identifier:   2F:88:42:96:FA:BF:6C:D1:E4:D3:CF:08:9B:7D:68:9E:85:70:D8:9E
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Certificate issuer:       /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial:       019672663B7AD4142E6B21D174DF925F7B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
Manifest number:          0488
Signing time:             Sat 26 Apr 2025 14:00:24 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:24 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:24 +0000
Files and hashes:         1: 7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl (hash: BBt8EwdZstjU80v/02Z98T79vNQ6GS1I0Z5JFk0JRAo=)
                          2: ph4TcOIZbEQDwoxIlVRI4f-t_yg.roa (hash: I5D0ovDZGZlRmOfOF4fYKNNsYs4EU8p2jyxoinIP2U4=)
                          3: vZaHpkts3TjqsPjS8msZ10JjtWU.roa (hash: G1otwZGxfTUi6xjTYZ7QeCW5+jjbNs8UtP3BujI7U6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:3b:7a:d4:14:2e:6b:21:d1:74:df:92:5f:7b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
        Validity
            Not Before: Apr 26 14:00:24 2025 GMT
            Not After : Apr 27 14:00:24 2025 GMT
        Subject: CN=2f884296fabf6cd1e4d3cf089b7d689e8570d89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:75:0a:81:ef:bf:7f:b8:e1:55:a7:c6:74:
                    44:a5:16:cf:29:ec:61:60:f5:f3:b2:67:8e:fb:63:
                    89:5d:ed:5b:3f:23:c7:30:2c:b0:dc:fa:d5:54:eb:
                    c3:34:99:89:38:4b:9e:98:38:65:5a:1c:25:03:a3:
                    23:70:3f:2a:1d:79:fe:9c:4f:cd:4e:81:4b:40:6d:
                    9f:f0:69:f7:34:4d:7c:49:06:a7:52:34:37:74:28:
                    0c:5f:f1:9d:41:2e:e3:b8:83:6e:4b:7c:23:90:f6:
                    86:84:70:1d:62:8c:52:f9:45:e1:ae:ec:d9:16:93:
                    8c:dd:82:8f:5a:68:99:23:88:97:78:c9:95:f6:46:
                    8a:18:13:78:bc:43:87:65:64:0a:bb:78:66:90:16:
                    79:8d:4f:90:8a:e0:85:40:63:03:94:a1:12:cb:f0:
                    ed:e7:5b:24:61:a1:c8:36:f1:54:d6:bb:ae:8f:3b:
                    fb:e9:e9:ec:b5:0b:d7:d9:36:26:48:1a:d9:52:fb:
                    3f:2e:41:0b:c8:7e:5f:a3:14:ec:d2:4e:68:cc:7d:
                    e5:cf:e5:a8:f0:6f:05:1a:e5:00:22:2c:2b:bc:f7:
                    9d:e7:00:a6:9b:00:e3:a9:8d:f6:1b:97:57:a4:04:
                    f1:3c:54:ec:6d:6a:e3:d6:0e:32:95:52:12:18:c3:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:88:42:96:FA:BF:6C:D1:E4:D3:CF:08:9B:7D:68:9E:85:70:D8:9E
            X509v3 Authority Key Identifier:
                keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:89:8c:ca:d0:f3:4b:27:ee:b6:ec:b6:17:24:73:22:45:1b:
         59:86:91:51:14:ab:8d:83:e6:23:71:43:3c:57:d7:f5:79:35:
         68:d9:4a:4a:72:5e:c8:86:84:6e:f0:8a:2c:ba:b3:dc:fc:02:
         11:88:ca:16:24:ad:2d:5e:2e:01:18:73:fc:1c:be:93:aa:ee:
         e4:0e:c5:f4:7e:c7:e7:f2:0a:9f:69:4f:35:f3:2d:4b:cd:16:
         72:99:e0:4c:39:a1:09:bb:05:f6:7f:f9:a8:50:ee:6e:15:c1:
         27:03:1e:59:80:60:74:68:70:47:87:2c:8a:14:cb:69:a2:73:
         23:24:d9:6b:67:29:ee:4c:0e:e9:b7:52:c2:02:ed:ae:f3:33:
         88:c9:fa:f8:a6:c2:85:57:92:7f:60:d3:3a:d0:fe:95:2b:45:
         0b:e5:00:35:db:32:93:9f:c6:b0:f5:de:5f:6f:e4:6d:45:7b:
         9c:92:68:36:80:82:5e:a6:d7:9e:47:b4:41:1d:54:19:fd:2b:
         06:25:38:e8:fa:f8:40:18:67:8e:17:9a:8f:c8:1c:98:53:e8:
         62:30:02:08:5c:9a:f8:38:f4:86:c2:34:8c:b2:1a:c6:e0:64:
         98:0a:42:49:3e:1d:01:f5:45:11:53:75:6f:e7:e6:0a:a5:dc:
         24:44:f7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:58:25 2025 by rpki-client