Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File:                     7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier:          x0XfCSFf2C1Kj3SiT0oDFQCh5u7maA43/tWcdEJ/oMs=
Subject key identifier:   FC:79:4A:B5:E5:58:65:CE:E6:58:B8:E0:53:C8:0C:79:7B:AC:8A:15
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer:       /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial:       01969E2C692B8A6DFBA63ECE235E910FEC5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number:          03B7
Signing time:             Mon 05 May 2025 02:00:32 +0000
Manifest this update:     Mon 05 May 2025 02:00:32 +0000
Manifest next update:     Tue 06 May 2025 02:00:32 +0000
Files and hashes:         1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: 6Y8DpHaea3iWkUPFYYsnwLuIGUkNEW98jCxkO6C7kFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:69:2b:8a:6d:fb:a6:3e:ce:23:5e:91:0f:ec:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
        Validity
            Not Before: May  5 02:00:32 2025 GMT
            Not After : May  6 02:00:32 2025 GMT
        Subject: CN=fc794ab5e55865cee658b8e053c80c797bac8a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:7f:ca:b0:42:dd:a7:7a:40:71:50:ac:44:
                    05:51:f7:ca:54:ee:57:6d:8a:d8:7f:a0:5a:d4:e7:
                    25:83:86:e3:ae:d0:28:44:e4:77:49:72:e6:3f:ed:
                    1a:20:48:a8:a8:48:14:eb:66:d6:d5:5b:46:4c:6f:
                    45:bb:ee:0b:3b:8a:45:26:6d:5c:05:90:f6:4a:68:
                    86:29:f2:f4:54:23:0b:42:25:3e:08:57:a1:4e:e6:
                    ea:b9:44:b6:ec:33:93:6b:b8:14:5c:34:34:11:7b:
                    85:46:c2:7e:68:c4:90:9a:74:ed:ca:eb:77:28:cf:
                    fa:06:47:14:99:2c:3c:13:66:bd:46:51:1c:42:63:
                    a5:55:59:65:7b:eb:d7:f6:e2:d0:5c:9e:0e:8b:55:
                    83:79:9b:0d:2c:ee:e7:c2:ab:ce:96:d7:5e:5f:62:
                    62:65:eb:8a:08:f5:e4:c1:ae:2e:13:f2:6c:f4:eb:
                    94:04:97:d5:4b:34:5e:34:67:31:f4:47:33:01:e8:
                    89:ae:28:08:6e:c2:83:6c:82:91:79:e0:f2:6a:45:
                    a9:20:1a:75:be:24:27:45:95:8e:2f:0d:aa:56:c9:
                    ae:12:68:5e:75:49:a8:66:27:77:5a:3b:5c:12:ef:
                    aa:80:cc:67:be:7f:06:2e:e5:5d:94:16:0d:77:6c:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:79:4A:B5:E5:58:65:CE:E6:58:B8:E0:53:C8:0C:79:7B:AC:8A:15
            X509v3 Authority Key Identifier:
                keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:76:85:ae:47:4f:40:a8:f8:39:1a:e8:16:24:db:a3:91:d6:
         2a:1c:3d:73:7b:79:85:47:81:e2:27:12:a9:d4:2f:2f:ea:45:
         a3:98:ee:f1:a5:29:5a:e7:5c:95:6f:89:62:ed:79:96:37:38:
         fa:5e:25:48:e8:a4:0e:4b:9f:a1:f2:32:ad:76:ab:9f:93:1f:
         ee:d7:7a:97:74:4d:52:56:b5:1a:8e:9c:be:e9:5d:5b:92:ea:
         0d:c1:6e:f9:ce:e7:69:fc:d6:43:9c:07:da:e6:d9:f6:ee:6c:
         89:4e:ef:ee:1e:3d:56:7e:c5:c5:9d:3e:dc:d1:e0:58:34:f1:
         45:3a:05:8b:84:57:b0:70:03:1e:a5:00:4a:9f:0e:43:98:09:
         8b:50:ff:0a:34:45:34:f9:29:d6:62:19:52:e1:01:4b:2b:b3:
         56:5c:46:c8:38:b3:ce:79:c3:e6:4c:c0:35:bb:b9:96:23:83:
         7a:2e:72:93:4c:6c:a9:09:dd:cb:1e:9f:cc:89:5e:99:b8:b1:
         e0:39:b3:1d:5c:49:89:90:d0:3a:70:d1:ba:0c:c0:74:b2:5f:
         e5:71:93:a3:5b:1f:8c:f6:b2:72:f0:e9:c7:56:6b:16:df:f2:
         19:f1:c3:0f:f6:80:61:b6:53:ee:82:8c:91:58:ee:1a:10:5b:
         25:34:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:47:42 2025 by rpki-client