Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          23rvzEdowfTxJ99z7hLJ7tzJFmzrbEI60+33z2AnqtI=
Subject key identifier:   44:52:2C:F7:FF:EE:7B:73:B0:5D:87:BA:DC:F7:FF:E7:A4:36:51:E4
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       0196CBAA00F20B269DA841B72EE06292A7AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          067F
Signing time:             Tue 13 May 2025 22:00:38 +0000
Manifest this update:     Tue 13 May 2025 22:00:38 +0000
Manifest next update:     Wed 14 May 2025 22:00:38 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: a+61JeSwLhJHRTkTBIeC/onJxEymW6ZEn61yiKFCzv4=)
                          2: vLdBJDezpJno-D8_Q7lIDU0Du3U.roa (hash: dLqRsVS/QG1E17yczM1Bj1D5q8gcGXc21nKm6H/uN8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:aa:00:f2:0b:26:9d:a8:41:b7:2e:e0:62:92:a7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: May 13 22:00:38 2025 GMT
            Not After : May 14 22:00:38 2025 GMT
        Subject: CN=44522cf7ffee7b73b05d87badcf7ffe7a43651e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:ba:7a:15:00:37:b0:d4:85:16:2f:8a:e5:
                    76:9d:3a:0a:2d:2f:ef:c2:1e:9a:b9:08:41:65:19:
                    8c:c6:56:4b:22:ad:5a:0a:83:56:2e:9d:57:1f:f3:
                    30:2c:38:ae:e4:52:3d:92:3b:4c:22:5c:d9:f5:fd:
                    6c:0a:9a:99:e8:88:8a:10:06:55:25:49:da:c7:70:
                    41:df:bb:2d:7e:85:55:b0:14:49:ab:83:ec:fb:ca:
                    af:13:52:bb:8f:62:51:d7:09:a6:e6:f0:55:7f:25:
                    1c:be:95:12:97:1f:b8:fe:3a:74:d6:4b:d2:63:f2:
                    12:65:1e:e4:98:4e:0e:a1:c0:08:1b:ee:08:20:ac:
                    52:28:0b:dd:d8:c1:66:cd:f7:4e:54:c9:a2:91:ff:
                    01:e8:0d:d0:98:07:3d:26:33:5b:f3:7e:36:5e:9b:
                    07:c3:41:95:10:7f:5b:72:f1:ba:75:04:fb:b1:8a:
                    9e:dc:3e:7e:36:03:9e:19:ab:07:cd:35:ba:ae:ba:
                    13:90:0f:38:e1:0d:fa:a3:a9:93:a3:2e:f6:ee:b9:
                    7d:95:07:a9:2f:ff:ab:b2:ea:1c:42:8f:9c:cb:b3:
                    2a:25:c5:2b:c5:16:c1:8b:08:8a:5c:55:58:ec:73:
                    18:05:f8:df:fc:c8:3b:3d:45:71:c7:90:11:fd:6d:
                    ff:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:52:2C:F7:FF:EE:7B:73:B0:5D:87:BA:DC:F7:FF:E7:A4:36:51:E4
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:86:5a:99:4d:23:29:03:a3:75:1e:64:31:86:d5:0f:60:15:
         f3:03:6e:15:0b:81:73:40:36:66:99:d3:b6:ba:49:03:48:23:
         f9:4d:1b:e3:e9:d4:ef:af:8d:89:6f:81:f6:12:af:2a:82:71:
         bc:6c:01:a8:d6:35:75:f8:d5:a9:72:eb:b2:26:3e:dd:cf:4f:
         6b:b7:16:09:4d:5a:7a:33:8b:7a:89:f3:cc:a6:54:3e:e2:86:
         ae:39:8e:94:5f:96:e2:92:24:52:31:63:15:85:12:4f:31:5a:
         33:bc:94:01:8f:89:69:c8:5f:3e:ef:4a:bd:9e:fa:aa:ab:1b:
         c4:0a:b4:fe:ee:6e:93:9d:51:43:96:14:8a:1b:69:89:54:21:
         3c:9c:09:73:0b:e8:47:5e:90:72:5a:71:dc:d1:3a:2f:1f:71:
         ed:9a:66:fc:94:90:bc:a5:08:36:c7:23:90:e7:ac:0d:60:57:
         5f:43:80:7b:ef:44:cc:45:4f:3b:02:f9:d5:28:1a:f1:7e:e8:
         92:72:25:5e:ab:d1:9e:e0:30:0b:a0:71:46:6f:f4:af:16:e0:
         73:0a:60:8a:9c:77:35:64:13:7f:c5:15:01:9f:a8:7a:5d:7e:
         3a:e8:05:9f:95:98:07:e6:c9:52:e5:5f:e2:b2:3c:f8:8a:1f:
         70:df:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:17:13 2025 by rpki-client