Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
File:                     7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json)
Hash identifier:          UKppPVLLrTcRdEJc4H4gqjDuVv4+Jx9xaqpplT+7A+8=
Subject key identifier:   56:C8:54:76:57:C0:A6:F0:4A:DF:86:48:BC:A0:39:DF:24:33:BF:7E
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Certificate issuer:       /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial:       0196D0D07B23E79AB4D198A84658CD9E603C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
Manifest number:          0502
Signing time:             Wed 14 May 2025 22:00:45 +0000
Manifest this update:     Wed 14 May 2025 22:00:45 +0000
Manifest next update:     Thu 15 May 2025 22:00:45 +0000
Files and hashes:         1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: uAPe63ZsRGwKz4wYYOxv3Zc/o7fnCaeTIm351MpGMKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:d0:7b:23:e7:9a:b4:d1:98:a8:46:58:cd:9e:60:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
        Validity
            Not Before: May 14 22:00:45 2025 GMT
            Not After : May 15 22:00:45 2025 GMT
        Subject: CN=56c8547657c0a6f04adf8648bca039df2433bf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:49:03:1a:94:f2:cb:6f:e9:4e:d4:fe:a0:3b:
                    bf:31:e2:41:da:47:6a:1d:91:b3:17:5c:dc:26:d2:
                    84:88:f7:c1:a9:3e:9f:fb:2a:69:85:20:c2:50:cd:
                    2b:87:ea:b0:46:c9:e5:4f:ed:81:3f:b0:a8:a6:09:
                    3a:60:7a:fd:4d:cb:5f:f4:b6:dc:f6:39:c7:8d:d4:
                    f1:15:23:00:51:21:9d:c4:13:67:12:09:db:8f:f3:
                    3f:fe:e8:da:ed:d2:68:7d:60:6b:13:6e:39:d4:d6:
                    e8:e7:1e:1d:6d:70:a7:3b:49:1f:b2:30:cc:81:73:
                    d3:d9:02:6a:9d:41:cd:63:ca:05:ca:43:2a:01:8a:
                    1d:56:83:46:a9:4d:69:fc:af:c4:22:48:fb:4a:4d:
                    d9:16:47:9b:b6:50:0e:b3:d1:f0:23:1c:1d:0e:c3:
                    08:36:e4:a5:5e:d9:07:4f:83:2a:15:9a:aa:83:98:
                    d3:3b:01:b2:64:71:ee:b6:f1:24:3b:50:ed:50:0c:
                    7c:43:27:ca:05:c7:45:50:18:db:d7:cf:58:6c:05:
                    d5:fc:3a:b1:b2:98:49:a9:12:65:24:a8:79:2e:1b:
                    ec:8d:a3:ad:37:fb:7e:c1:a8:3d:42:91:23:e4:4e:
                    5a:5e:dc:3f:7b:bc:be:b3:07:00:e8:22:70:f8:8d:
                    f6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C8:54:76:57:C0:A6:F0:4A:DF:86:48:BC:A0:39:DF:24:33:BF:7E
            X509v3 Authority Key Identifier:
                keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:04:f1:0c:43:42:56:42:be:96:c7:9d:fb:9c:d4:ee:48:45:
         e4:b8:9a:b4:72:5d:82:0d:4e:59:51:20:00:ff:13:cb:c8:6e:
         76:8b:4b:a4:fe:f3:1c:06:99:87:2a:20:db:62:e2:54:ca:d3:
         a7:a8:15:9f:f2:82:40:43:5f:9d:b3:a1:80:88:3b:73:83:2d:
         40:79:ce:ea:99:ad:1c:80:21:f4:f6:f3:a3:28:64:b3:e5:2b:
         d2:27:e5:fc:d6:dc:b0:16:d4:fc:7e:ca:9e:af:8e:60:ed:ac:
         4b:13:32:24:e2:de:4c:6d:96:24:dc:43:ca:05:07:be:c3:55:
         a8:98:26:73:be:01:74:83:e1:e8:38:b6:af:61:01:6b:34:5b:
         09:64:98:a6:a0:c6:c3:48:2d:16:67:45:b8:f6:30:ea:a7:09:
         e4:88:94:a0:8c:4f:3f:a9:be:16:b7:e8:d0:9e:73:98:03:7a:
         fb:af:98:52:4a:7d:18:c6:4d:56:12:5c:33:7c:21:c4:2d:57:
         57:4b:4b:06:23:1b:60:12:38:13:8a:ea:d2:ac:e4:58:3b:1c:
         a1:91:72:0f:4c:3e:49:b9:e3:53:23:44:d6:ec:6f:6e:76:6d:
         92:a0:cb:64:04:78:15:50:9c:99:61:60:c9:ce:5e:21:a0:ca:
         31:cf:12:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:41:32 2025 by rpki-client