Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          qODkjEtnBlolVtcHsXniDtIN9vOFvCOjg9T3n/XDOmo=
Subject key identifier:   7F:EF:DD:29:39:44:4E:9F:85:F7:B5:75:D7:8B:6A:33:79:5A:6C:F5
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       0196B85A55C79C18B0734107BC5858436E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          1532
Signing time:             Sat 10 May 2025 04:00:49 +0000
Manifest this update:     Sat 10 May 2025 04:00:49 +0000
Manifest next update:     Sun 11 May 2025 04:00:49 +0000
Files and hashes:         1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: 9QQiDn2q21d+h/rbd1NuRINre/7LjdDbEOv914xAJEY=)
                          2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:55:c7:9c:18:b0:73:41:07:bc:58:58:43:6e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: May 10 04:00:49 2025 GMT
            Not After : May 11 04:00:49 2025 GMT
        Subject: CN=7fefdd2939444e9f85f7b575d78b6a33795a6cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:de:98:60:af:57:92:e1:aa:dc:83:31:48:
                    07:7d:cb:7c:44:0f:8d:1e:98:1e:80:b2:fa:19:86:
                    d3:b8:a4:e8:15:df:99:01:1c:4c:0d:00:8f:3d:0f:
                    a3:74:3c:bb:db:fe:7c:b5:0f:50:6b:e0:b9:49:07:
                    5e:8d:37:e8:5d:2e:ec:52:79:88:2a:57:15:3f:cf:
                    a5:df:93:36:12:18:a7:c9:58:25:a6:8d:01:12:59:
                    a7:99:0e:ee:22:fa:35:51:ac:9e:78:84:3c:08:0c:
                    5f:b8:77:bc:12:7d:e5:c5:34:b3:1e:4d:fa:6a:ef:
                    13:8b:94:40:64:58:75:e0:6c:95:68:61:63:23:78:
                    73:a3:b0:9c:7b:a4:9b:65:c0:3c:a8:69:e3:a8:45:
                    9f:30:0f:98:6e:47:39:63:6a:d3:34:cd:1b:4e:d6:
                    70:87:8d:1b:26:a2:07:1f:c6:2f:d4:36:7a:c3:00:
                    cd:17:e8:f3:08:b0:fb:2e:60:e7:35:94:7a:6f:96:
                    90:b9:04:d6:53:e5:37:68:92:74:eb:27:f9:5b:a8:
                    ae:9c:6d:0a:39:f5:21:dc:1a:25:a7:4c:dd:4f:bf:
                    d9:26:91:d0:df:23:21:ff:1d:67:42:36:5c:82:4b:
                    20:6e:35:49:e1:99:ea:31:1b:7a:f1:5a:28:de:9d:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EF:DD:29:39:44:4E:9F:85:F7:B5:75:D7:8B:6A:33:79:5A:6C:F5
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:9f:7a:73:46:7a:8b:f3:7d:8f:ee:9f:37:00:14:a6:2f:
         2a:5d:76:5f:9d:54:55:dd:86:8c:12:e2:28:c2:f8:15:50:d2:
         38:61:30:3d:08:f4:c4:06:b7:a8:42:5f:83:63:cb:dc:0b:6a:
         82:d6:ec:6a:a5:41:05:6b:6c:cc:3d:4d:21:63:42:8d:44:75:
         79:14:8a:57:ee:4b:9f:b7:44:70:78:26:8e:76:bf:22:09:ae:
         f6:7d:87:f3:2e:02:a2:83:11:07:6d:85:e1:60:95:7f:72:a0:
         c5:53:81:b5:c6:57:1d:b6:87:f5:47:68:d4:11:3f:b8:2a:39:
         a4:88:9c:57:5a:aa:ea:4d:9a:7d:8f:99:a6:26:91:a0:15:1f:
         49:a0:82:ee:db:70:16:92:4b:27:6d:d2:43:82:0a:0f:92:38:
         3c:44:f8:df:52:c3:4a:62:ce:b3:bc:b1:17:ed:64:c0:59:1a:
         2c:c0:62:94:b5:ba:9f:c4:a3:ef:36:db:23:95:78:69:3c:6c:
         8a:92:6e:b5:4f:a2:6c:ce:66:67:3b:42:1f:64:af:da:2b:c0:
         1b:4d:82:cb:85:90:50:d8:cf:3b:34:e2:f2:c2:67:53:42:bd:
         de:d8:ef:25:a1:c9:d3:f3:08:46:55:10:f1:de:1a:46:56:9a:
         2e:dc:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:54:49 2025 by rpki-client