Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File:                     7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier:          XYdguXX1VaGN/r9Io7i/yOqWNDYLDx2DMCVK98rCaqo=
Subject key identifier:   03:2E:CD:6D:91:50:60:7F:23:0A:68:AB:B1:B8:B8:1E:B1:9C:91:04
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer:       /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial:       0196A4D3084E2021AB5349E5A1B84573AB89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number:          1310
Signing time:             Tue 06 May 2025 09:00:15 +0000
Manifest this update:     Tue 06 May 2025 09:00:15 +0000
Manifest next update:     Wed 07 May 2025 09:00:15 +0000
Files and hashes:         1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
                          2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: DYpyGx8G6Q+EcvJBbfSS6q3FPHUt6rmPBGbl+MIhefQ=)
                          3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
                          4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 09:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:d3:08:4e:20:21:ab:53:49:e5:a1:b8:45:73:ab:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
        Validity
            Not Before: May  6 09:00:15 2025 GMT
            Not After : May  7 09:00:15 2025 GMT
        Subject: CN=032ecd6d9150607f230a68abb1b8b81eb19c9104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:04:da:33:15:3f:20:98:ab:2e:9e:7e:bd:5b:
                    f3:5e:d8:8c:78:77:60:34:da:6a:ef:21:3b:50:b8:
                    71:63:06:91:16:1b:8c:10:7c:47:23:4f:a9:88:b5:
                    4f:6f:7e:84:18:ee:49:6b:dd:93:52:aa:15:ae:c9:
                    49:d7:0a:d6:1a:cb:54:3e:0a:ef:48:51:ba:3f:a6:
                    9b:06:80:93:da:ce:ab:28:11:77:b2:b3:03:57:33:
                    be:f0:b2:4f:5f:b1:5e:b3:8a:f5:bb:4f:46:ce:49:
                    9a:0e:6d:ba:15:00:64:36:c1:e5:b3:5b:38:56:a0:
                    28:24:0e:a2:6c:05:02:bd:58:e9:d0:7c:05:94:3a:
                    f6:8d:51:f1:38:7e:b5:6e:ee:5d:85:ca:83:a0:f1:
                    98:8b:90:d4:16:a7:35:3b:72:b3:1f:71:24:c2:44:
                    fe:0c:5e:29:7a:8c:9d:9a:9d:6f:e1:0d:54:2a:eb:
                    b1:21:7d:06:36:fc:3f:1c:13:2a:f9:4c:7e:97:ae:
                    80:3c:4c:e7:72:96:07:4e:95:38:1b:d2:05:2b:8c:
                    9f:4b:33:f8:94:7a:52:a3:e9:0f:05:79:a3:6d:4a:
                    9f:01:1a:73:1b:66:bf:93:f7:49:2f:4b:73:7c:54:
                    47:9e:65:38:b9:26:ac:7e:05:a2:3b:5a:c7:a6:99:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2E:CD:6D:91:50:60:7F:23:0A:68:AB:B1:B8:B8:1E:B1:9C:91:04
            X509v3 Authority Key Identifier:
                keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:f9:5f:32:c9:bc:1a:df:ac:02:09:cc:c9:64:6e:16:a7:
         08:d8:86:1c:bd:6b:a1:12:53:ca:3b:df:1c:ba:cd:17:a1:7c:
         28:d5:87:2e:9f:7f:3c:7f:92:01:00:24:8d:b2:4c:80:78:5c:
         8a:a4:3d:db:86:af:fc:89:41:8b:9b:b9:94:d7:d1:35:28:b3:
         16:bd:a8:45:1a:76:3e:13:17:d5:b2:d4:f3:e5:f4:76:18:5f:
         0f:e7:24:b2:d3:36:5e:02:88:0d:6a:61:be:c1:ab:6d:9b:09:
         33:84:08:ce:9c:44:dc:3b:32:db:dd:b5:34:f0:95:96:3d:7e:
         e3:b2:7c:a2:80:72:9f:77:d9:d4:c0:5c:ec:e0:41:37:96:18:
         06:8a:83:fb:8b:55:7a:11:2f:89:db:72:b1:7d:1e:d1:e4:3e:
         59:f1:fe:36:79:49:1c:e2:da:9f:39:9b:69:37:b8:63:03:fd:
         3e:86:e7:30:bd:7b:a7:df:d5:85:57:ee:11:00:a6:bc:b4:c4:
         ef:41:c6:1d:73:83:c3:da:ed:5f:ff:68:b1:91:81:16:a3:a7:
         28:78:87:10:60:59:78:88:d0:97:11:8a:61:27:23:7e:5c:4e:
         e8:ef:aa:d7:5f:7d:1d:9d:ef:82:6a:7d:10:25:d0:30:7d:b2:
         7a:9f:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:04:03 2025 by rpki-client