Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          ohDHFJH0g/iHEzWzwfk1q6mj+8WEyupTGd07EI66cuw=
Subject key identifier:   2F:B8:0B:BB:D4:48:E9:8D:60:EC:AE:32:A0:2A:A1:AA:95:6E:00:1F
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       0196BC6DDEDA736DA54856C3E9D5163D0948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          0276
Signing time:             Sat 10 May 2025 23:00:39 +0000
Manifest this update:     Sat 10 May 2025 23:00:39 +0000
Manifest next update:     Sun 11 May 2025 23:00:39 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: N3sjMSUKfyEWg1mvwHCYEjaUe2mn44d1Y49dOoniS24=)
                          2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6d:de:da:73:6d:a5:48:56:c3:e9:d5:16:3d:09:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: May 10 23:00:39 2025 GMT
            Not After : May 11 23:00:39 2025 GMT
        Subject: CN=2fb80bbbd448e98d60ecae32a02aa1aa956e001f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:fd:a4:89:ac:8c:0b:40:a8:fa:85:4f:1b:de:
                    89:16:17:4b:b3:2e:b4:d5:26:53:fc:ee:30:2a:3c:
                    dc:c8:45:4c:c5:f1:78:4a:db:c1:64:b0:71:c5:09:
                    19:cd:16:fd:78:37:da:6b:01:32:79:7b:d8:14:10:
                    77:02:1c:a0:3d:28:c8:4e:da:33:dd:c2:5c:25:d6:
                    e1:db:ea:34:7e:2f:e6:b1:a4:a3:ff:4a:44:75:6b:
                    32:e1:26:14:02:74:7d:d0:99:fc:1e:f9:83:43:e7:
                    db:a2:df:83:14:ae:05:8a:1d:94:6f:59:9f:6d:99:
                    c7:3f:e9:e1:1e:5b:08:a2:d9:1b:aa:b6:10:54:5f:
                    b9:33:1c:53:8d:13:30:bc:5e:6b:9b:69:e8:40:e1:
                    9f:06:c6:b0:ea:be:93:db:d0:84:6d:b2:5c:76:a8:
                    c5:19:56:ff:3c:77:3b:85:0b:20:fd:03:f6:7a:4b:
                    20:b5:2e:e1:62:95:a8:e3:24:9a:1e:bb:65:bc:b8:
                    52:13:a5:6c:83:38:38:8e:b9:ad:9b:f2:80:4f:ff:
                    a9:0e:29:dc:bb:b9:71:79:83:a4:de:27:4b:b2:23:
                    1d:d4:7f:2e:1d:00:85:02:e7:54:92:6e:0b:b8:27:
                    7c:46:05:f3:6c:5a:21:4d:c4:70:e6:79:d7:b5:5e:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B8:0B:BB:D4:48:E9:8D:60:EC:AE:32:A0:2A:A1:AA:95:6E:00:1F
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:56:30:43:35:56:7d:c6:a6:0d:8f:60:0e:bc:07:7c:8d:2b:
         f2:62:93:cb:df:4e:5a:78:b7:13:93:ff:15:93:66:7e:17:81:
         ed:38:37:9a:b0:06:ea:e3:9c:a9:40:2b:ff:1f:c4:98:08:f3:
         8d:28:78:f7:72:e9:df:6b:05:c0:bb:97:28:c6:47:cb:d7:76:
         98:ee:f2:f8:02:93:4a:3a:65:fe:df:20:6a:e1:d2:6d:10:9f:
         4d:9a:26:e3:c8:29:51:52:81:8f:54:95:9e:de:3d:f0:03:47:
         98:f7:bb:86:da:65:b5:85:8e:73:eb:5e:87:7e:e6:ef:86:0c:
         93:d0:dd:53:33:cb:fc:ce:46:13:37:ef:a8:9e:e7:c9:8a:7b:
         00:d3:17:35:a8:bf:87:59:66:a2:ff:a4:b3:a7:c6:7a:58:a8:
         5c:4e:53:f4:25:a5:af:be:ea:64:0e:8c:23:75:e8:f7:78:fa:
         07:a5:67:3e:91:f3:3e:3b:71:99:97:dd:c9:5f:08:c9:44:c0:
         ef:df:01:c9:5d:4b:50:aa:4e:21:b2:2a:e6:d8:09:13:17:1d:
         bb:77:48:09:df:9e:07:6a:8a:2c:1b:c4:8a:2b:83:31:9d:ec:
         e9:49:d5:50:05:b5:ba:35:52:66:c3:ea:c6:6f:76:d2:a5:2a:
         37:5f:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:18:36 2025 by rpki-client