Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File:                     7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier:          2sYj3O5jkwtQwNShNAA/cM31iU51aq6oMpWBZFnq354=
Subject key identifier:   EB:D4:A8:84:1B:05:B9:C7:4F:6C:3F:3B:FD:0A:6A:E6:D4:33:B7:D5
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer:       /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial:       0196AFFC04ADA4E40F76C245AA8B8D79E263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number:          066A
Signing time:             Thu 08 May 2025 13:00:51 +0000
Manifest this update:     Thu 08 May 2025 13:00:51 +0000
Manifest next update:     Fri 09 May 2025 13:00:51 +0000
Files and hashes:         1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: VpB+LA1/RSqCIjTgG0IkGNbWEM/8D1DF/Bgg7jf4DCU=)
                          2: kXJd78RsJ79BG_LY-HKE3xW9xTQ.roa (hash: Ff8IU/0K89U686a3qz0aLt9a8lnUt29LLnlbj61soko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:fc:04:ad:a4:e4:0f:76:c2:45:aa:8b:8d:79:e2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
        Validity
            Not Before: May  8 13:00:51 2025 GMT
            Not After : May  9 13:00:51 2025 GMT
        Subject: CN=ebd4a8841b05b9c74f6c3f3bfd0a6ae6d433b7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:ff:6e:80:15:f6:8c:e3:0e:38:c5:59:a2:
                    00:70:59:ff:4d:44:2d:05:2c:65:b1:c0:e6:54:69:
                    7c:81:26:45:41:d1:1c:d9:a8:06:c6:7a:8a:90:12:
                    bd:fe:f3:83:51:5d:3e:c1:22:22:bf:1b:18:30:38:
                    d9:b6:23:0e:11:65:3f:9c:21:9c:6f:6b:c0:cf:28:
                    d7:5f:4c:19:d6:f9:e5:6c:4b:5f:c9:37:b4:b7:d4:
                    66:8d:14:00:89:f7:a3:81:2a:e9:7e:b0:04:c3:2d:
                    af:78:3a:64:db:3c:ab:b7:04:62:72:08:b9:e5:be:
                    e5:50:c6:e4:fb:6b:50:b2:2d:ac:1d:d5:8a:d5:7c:
                    eb:7b:a6:84:42:a0:d8:ea:06:26:6d:30:e6:d4:ba:
                    6e:37:2b:4d:af:9e:d1:8b:d0:3f:28:ad:85:a0:ed:
                    54:b5:8e:d1:eb:b9:0f:2b:78:30:fc:29:ef:bb:fd:
                    b1:d7:fb:8f:41:af:9f:b5:c7:4e:ce:be:4d:f4:9b:
                    50:61:ba:59:d3:80:15:b3:cb:6b:80:18:93:7a:7d:
                    b8:36:c3:8b:1f:21:4c:b4:35:b4:74:1b:48:fb:7f:
                    54:dc:c5:bb:12:b4:0c:9f:51:b6:9b:f4:eb:9c:ae:
                    be:85:cb:5b:2c:a1:aa:d3:c1:49:15:6f:95:12:df:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D4:A8:84:1B:05:B9:C7:4F:6C:3F:3B:FD:0A:6A:E6:D4:33:B7:D5
            X509v3 Authority Key Identifier:
                keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c5:02:e4:95:72:c7:4b:07:e3:ef:d5:26:9c:52:21:a6:52:
         a6:9f:00:4b:26:ca:7e:bd:5c:9b:a2:f4:0b:9b:d6:29:36:50:
         b3:75:ce:49:09:56:df:85:13:56:0c:9c:60:f3:7c:ae:82:46:
         fb:91:04:a8:81:09:bb:8b:e4:9e:90:b9:62:be:af:14:28:41:
         b8:86:a4:14:32:cd:50:fe:7b:ee:a1:9f:93:6e:57:80:b0:7c:
         ed:33:99:2a:08:50:48:73:8a:ad:9d:54:fe:59:ca:c7:eb:6a:
         dc:10:f9:5f:27:01:57:cb:bc:a8:af:79:0d:d3:cb:2c:1a:6a:
         00:07:53:ad:97:a6:53:bb:fe:ec:31:48:c8:b1:79:2e:70:fb:
         25:de:6d:a5:f6:1d:09:0b:4c:83:7e:3f:80:01:cd:e6:f9:c1:
         40:8f:8e:f1:68:fa:3b:d3:9b:1d:fc:c0:08:4f:9d:dc:50:8e:
         d7:ff:68:e3:34:8a:89:2e:1d:f1:a2:24:9d:b7:b5:96:98:7d:
         ee:1f:f0:6e:9f:6d:d7:0c:7a:68:4d:2d:89:26:49:91:0d:a9:
         1b:1d:47:97:df:a4:64:90:67:a8:fa:99:a0:4b:3a:28:d0:95:
         2c:26:e1:72:42:5a:0c:f0:32:d0:b9:8a:04:ac:d8:6e:23:4b:
         09:67:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:58:38 2025 by rpki-client