Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          jozb85yV9nTCCz2T+dGIPTqTboksWyxfLiPHh8GNhlc=
Subject key identifier:   92:A5:2A:69:4B:69:2C:7B:06:21:AD:BD:63:62:68:96:C8:0B:DD:ED
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       0196C0EF13B5D3BDAC4DE899DD1B4193FEA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          0EA0
Signing time:             Sun 11 May 2025 20:00:15 +0000
Manifest this update:     Sun 11 May 2025 20:00:15 +0000
Manifest next update:     Mon 12 May 2025 20:00:15 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: 5tNwKCY9PjSzJ/db6R7IC58KVHNUMjj7pFFk6GYG/X0=)
                          2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:ef:13:b5:d3:bd:ac:4d:e8:99:dd:1b:41:93:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: May 11 20:00:15 2025 GMT
            Not After : May 12 20:00:15 2025 GMT
        Subject: CN=92a52a694b692c7b0621adbd63626896c80bdded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:30:41:f6:fd:60:c9:41:77:44:d2:e9:69:
                    c4:78:8e:e7:ed:16:a6:e9:97:16:0e:b1:0a:80:d5:
                    c4:97:f4:f8:f3:66:07:3a:8b:52:c5:53:b5:c0:ea:
                    ef:bd:e2:0d:bd:f2:24:49:86:b0:93:b8:c7:e1:09:
                    e0:aa:ae:a3:20:42:88:04:87:9c:de:ff:f9:87:a2:
                    3b:5c:0e:17:f9:7c:92:a1:cb:e8:b7:a5:6f:f0:cf:
                    e1:bc:18:06:47:d3:6a:17:66:54:5e:dc:e3:db:69:
                    b9:5f:1f:50:d1:48:ad:46:73:52:67:83:46:35:1c:
                    be:4e:71:c7:e2:4d:90:8d:94:a3:bd:52:b0:12:64:
                    53:39:22:3e:fc:92:2c:49:bb:dc:97:e6:f5:1b:85:
                    d8:cb:24:fd:de:f2:6f:49:67:72:94:13:d2:6f:b0:
                    56:ae:ef:dc:c7:91:cf:c2:a6:9f:e1:1e:77:c5:d3:
                    49:8e:5f:dc:0d:9d:30:ea:8f:a9:63:7e:a0:48:74:
                    27:e9:f5:d0:38:e9:51:7f:5d:7a:5f:8f:73:88:df:
                    bb:29:52:06:61:fb:b4:8e:ac:2d:11:68:f6:be:a6:
                    74:5d:c4:77:a6:c9:99:e1:47:b0:a3:03:1b:a3:ac:
                    c5:ac:57:ea:60:d3:bd:2b:b8:a2:4b:2a:28:11:72:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A5:2A:69:4B:69:2C:7B:06:21:AD:BD:63:62:68:96:C8:0B:DD:ED
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:35:ec:24:1e:cc:59:aa:1f:55:9c:a6:43:11:e8:e9:00:
         94:e9:73:da:93:c2:b2:94:53:56:59:7d:21:a3:5e:2d:59:6c:
         9f:52:ad:05:20:4e:55:a2:c9:9a:11:b2:d5:35:c9:7d:06:19:
         e1:3c:25:d5:3a:e7:a2:23:bb:9f:1e:13:4f:dd:39:37:b2:30:
         de:3b:10:db:f0:66:0c:d2:5b:d5:33:29:3a:90:ee:b6:da:67:
         ef:60:94:79:c6:cf:8d:8d:ea:13:44:40:92:7a:95:6c:9a:90:
         d2:1a:64:c8:9f:48:b7:91:6b:6e:e8:33:30:e7:20:0f:ca:26:
         be:d5:a7:12:df:dc:4b:50:c8:92:d0:11:89:48:0a:c9:83:4e:
         b9:7e:6e:6b:22:54:4c:68:2b:6e:78:40:eb:9c:ca:d1:07:74:
         3d:99:4a:8c:84:4f:54:8b:c4:c3:ff:88:94:7c:10:4d:fb:ab:
         60:11:6c:d2:98:ea:ba:9d:df:c0:5d:e2:fd:ad:2a:44:34:6c:
         11:ad:df:9b:36:e8:9d:2b:18:c0:ab:85:8b:40:29:47:ca:7e:
         28:5b:a9:c7:9b:02:ff:cd:0f:28:22:cc:03:a4:79:4f:53:3c:
         a5:e7:8e:ee:9d:d2:88:73:bb:bd:0e:f5:36:ab:82:04:ec:7d:
         62:6c:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:13:14 2025 by rpki-client