Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File:                     7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier:          n5X4+A6gA0kSdekQkFB24iBGkJJbpnJZdw0SzfIQJYM=
Subject key identifier:   97:34:1E:E6:05:36:FC:93:23:FA:67:40:F7:DF:BE:E1:85:6B:44:C0
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer:       /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial:       0196C871CB9D4182EA78F0BACC09C0DCD924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number:          0C21
Signing time:             Tue 13 May 2025 07:00:22 +0000
Manifest this update:     Tue 13 May 2025 07:00:22 +0000
Manifest next update:     Wed 14 May 2025 07:00:22 +0000
Files and hashes:         1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: c/++pD5iiyCAHpWWSY3WYeBVGDa6bjE9N+8Vdk6cBbs=)
                          2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:71:cb:9d:41:82:ea:78:f0:ba:cc:09:c0:dc:d9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
        Validity
            Not Before: May 13 07:00:22 2025 GMT
            Not After : May 14 07:00:22 2025 GMT
        Subject: CN=97341ee60536fc9323fa6740f7dfbee1856b44c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:70:7b:63:65:8c:36:14:aa:13:2c:cd:68:
                    58:e0:fc:3b:ac:ac:c9:bc:56:9e:31:92:4e:e5:19:
                    d0:00:b4:53:86:af:84:70:79:f5:21:ad:51:ad:c6:
                    37:78:cf:18:25:18:b3:5d:9c:f1:a3:59:7f:d1:6b:
                    c5:b1:4e:83:9f:85:40:bb:a7:d9:26:71:05:90:27:
                    7b:4b:d8:3e:05:70:72:3e:90:ee:a3:d4:f4:ea:40:
                    fd:93:fd:8a:ce:ed:61:b2:d8:3b:2d:01:15:06:5e:
                    e0:3e:25:78:b6:4f:9e:3e:75:b0:5f:4b:d5:4d:99:
                    e7:d2:74:67:47:63:91:f2:fd:0c:03:da:33:25:83:
                    fb:82:9c:e0:3b:02:a3:57:cc:69:e9:13:53:84:6b:
                    08:46:24:37:ce:cd:7d:66:86:53:88:f7:0f:f0:c4:
                    1e:b3:ed:68:e0:6e:c3:9e:4a:11:73:79:1f:01:16:
                    39:0a:aa:ea:a4:ac:c7:df:e4:85:49:83:dd:80:15:
                    b5:53:49:aa:ce:67:35:12:32:5d:6b:b7:d4:50:f4:
                    f2:7c:ca:c6:54:0f:2b:a8:81:92:c9:88:ad:31:2c:
                    15:3b:37:e0:1c:df:91:56:13:b0:cc:0e:77:77:82:
                    22:bb:10:ac:b4:cb:6b:b3:da:f2:70:57:63:b5:6f:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:34:1E:E6:05:36:FC:93:23:FA:67:40:F7:DF:BE:E1:85:6B:44:C0
            X509v3 Authority Key Identifier:
                keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:72:1b:8d:e5:d6:fe:02:e2:99:c2:25:04:bf:a0:d9:94:a2:
         b1:d8:2e:1b:21:8a:19:de:9a:3c:70:3a:92:b4:62:42:b1:38:
         3b:7f:19:39:74:86:98:5a:d1:a8:53:2f:3f:e8:1d:fd:08:25:
         2c:e3:1d:79:60:62:06:cc:7c:dd:aa:18:34:4b:4c:6c:bd:88:
         e5:f6:64:a2:5e:1f:39:f9:6e:a1:6a:ee:5e:8b:9d:d2:47:44:
         8e:18:7c:10:cd:8a:3b:69:8b:e7:fc:10:54:09:9e:f5:ac:e1:
         97:06:fb:4f:41:2c:a6:a1:b0:f2:39:0a:92:8d:13:7b:0d:89:
         0a:27:f3:33:21:9d:a1:4e:48:f6:29:04:2f:d6:71:8e:c3:17:
         67:8d:cf:04:9b:23:bc:65:6b:c3:3f:dc:95:99:22:25:6a:d2:
         a3:1e:fd:65:9e:ec:be:1b:bc:63:7c:76:68:18:83:53:d4:c0:
         7c:e4:21:88:e1:06:ad:10:f6:f3:3f:09:bd:a5:a8:13:13:6e:
         a3:1b:5a:9b:b4:ad:18:50:27:7d:0f:eb:f0:1b:66:31:f6:cf:
         bd:82:51:13:77:3b:f8:36:1c:9c:d3:e7:02:36:83:c1:15:76:
         fe:cd:eb:1d:c5:a9:6a:92:00:76:18:70:b9:68:f5:d7:ba:50:
         53:63:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:34:58 2025 by rpki-client