Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
File:                     e2YUJAvA92sC-eOj9AYKtJNv9GY.mft (raw, json)
Hash identifier:          /u5T/qBPIZqN//n1onRei1wNdXXfmTL47AmKFcVsAAE=
Subject key identifier:   C6:FD:C2:68:CB:72:0B:4F:FB:2D:F7:87:5D:C3:B6:5D:33:86:3C:B2
Authority key identifier: 7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66
Certificate issuer:       /CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
Certificate serial:       01969FE40B938133705FFA31A5AC42DE0118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
Manifest number:          0127
Signing time:             Mon 05 May 2025 10:00:44 +0000
Manifest this update:     Mon 05 May 2025 10:00:44 +0000
Manifest next update:     Tue 06 May 2025 10:00:44 +0000
Files and hashes:         1: e2YUJAvA92sC-eOj9AYKtJNv9GY.crl (hash: DtqSaRewcTO0E5DM8UxAhWzMKm6Eqq3K2q96urWcO+w=)
                          2: ywZPNdm-QKZpeMwj8NoEFpCbBVU.roa (hash: P+ldS5mV1bes3QVxJQ8BBR4t28oMMRfexpRbrRRe40E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e4:0b:93:81:33:70:5f:fa:31:a5:ac:42:de:01:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
        Validity
            Not Before: May  5 10:00:44 2025 GMT
            Not After : May  6 10:00:44 2025 GMT
        Subject: CN=c6fdc268cb720b4ffb2df7875dc3b65d33863cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:8b:1e:04:03:96:f5:e6:7d:98:43:0e:b3:
                    d3:03:8b:38:d6:a5:68:e8:ad:80:5e:52:b4:2d:3c:
                    95:46:4e:3e:75:d6:50:ae:57:0e:2c:97:91:ab:95:
                    77:dd:1d:3e:89:f9:18:0c:3b:a4:4a:f7:e9:e8:40:
                    82:19:b1:d8:72:35:b9:60:86:bf:42:55:39:37:7e:
                    4d:2b:47:c3:a6:3a:4b:6c:b9:bf:79:82:b4:1b:1e:
                    58:32:c9:8c:61:ac:c9:ff:52:7c:00:45:70:a9:c9:
                    50:4f:76:a1:d0:52:7f:11:6f:0e:eb:89:e7:3d:48:
                    87:f4:0a:40:ac:d0:e0:6c:31:6c:09:87:9b:4c:7e:
                    e0:25:b5:04:bf:06:e8:cd:23:35:3d:9b:a5:c3:20:
                    74:c3:5e:59:6a:5e:0c:b5:ff:cd:93:01:ff:fe:b5:
                    92:00:aa:cb:9f:98:0b:85:d9:db:de:f2:fb:8e:54:
                    02:f3:2c:5e:4c:25:c1:bc:06:48:97:f5:01:07:59:
                    e7:00:b8:a8:2a:89:09:2d:77:ba:ee:d8:b2:f8:aa:
                    27:8c:05:85:bd:dc:9b:5d:ee:4e:5d:7b:05:be:7d:
                    08:20:45:c1:a1:6c:e5:80:9d:81:46:61:5d:ec:de:
                    5c:c8:e6:08:dd:e5:0b:34:1f:28:39:47:9c:22:03:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FD:C2:68:CB:72:0B:4F:FB:2D:F7:87:5D:C3:B6:5D:33:86:3C:B2
            X509v3 Authority Key Identifier:
                keyid:7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:72:99:74:3a:c6:fa:7a:df:1f:b0:d3:1c:ab:35:6c:f8:62:
         ff:a8:53:b0:7b:50:14:33:d9:3b:2d:68:e2:05:c5:28:40:66:
         5d:be:20:66:0e:f6:0c:ea:52:2e:64:07:3d:51:88:07:0f:17:
         a9:54:49:fe:3f:c8:1a:e3:fd:fc:fc:61:7e:26:61:d4:40:ee:
         a0:2f:dd:1a:3a:a9:c1:3e:ca:bf:b0:90:6a:dd:77:bd:83:b5:
         a5:a0:e2:9c:b4:93:83:cd:4f:5c:7e:49:53:18:b8:1c:f4:e9:
         36:aa:06:d3:fa:f0:8f:a7:95:fa:8a:b9:28:a6:08:6f:23:5b:
         fc:9c:75:ce:81:67:bb:0a:b2:48:40:9f:fd:2a:ac:4b:32:e2:
         b0:8d:f7:65:e3:30:c8:2b:f9:61:ab:83:ec:d3:39:ae:bd:3f:
         4f:14:98:2a:bc:3d:d7:64:74:80:2d:e9:79:c3:b3:7e:b0:03:
         bd:15:e6:5e:fd:98:0f:3a:2c:5d:54:37:9f:b9:dd:3f:6b:18:
         54:0d:e5:48:5d:72:c1:1d:08:c4:28:f6:f0:94:56:ab:58:37:
         0a:f7:66:de:2c:63:28:b2:c8:c3:a7:07:b2:a1:e1:ba:b2:c3:
         e7:c5:03:96:24:41:1a:ab:08:a0:16:00:6d:ff:65:29:8c:ce:
         80:e7:66:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:18:11 2025 by rpki-client