Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
File:                     7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft (raw, json)
Hash identifier:          NaOkI73qDBfdAhxjEQ236k7irhMZopAMPeqUYVCcul4=
Subject key identifier:   C1:C0:05:C5:2A:9F:78:B6:D1:E6:A9:DB:99:3C:5E:61:5A:DD:37:CD
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Certificate issuer:       /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial:       0196C15DDB1107AEA56D67B81C2E15AC63B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
Manifest number:          107A
Signing time:             Sun 11 May 2025 22:01:15 +0000
Manifest this update:     Sun 11 May 2025 22:01:15 +0000
Manifest next update:     Mon 12 May 2025 22:01:15 +0000
Files and hashes:         1: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl (hash: VZOAC/oJRfVAJDJ9k/BZjbHneaSFLrdIWtduVDFbMYM=)
                          2: DYtZ-mqw6oNlIGZ4UJkyBpBrIuQ.roa (hash: hy9DSVfaehQXQmBRqqc5gZr2CYEFnu9h17oPiFVHPic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:db:11:07:ae:a5:6d:67:b8:1c:2e:15:ac:63:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
        Validity
            Not Before: May 11 22:01:15 2025 GMT
            Not After : May 12 22:01:15 2025 GMT
        Subject: CN=c1c005c52a9f78b6d1e6a9db993c5e615add37cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:fe:c0:da:77:cb:2c:da:42:af:4e:a1:3a:
                    4d:28:c0:6c:b3:f4:2f:29:0a:7d:fa:ce:a3:a3:1d:
                    bf:97:e4:f9:06:d4:af:38:af:f8:4d:cf:39:b8:6e:
                    f2:76:36:d7:75:42:72:40:70:17:a4:f0:60:dd:e6:
                    17:9a:4a:85:d8:3f:f9:77:1e:f2:b0:66:b1:a2:c9:
                    06:fb:10:1d:fe:88:0a:67:69:02:53:ef:d3:89:e4:
                    de:b4:db:00:cb:f4:84:3b:9f:77:53:79:b0:e8:bf:
                    28:87:dc:03:6a:5e:42:b0:42:40:e9:a9:9f:e1:ab:
                    54:59:c0:08:3f:e6:b3:23:96:5d:2b:d2:3e:be:9e:
                    83:56:15:a8:ae:52:7e:bd:f6:4f:36:2e:b4:c7:71:
                    92:73:6c:d4:80:99:66:5f:1b:02:5a:d3:b7:c1:f1:
                    d6:8a:ca:b7:34:6f:0c:ee:2a:26:ee:35:1c:1a:d8:
                    b4:f6:8d:ab:8c:30:f7:96:c6:e2:23:e3:60:0d:c5:
                    9d:70:26:22:2f:ed:9d:60:bc:2b:43:b5:1e:f6:eb:
                    74:92:25:64:e5:89:2f:dd:be:c9:08:25:30:91:24:
                    94:e0:ca:c7:5f:6c:11:c8:2b:52:19:5c:ba:40:f0:
                    3a:02:e7:3c:b7:f0:99:34:ab:cd:d2:22:87:24:d3:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C0:05:C5:2A:9F:78:B6:D1:E6:A9:DB:99:3C:5E:61:5A:DD:37:CD
            X509v3 Authority Key Identifier:
                keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a7:36:2c:d1:e2:69:62:42:2a:d1:ff:4e:cb:bd:c0:c5:b2:
         98:18:8d:09:f0:b0:68:28:02:42:48:7c:a1:82:4e:e2:68:c1:
         1e:c2:6e:58:96:53:46:44:e7:d2:a7:5f:e5:36:17:0b:71:5c:
         bf:de:d0:18:28:24:28:bc:65:a5:89:e0:ac:8d:87:96:33:3d:
         9e:da:7f:4f:c2:f8:27:d0:be:df:d8:fb:32:20:ff:42:7a:51:
         a0:26:f4:11:6d:ff:3e:2a:b0:c5:cd:50:21:08:25:37:a2:ac:
         57:48:3f:9b:50:ed:c2:62:98:e8:21:06:78:e2:a8:ca:8f:16:
         ef:1b:7d:e2:88:e2:21:67:95:61:74:55:43:b4:34:80:63:86:
         4c:88:d0:80:95:24:c7:ed:3e:c6:40:09:ec:0d:ac:69:81:ea:
         3d:cf:ea:6b:01:0b:2e:0e:0f:54:f5:0f:bf:aa:92:7d:76:a9:
         90:dc:07:33:9d:0a:44:dd:bf:3c:db:b6:6c:cf:c9:a8:65:d0:
         45:8e:7c:8f:29:33:35:4f:12:75:53:7f:a3:4a:e5:f3:91:f5:
         e1:ac:0f:96:76:ab:18:f5:1e:60:85:60:f3:f8:fe:0b:3d:20:
         54:26:a9:b1:40:39:28:cd:9e:02:7b:e7:2a:ab:a0:65:54:b1:
         b5:a9:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:27:56 2025 by rpki-client