Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File:                     7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier:          pY1/F9k0MNTZBffWEurjMVKUZk/6ytFDN7RTms8T9Dk=
Subject key identifier:   78:C5:6D:E2:2F:EB:CB:49:6E:BA:E5:3B:03:93:4E:65:2A:E1:35:67
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer:       /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial:       0196AAD566CF64E2231E36DCF1091A35DA15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number:          07F6
Signing time:             Wed 07 May 2025 13:00:34 +0000
Manifest this update:     Wed 07 May 2025 13:00:34 +0000
Manifest next update:     Thu 08 May 2025 13:00:34 +0000
Files and hashes:         1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: dVeyTkfKKoA+l2mbFOYqEVL0zZNDkRnulS41lpIDMek=)
                          2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:d5:66:cf:64:e2:23:1e:36:dc:f1:09:1a:35:da:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
        Validity
            Not Before: May  7 13:00:34 2025 GMT
            Not After : May  8 13:00:34 2025 GMT
        Subject: CN=78c56de22febcb496ebae53b03934e652ae13567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:f9:ed:d5:a6:a0:f6:2b:28:81:6a:55:6b:
                    fb:e5:7a:03:d1:b5:7a:a6:92:0b:ee:c0:df:36:ce:
                    b9:3e:f5:03:7c:35:12:e6:15:5c:c1:53:82:b7:71:
                    98:94:4f:77:b5:8a:42:de:a9:ab:02:73:44:50:28:
                    49:96:6b:54:fb:42:7f:4f:fa:13:b7:a9:8a:f4:56:
                    8e:1a:83:8d:85:3c:8c:27:9c:14:33:4a:98:09:2e:
                    e7:bf:e4:93:5a:38:4c:62:82:33:3e:71:a4:6e:28:
                    d9:84:e7:5a:2c:8b:b1:8d:22:6e:2c:d2:23:1e:6e:
                    1b:1e:29:83:00:73:2d:b6:4e:59:75:3a:ff:af:53:
                    6f:21:30:1a:ea:97:a2:78:23:d8:55:f5:5a:a9:40:
                    2e:57:48:92:25:a5:87:fc:17:42:0d:ed:af:2d:1d:
                    2d:07:d5:c2:51:bb:e8:63:d4:56:b0:16:fb:7d:69:
                    e0:2f:d8:1a:c6:bc:a1:26:e5:b5:96:21:83:6a:9f:
                    b8:db:07:d6:f1:fa:87:38:48:2a:0e:b7:82:8d:01:
                    38:c2:23:a5:c9:59:b4:51:04:00:94:a5:34:56:88:
                    b4:13:92:4d:77:30:4b:2b:04:a2:df:5b:a5:65:c0:
                    e3:65:99:86:7e:bb:11:93:9f:15:3d:34:f5:00:b8:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C5:6D:E2:2F:EB:CB:49:6E:BA:E5:3B:03:93:4E:65:2A:E1:35:67
            X509v3 Authority Key Identifier:
                keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:84:0c:d4:9c:e0:a1:7e:88:4f:a3:b3:2d:12:cb:17:91:e9:
         5f:12:36:48:5c:fe:51:ca:71:24:a7:a3:4e:9e:b3:48:a9:46:
         0f:1d:c7:45:06:6d:70:3a:e4:78:7f:4d:90:95:d8:24:a4:59:
         36:2d:11:7a:20:67:71:27:40:91:74:db:d1:7c:36:e4:c2:f8:
         5a:8e:5b:3e:bb:cb:1b:9e:7d:05:01:30:76:61:80:c4:92:5f:
         cf:f4:76:03:8a:e0:d1:79:d8:f6:9c:ba:4c:1a:87:4d:51:99:
         5d:48:82:a6:34:fd:8a:75:98:3b:23:62:15:f2:9f:fd:e2:f7:
         b9:44:3d:30:89:6f:50:a2:33:c5:a7:a8:bf:4c:d8:73:ab:9b:
         f3:d4:66:2b:48:92:76:51:93:01:63:3f:ba:ae:97:d3:aa:99:
         2f:e2:5a:f5:74:d5:b0:12:4d:12:89:09:65:64:39:fb:d3:a1:
         1e:62:5c:d3:37:c4:50:ff:bf:d9:c6:aa:a3:04:34:fb:5b:16:
         42:9a:96:ea:77:86:4c:e5:26:bb:71:12:70:b1:f7:85:ca:2d:
         43:c3:76:3a:65:f7:21:4d:47:80:5d:24:8e:12:40:af:d8:94:
         a7:45:81:8f:71:75:26:25:37:fe:57:0a:95:08:d3:d2:ae:13:
         5d:f6:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:50:43 2025 by rpki-client