Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File:                     Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier:          LmIP6u5yoDBeDQGBheCzB2b6o8EcRoWpIkAdzkAUIl4=
Subject key identifier:   7D:60:FD:7D:A5:08:A4:F6:9E:2B:57:5A:B5:02:79:52:15:0D:63:23
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer:       /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial:       0196C5032C5B29C1300F26E75B5572B25FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number:          1277
Signing time:             Mon 12 May 2025 15:00:41 +0000
Manifest this update:     Mon 12 May 2025 15:00:41 +0000
Manifest next update:     Tue 13 May 2025 15:00:41 +0000
Files and hashes:         1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: nfhu3hePW2HJAVFAcRrj6GcVAr2V1ec4zSzZPCvXG7c=)
                          2: rbzHYHanwggYI2O2PyN_ccDQ8To.roa (hash: ZzfYYIwcl7wz/PiBDA2nkdbr3LCq3ECUyDagAbAOmJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:03:2c:5b:29:c1:30:0f:26:e7:5b:55:72:b2:5f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
        Validity
            Not Before: May 12 15:00:41 2025 GMT
            Not After : May 13 15:00:41 2025 GMT
        Subject: CN=7d60fd7da508a4f69e2b575ab5027952150d6323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:a4:e4:9e:b6:ef:06:e2:12:27:48:10:c3:
                    b6:ae:0c:d5:fd:1d:da:87:68:15:1c:02:6d:b9:06:
                    41:01:42:20:de:4d:ff:3d:be:b0:5a:cc:f6:a6:56:
                    44:ac:ab:a0:6a:b3:c2:d0:26:6e:d9:4f:6e:4d:7a:
                    cb:b0:07:08:cb:4d:c6:52:4e:4e:96:b5:44:e4:3d:
                    0a:65:26:e2:9c:33:ba:94:ee:9e:10:29:66:2b:28:
                    62:f3:2c:b2:c3:58:3f:95:f0:3a:d0:dc:61:b4:d3:
                    13:86:5f:5f:1f:cd:23:b8:9e:c2:bd:39:51:79:41:
                    9e:bc:82:42:17:c6:e6:c6:34:b6:fa:18:d3:eb:ac:
                    71:82:09:70:a9:b1:c6:b1:c6:ba:ba:5d:31:0c:d2:
                    4c:bd:09:4e:6c:bb:4a:40:64:33:0c:82:ba:24:64:
                    1e:63:e8:4d:e8:7e:39:bc:0c:14:74:24:28:b9:36:
                    48:2b:9d:da:dc:58:b1:d4:78:96:a6:20:fa:6f:2a:
                    8e:ed:a0:12:7f:e7:05:95:bd:59:c8:73:43:38:a6:
                    56:f2:f3:4d:a3:bb:a8:13:d0:b4:d4:0d:10:1c:1b:
                    a5:e3:f5:f8:bb:31:f7:ee:11:17:e1:02:33:9c:51:
                    78:5b:1f:d7:bb:8f:4b:4c:ef:36:55:41:b6:8b:52:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:FD:7D:A5:08:A4:F6:9E:2B:57:5A:B5:02:79:52:15:0D:63:23
            X509v3 Authority Key Identifier:
                keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:33:44:41:c4:6b:08:fe:f8:3b:f1:34:36:01:9c:72:54:89:
         d4:10:97:94:1b:f8:b8:4e:07:82:e2:cf:68:87:e7:cd:29:2b:
         fb:e8:42:a1:80:68:e5:38:bd:ba:7a:a1:d8:35:39:82:6e:b6:
         a2:4f:e5:e1:9e:6f:e8:d0:a0:ea:dc:86:83:e2:68:bd:ed:f7:
         e6:9a:73:88:78:21:32:61:54:2c:5c:94:e7:dc:98:e0:0d:be:
         22:6c:4a:21:4e:4c:fe:15:91:f8:6f:f3:d2:9d:0f:0a:b8:04:
         ee:67:ad:7d:27:e7:9e:fa:c6:d0:cf:65:1a:e9:b1:27:ea:8f:
         c1:7d:df:11:48:c2:29:4f:15:ba:82:a1:06:a6:33:25:36:51:
         61:88:39:a7:38:0e:80:15:c6:bc:24:1f:40:65:27:c2:b8:59:
         7f:97:0f:ab:3c:d7:81:1c:ee:cc:d8:20:5c:67:5f:8a:6d:fd:
         5e:3b:b1:55:5d:c1:c9:01:2e:5d:db:96:22:99:4f:d4:43:43:
         7b:d5:4b:be:6b:4b:e9:e2:5d:bb:86:36:9d:a8:4e:b5:41:24:
         c3:fc:40:9e:3e:19:f9:48:86:15:8d:c0:b6:4f:12:2d:04:67:
         19:38:38:26:4b:b7:5a:23:25:af:43:31:b0:cc:a5:f5:93:f9:
         ef:d1:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:31:20 2025 by rpki-client