Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          /J+DOeSUaA4GwhMCYRQYUsxuG69XrDtf+Owqt5Rzc8Y=
Subject key identifier:   F2:72:0E:F0:18:EC:13:0B:3F:77:0E:30:BD:37:C3:22:3B:BF:86:64
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       0196C61570FE9951DECD7A458B0BC47A83B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 20:00:15 +0000
Manifest this update:     Mon 12 May 2025 20:00:15 +0000
Manifest next update:     Tue 13 May 2025 20:00:15 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: BJZWb3iotnDxspWOZk/GFnN+3X+0rk642KSR2lvmp08=)
                          2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:15:70:fe:99:51:de:cd:7a:45:8b:0b:c4:7a:83:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: May 12 20:00:15 2025 GMT
            Not After : May 13 20:00:15 2025 GMT
        Subject: CN=f2720ef018ec130b3f770e30bd37c3223bbf8664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:00:e0:b6:f1:01:ff:ad:32:fb:8e:cd:a8:
                    81:25:c1:a8:fc:9d:d2:95:49:49:1e:8c:1e:c0:3b:
                    f2:86:49:3e:07:68:01:d0:54:30:e7:d5:1b:a0:ad:
                    c1:79:1a:52:2e:c3:21:5b:e0:07:46:52:19:eb:e7:
                    bb:e0:a4:88:82:e9:f0:d5:94:aa:b1:59:d1:9b:43:
                    5b:c1:63:ca:8a:32:d2:c2:3f:6f:1d:42:bf:94:f3:
                    89:e3:5a:56:f8:9a:27:a7:1b:1b:35:12:30:c1:e2:
                    dc:ad:95:1b:02:41:e8:8d:9f:7d:cd:5e:2c:98:8b:
                    20:77:9e:60:e8:92:99:bc:4a:0d:d4:87:96:f9:17:
                    b4:90:3c:b7:93:24:16:2e:e9:21:cf:8a:3e:d9:7b:
                    90:9b:9b:5f:4f:c9:79:e7:5e:6b:7b:f6:0d:62:3f:
                    ae:69:be:3d:95:64:55:d8:af:75:56:d8:ee:bb:3c:
                    f2:14:cc:3a:04:00:06:d5:38:5f:2e:38:94:ad:06:
                    f7:43:bf:05:f0:cc:71:11:d4:41:f1:8e:9c:10:13:
                    5e:38:2d:8a:37:5a:7a:22:15:47:5e:cb:79:3a:0e:
                    33:42:87:ed:1d:16:da:65:bf:0d:0d:ce:3c:9d:47:
                    52:23:95:11:00:97:c4:0b:60:b0:ae:db:fc:6a:c3:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:72:0E:F0:18:EC:13:0B:3F:77:0E:30:BD:37:C3:22:3B:BF:86:64
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:7e:63:c6:2c:72:9a:7b:c9:dc:a6:15:84:da:d0:c3:e4:
         32:1d:92:29:4f:85:87:e5:b2:15:c7:06:d4:8a:8b:b6:76:b6:
         19:d2:d2:8b:a3:c5:91:86:19:cf:b7:c4:71:4b:b8:83:fe:c9:
         03:9c:74:f7:9c:1d:bc:2f:fe:ee:9e:7f:aa:3a:68:4d:a8:eb:
         4e:41:80:46:ab:dd:21:d0:e7:10:b8:8c:08:78:69:3c:19:f4:
         c8:b1:14:3c:fd:80:d6:3c:bc:23:9a:20:e7:38:88:71:82:8c:
         d3:0f:47:8a:6b:e7:fa:2e:c2:27:8c:ba:65:fa:89:a9:a8:b6:
         74:83:6f:70:d4:92:56:70:e2:45:b3:2a:e0:94:2f:2f:bd:2e:
         41:4e:cd:1e:47:4b:d3:47:98:8a:87:48:22:3b:c6:ff:de:8c:
         80:ec:c8:01:d3:66:7e:ce:40:d4:45:db:5c:64:8a:80:55:e8:
         33:56:72:34:63:f9:e7:15:bc:00:da:15:f2:46:31:4c:39:21:
         f9:fa:a0:7d:5e:cc:cf:ee:1b:8f:1e:15:dd:97:0b:0b:71:0f:
         a1:6d:73:21:ae:cb:bc:bd:45:17:e9:b5:ba:83:a9:f7:ab:a2:
         c6:7f:b7:9b:be:1c:28:53:56:92:f3:75:1a:9f:a4:4f:7a:62:
         cb:a4:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:25:03 2025 by rpki-client