Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File:                     sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier:          q48yZ1vhXbI7BPAC75p2Yd1E6lFqqFclDsqUyLLYJw8=
Subject key identifier:   70:4B:6E:7D:F8:08:FA:CB:DD:AB:F5:CA:A1:48:58:6C:DF:26:28:64
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer:       /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial:       0196C1CAF735E061E376CAC762D97609B98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number:          07B1
Signing time:             Mon 12 May 2025 00:00:26 +0000
Manifest this update:     Mon 12 May 2025 00:00:26 +0000
Manifest next update:     Tue 13 May 2025 00:00:26 +0000
Files and hashes:         1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=)
                          2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: du0GsUcKtAOnR4VjL8fNKcEpfbgPy5sQ9DSgS/cf4Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:ca:f7:35:e0:61:e3:76:ca:c7:62:d9:76:09:b9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
        Validity
            Not Before: May 12 00:00:26 2025 GMT
            Not After : May 13 00:00:26 2025 GMT
        Subject: CN=704b6e7df808facbddabf5caa148586cdf262864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:68:04:e8:ff:08:e7:d8:fd:4e:b3:2a:7f:
                    b9:f1:b8:22:3d:51:e2:da:c8:e8:81:21:35:23:65:
                    d9:f8:28:07:24:b7:48:0c:a9:46:cf:be:50:dd:84:
                    8f:90:31:40:10:c3:99:9b:a3:e2:3c:64:b5:f3:5d:
                    02:c8:b4:d6:db:be:07:28:07:df:ed:a7:9e:0e:b6:
                    94:1d:58:03:b6:87:f1:bd:34:d1:65:3e:71:30:e3:
                    e6:40:90:4a:e2:da:4d:8d:ae:b0:7b:7f:32:5a:55:
                    5b:8b:96:c5:72:d9:e1:9b:4a:1a:55:a7:ef:e7:f8:
                    ea:7f:c3:e2:aa:dd:fb:95:dc:da:00:a4:28:77:02:
                    49:45:ab:b4:4e:ed:8a:61:52:83:e6:bd:a2:0b:56:
                    bd:01:e1:1b:03:18:4e:61:31:3a:d6:f4:1a:a8:3a:
                    d8:e8:7c:4a:3e:3a:0e:f3:c7:9a:7b:d7:fc:c4:a9:
                    73:cf:04:a7:7e:b2:8d:f3:28:22:bf:fa:53:85:79:
                    c8:f5:98:49:fa:1d:52:68:33:ed:15:e3:36:96:53:
                    3d:c9:8f:3b:eb:0c:f4:fc:b4:e9:05:66:e1:76:01:
                    b2:6f:7a:9b:13:fe:ab:50:a2:e1:c5:a4:cb:12:11:
                    d9:23:4a:12:bb:8d:d2:7e:9e:d1:cc:40:41:37:4d:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4B:6E:7D:F8:08:FA:CB:DD:AB:F5:CA:A1:48:58:6C:DF:26:28:64
            X509v3 Authority Key Identifier:
                keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:0d:9b:29:c9:93:b8:cf:57:b0:3f:7e:77:36:fe:15:bc:
         75:1c:cd:42:28:c2:b7:ac:0b:7f:27:89:8a:da:b0:44:f2:d4:
         23:d5:29:c1:d5:71:ec:f1:0e:ee:ba:2e:53:ef:71:20:e6:8f:
         d3:dd:96:cd:b5:20:e1:b0:69:b4:72:24:69:3b:d4:96:53:69:
         9f:eb:89:07:85:ac:8b:d9:d3:24:cc:95:db:e0:03:71:38:7f:
         3d:5c:ec:9b:e5:16:6b:1e:d4:d2:df:e6:3f:ce:4a:0d:3f:75:
         26:33:41:84:36:e5:b3:3c:7f:61:ed:c8:a8:17:e2:f8:c5:0c:
         d9:b6:e0:0f:4f:f7:3d:ae:8c:59:d3:3d:d6:e4:de:9f:6b:89:
         b0:42:65:81:57:f0:5e:0d:6b:60:88:08:d7:db:90:85:2e:4c:
         c3:19:0f:a6:3b:a1:6e:a7:f4:f3:71:0b:78:bd:5a:ec:76:10:
         7e:05:42:b9:eb:28:86:f0:bd:eb:88:21:25:d5:e5:d5:1e:ae:
         44:24:0e:d4:65:ad:3b:a8:78:5b:ec:28:9e:8e:ba:d5:05:c3:
         41:19:3c:f1:f6:c9:59:ab:b4:e6:44:d0:c8:2d:12:c7:89:fa:
         05:23:60:c4:78:34:4f:ce:19:66:ef:91:83:09:13:f6:99:40:
         2c:57:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:41:07 2025 by rpki-client