Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
File:                     7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json)
Hash identifier:          uK2Z1/vF2LjvNkk24KAQNd9oCC3ya6fq2gIw+++UBQs=
Subject key identifier:   A5:77:CF:00:24:68:6C:41:F3:49:FF:99:CC:07:82:02:18:57:D2:BA
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Certificate issuer:       /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial:       0196CEAB24B82C4EA7ED17B1A17759E05B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
Manifest number:          0433
Signing time:             Wed 14 May 2025 12:00:44 +0000
Manifest this update:     Wed 14 May 2025 12:00:44 +0000
Manifest next update:     Thu 15 May 2025 12:00:44 +0000
Files and hashes:         1: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: JNx5TSOCs23TQoB90MyDWdUPLRgjsrhSI2TSWRQ77fo=)
                          2: JFdpz4qHx_4cniX3BWWOLLPVqtE.roa (hash: p/0kdoGRXrffXN49KkQkmbIDXM/4wVxkOOygBUu78vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:ab:24:b8:2c:4e:a7:ed:17:b1:a1:77:59:e0:5b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
        Validity
            Not Before: May 14 12:00:44 2025 GMT
            Not After : May 15 12:00:44 2025 GMT
        Subject: CN=a577cf0024686c41f349ff99cc0782021857d2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:70:cd:b1:43:6a:8e:53:20:13:fe:74:57:
                    98:7e:18:a3:7c:98:44:df:3e:5c:b2:a7:e7:ab:6a:
                    9b:ec:da:b7:d9:99:85:f9:11:3d:98:23:8a:66:44:
                    c4:6c:02:91:bb:ff:d6:4f:ae:06:c2:e6:a1:ff:b7:
                    5b:a5:e3:06:10:40:c6:b1:6a:a5:33:9b:07:92:c3:
                    93:32:c2:09:1c:65:46:32:b6:f2:7a:87:a2:57:75:
                    a9:52:8f:c1:76:8d:e1:bd:73:39:e3:2c:e2:85:8f:
                    66:83:a4:d7:b6:0e:1f:a3:72:ad:0a:b9:21:c0:09:
                    7b:76:79:54:74:58:fd:6a:62:69:2b:a8:72:c1:25:
                    c9:14:b9:f1:5c:ea:dc:b3:a9:9b:c2:14:7b:6a:2d:
                    8d:a4:24:c2:5f:bc:08:0d:d0:1d:56:cd:58:6d:67:
                    f5:b5:d8:6e:63:a5:0c:8d:5e:fc:eb:ee:e1:c3:cb:
                    92:9e:10:77:aa:63:80:34:bb:eb:0b:be:3d:6a:9b:
                    98:9d:0a:a3:cc:d1:7e:2e:b0:39:22:19:b0:33:62:
                    5f:1f:f7:27:ad:e6:b3:e8:fa:33:5e:07:97:cc:38:
                    95:5b:e6:36:c0:e4:f9:3d:6b:b1:84:b7:b1:df:44:
                    9b:37:02:72:8b:2c:16:31:d6:ba:dd:ae:85:65:9b:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:77:CF:00:24:68:6C:41:F3:49:FF:99:CC:07:82:02:18:57:D2:BA
            X509v3 Authority Key Identifier:
                keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:24:e6:88:72:f3:85:80:20:48:a3:e6:d8:d2:57:bf:21:47:
         d5:72:40:60:10:21:5b:3a:86:c3:71:f5:58:99:1c:46:6c:08:
         26:3c:72:a1:4c:62:2a:6f:de:21:08:e1:51:0d:3f:50:9a:8e:
         70:b3:3d:c7:fb:f0:a1:08:75:ef:73:d8:fc:12:a1:01:a8:44:
         6f:c3:8a:5d:5b:e8:04:77:76:2f:3f:0a:70:1b:24:00:5a:1f:
         47:9b:46:3b:a2:93:f9:76:2b:ca:e9:fa:03:9c:87:34:35:c3:
         8c:16:de:17:89:58:bf:f0:e1:62:88:0f:ee:de:4c:08:e4:5f:
         2e:c0:e6:a4:40:69:ef:fc:fa:f3:a6:d6:ac:55:38:1c:02:b6:
         bc:c6:65:a5:bb:c9:54:e0:b7:f6:c3:4d:2e:67:b4:2b:59:9e:
         3e:d2:d3:b7:bd:4c:fa:a6:3d:5a:70:2a:04:75:a7:3e:97:a9:
         87:f4:34:4b:65:75:75:cc:42:20:fe:f2:a7:94:fb:78:42:7d:
         ae:f2:d2:20:7e:da:b0:b2:c9:8d:24:51:95:e1:89:97:26:27:
         20:14:e5:a3:fc:3c:ee:cb:ff:ad:a9:42:74:09:33:ae:82:89:
         2a:fc:b9:f9:df:2a:7b:bb:ba:ad:1f:8d:96:51:67:03:33:ea:
         30:cb:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:40:31 2025 by rpki-client