Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          w9j5tHC22ApUMnG81tBe9bE7kyxaoxeexlljKbMYCzA=
Subject key identifier:   B7:FB:1B:A4:E5:B9:9B:DD:73:F6:A6:84:B0:1B:11:14:64:16:1E:83
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       0196B9A3FF0D7235EBC76DD1728D34BE2275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          0F90
Signing time:             Sat 10 May 2025 10:00:54 +0000
Manifest this update:     Sat 10 May 2025 10:00:54 +0000
Manifest next update:     Sun 11 May 2025 10:00:54 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: 14fayPJ3XD2hfKqYGnT5/cEQcOEhTxeL3yZl7ERiwPo=)
                          2: F1syaj2slElK5y18q2bJFyk_Xt4.roa (hash: 0cchVuYo1uzzUlT1evGpupW2C9gukJ9GqtBWuAJKa5E=)
                          3: S9qORFlVihRXgXPTMQZutfjwKHE.roa (hash: vsbhWoTnzrB7AOoQuujS+OxmDvP0R8xrr9NkNJFez7M=)
                          4: TpzFnk7W-OsBRIAAr3dm_mueJxU.roa (hash: nkfZhHTodmONOvq1O5TW8ZfGR4EOeCS+8IrKi31DjPQ=)
                          5: eh6k6EDW67F1BaMz22DQsW1dFis.roa (hash: IQTOzLLAJV1/nAGCPNSZ0w+xeltOMYm8kA0XXPxhjRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:ff:0d:72:35:eb:c7:6d:d1:72:8d:34:be:22:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: May 10 10:00:54 2025 GMT
            Not After : May 11 10:00:54 2025 GMT
        Subject: CN=b7fb1ba4e5b99bdd73f6a684b01b111464161e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:95:cd:d8:44:2e:b1:a2:27:c6:0f:f9:de:
                    3f:ee:97:80:85:4d:58:0d:23:29:f9:b9:4a:09:7a:
                    ad:ae:91:2e:05:fb:d9:1b:73:dd:aa:92:6a:dd:6b:
                    8e:42:6a:fe:79:02:91:d1:c0:f6:8c:0f:67:b2:bc:
                    ce:ef:c4:e5:b9:57:d5:90:a3:97:07:88:42:b7:60:
                    64:1f:98:77:e6:dd:73:37:e4:85:0a:ef:3f:7a:8d:
                    1c:cc:47:8d:f4:60:f4:cc:c3:e2:4a:2e:74:d1:91:
                    7e:fc:0a:72:88:84:d5:8e:22:08:fb:ce:ba:1a:22:
                    a7:22:48:41:e5:09:a1:17:a3:b2:da:f4:b7:3b:11:
                    8e:4a:35:c1:6c:af:19:74:48:84:75:92:22:b1:7b:
                    12:31:b4:9a:ef:7a:62:cf:03:42:4f:09:fc:f2:50:
                    19:d5:d1:26:8c:b0:5a:ee:9b:12:29:c3:80:1e:ab:
                    41:24:17:9e:d0:8b:b7:5c:cc:d9:9b:e4:70:85:15:
                    46:22:59:2f:98:4c:c3:9e:28:8a:67:2b:c5:73:67:
                    3b:b5:0b:ad:06:09:9d:86:ef:9c:48:df:89:85:8c:
                    26:50:54:a2:af:0b:60:3b:73:af:fe:44:ab:41:97:
                    a7:c4:93:58:8d:82:e4:2e:00:9d:31:b1:47:f1:f8:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FB:1B:A4:E5:B9:9B:DD:73:F6:A6:84:B0:1B:11:14:64:16:1E:83
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:47:1d:e4:73:45:07:98:8b:f5:1c:4a:f4:e6:9c:ed:34:
         1d:eb:ae:42:31:74:e6:18:5a:cf:90:45:c4:3e:a8:04:e7:93:
         8b:cc:58:a1:a4:b3:d3:eb:d4:27:4d:b3:f8:40:3c:f4:7d:6f:
         6d:d4:b6:4d:c6:a7:7f:1b:dc:c9:c3:8d:d2:e8:9d:f1:53:48:
         1a:ed:2d:d7:24:79:a8:45:d5:de:a3:1c:53:cb:23:69:11:67:
         54:6e:4f:08:48:1d:5b:d5:49:84:92:69:11:4f:53:bd:8a:24:
         59:4e:88:a1:7d:d6:a0:d2:f2:23:b0:f0:01:61:09:1b:89:be:
         70:4a:34:d2:34:8f:3a:5b:9f:cc:91:3e:83:34:f9:c4:db:f6:
         ec:00:e7:3a:d2:82:0a:3e:ef:56:28:0b:f8:1b:21:f0:65:78:
         9a:75:c1:fc:d0:8f:f3:5e:30:38:c9:64:24:5f:4a:33:bf:44:
         a1:b4:e2:0a:0e:7a:55:69:c7:6b:68:cc:9f:51:68:07:b5:10:
         b5:c4:35:5f:f2:ed:22:9e:6a:26:eb:64:e7:ac:bb:b4:fd:33:
         1b:17:7b:d9:b0:3b:24:5a:1e:62:a2:2b:da:23:5a:79:c1:02:
         9b:83:f3:6a:42:e2:2f:f8:14:21:67:cc:06:ec:61:39:ec:ff:
         89:d1:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:56:50 2025 by rpki-client