Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
File:                     7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json)
Hash identifier:          fytJNwucG9+Gi35ZZ2+SVIbt8ug9DS1aWOYYIX3eoew=
Subject key identifier:   99:78:3F:2C:D8:83:FC:FD:3A:F7:3C:52:C1:23:DD:83:CA:C8:95:6A
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Certificate issuer:       /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial:       0196BD495E4B65F7454670C60CB17EBFA08B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
Manifest number:          14C6
Signing time:             Sun 11 May 2025 03:00:24 +0000
Manifest this update:     Sun 11 May 2025 03:00:24 +0000
Manifest next update:     Mon 12 May 2025 03:00:24 +0000
Files and hashes:         1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: 7AhoJ6P6aEcMl+xK2EsoQFFrnrqUm/j2wFZ26afThLw=)
                          2: oXNlY-oBhR7dTf9pZaxVV6POHQg.roa (hash: K1qaC6BRPPJv+auFKCvtZX9lIT9BoIVDnlW+2EVLt0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:5e:4b:65:f7:45:46:70:c6:0c:b1:7e:bf:a0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd482c2bee8460048d82902cec9867205222997
        Validity
            Not Before: May 11 03:00:24 2025 GMT
            Not After : May 12 03:00:24 2025 GMT
        Subject: CN=99783f2cd883fcfd3af73c52c123dd83cac8956a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:9e:cc:c8:9c:49:74:86:aa:eb:16:b9:b7:
                    9f:62:d7:45:d2:5e:1b:97:71:eb:17:39:33:5d:3c:
                    b2:4c:e7:2b:bb:1d:e9:c6:ee:4d:ac:2c:e5:9c:21:
                    9f:e3:ac:e8:b4:2c:2a:aa:f7:4c:11:f9:50:74:03:
                    b7:37:f7:9f:72:d8:ec:44:ef:2f:8c:f1:99:a0:6d:
                    fd:6c:08:a7:b3:17:3b:cc:39:3a:ce:95:d1:98:b8:
                    a9:40:22:36:55:60:64:5a:38:1c:1d:e1:22:e2:71:
                    10:e5:17:05:fe:d1:16:80:7b:13:3e:4f:43:5e:c3:
                    26:c7:7d:b8:3a:f1:da:6e:af:ba:77:e6:aa:36:c1:
                    dd:2e:15:d7:77:c3:a2:82:8f:d4:93:a7:a4:90:0d:
                    b9:0b:14:42:1c:8b:f6:16:b8:3d:ae:3d:2c:20:14:
                    3b:fa:8d:d6:d7:a7:fc:a6:04:27:00:3a:e6:64:fa:
                    51:7b:27:fd:88:9b:d0:f9:d0:3d:1d:59:f3:d7:cb:
                    14:93:2c:77:18:e3:42:55:18:18:c3:64:a4:b1:0b:
                    76:73:40:40:c1:98:ff:aa:de:ee:d0:6e:bc:ad:4d:
                    a6:df:6a:46:42:50:1e:6c:e6:f1:67:14:e5:d9:16:
                    af:00:90:fd:68:90:58:99:6b:28:93:5e:a4:d0:e1:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:78:3F:2C:D8:83:FC:FD:3A:F7:3C:52:C1:23:DD:83:CA:C8:95:6A
            X509v3 Authority Key Identifier:
                keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:64:f4:3c:b5:da:b3:8f:19:9e:32:97:0a:c7:dd:77:92:a9:
         06:48:92:0d:12:93:5e:83:10:ee:99:41:da:96:64:40:99:57:
         50:2e:7c:5c:db:10:42:6c:31:58:0f:c1:af:ea:8e:8f:d9:e0:
         0e:e6:e3:3c:a6:c1:6d:ce:17:5b:f2:e8:1c:b4:4c:4f:13:34:
         ac:11:e7:7a:4e:02:c6:d0:09:77:e2:b2:4f:71:b5:87:d4:ce:
         f5:89:67:c0:88:4c:2c:4c:54:58:3b:02:91:46:cd:6f:37:a6:
         ad:7e:02:a4:8b:b3:a0:44:bb:19:d2:db:dd:42:e7:61:5d:d1:
         a6:04:39:bf:47:6f:77:58:14:a7:ef:27:28:57:5c:18:91:91:
         44:1b:e9:17:8f:a8:18:c4:65:68:d5:12:f6:61:32:25:6f:56:
         cc:35:21:28:d5:47:6b:20:25:21:e5:d0:4f:d4:2e:db:24:a3:
         3c:25:e7:d7:88:84:bb:68:d6:2b:22:3d:a0:b2:40:8a:74:f3:
         76:8c:51:87:78:3c:01:17:1a:19:30:d1:c9:b8:3e:8b:18:60:
         82:c1:35:57:b4:91:e6:43:a2:cb:1b:ef:34:ee:60:3f:90:5b:
         ad:7d:7a:c4:35:15:69:d1:a9:bc:e4:4e:1a:da:1a:38:8d:b3:
         2f:0a:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:17:55 2025 by rpki-client