Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          CUDHIAnVdqgV0ha/LIlsUf1c5LFkuCezTXfNSTvZzFI=
Subject key identifier:   67:87:AB:4C:08:1F:54:0B:35:23:6B:A1:CB:E5:66:A8:8A:A4:A5:F9
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       0196C683D4BE166CFE5C2C68CB71E3BC8567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 22:00:50 +0000
Manifest this update:     Mon 12 May 2025 22:00:50 +0000
Manifest next update:     Tue 13 May 2025 22:00:50 +0000
Files and hashes:         1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: VEH9nWBGNXXhzMn6GbcHlFzxqoqVevUOpgDi/NZfXb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:d4:be:16:6c:fe:5c:2c:68:cb:71:e3:bc:85:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: May 12 22:00:50 2025 GMT
            Not After : May 13 22:00:50 2025 GMT
        Subject: CN=6787ab4c081f540b35236ba1cbe566a88aa4a5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:de:f4:09:85:ac:4e:64:ae:9f:fa:60:58:
                    5f:69:3b:6b:df:2d:9f:c1:a7:32:7c:d8:d4:0b:d5:
                    38:6a:ba:26:14:fa:4c:36:3d:7d:6e:ff:a1:01:30:
                    65:2d:a8:56:94:60:e5:1c:a0:fa:b1:ad:30:60:a8:
                    ce:2c:bf:21:96:6f:35:e1:02:14:b6:84:c0:09:79:
                    95:2c:a9:1b:02:ee:5f:5a:4f:3c:db:ce:55:35:da:
                    c7:57:6c:cc:a5:0d:b7:67:d2:72:bc:b8:9c:2f:38:
                    49:9f:9b:50:3e:a6:80:c2:3b:49:26:07:dd:75:e5:
                    16:8e:b5:17:c8:1d:0d:20:6a:82:e4:11:26:d2:12:
                    3d:82:26:65:f9:51:27:c4:79:ad:eb:e1:c9:78:e5:
                    27:65:5c:11:7e:df:db:88:6a:55:77:e8:3b:25:f3:
                    5e:d7:ed:e3:74:15:0a:06:cc:9d:32:88:7f:a4:20:
                    84:44:f6:ff:44:9b:56:39:be:b0:b4:5f:7e:fd:4d:
                    d9:99:0c:82:47:37:53:7c:04:94:6c:38:f6:0d:5c:
                    99:ec:23:62:ca:13:43:20:0d:42:af:bf:20:6e:c6:
                    d4:19:75:79:3d:11:13:4e:d1:b7:92:97:4f:a1:95:
                    17:24:a2:b2:ab:12:be:4f:c2:fd:3b:09:41:c2:ec:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:AB:4C:08:1F:54:0B:35:23:6B:A1:CB:E5:66:A8:8A:A4:A5:F9
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:f8:bf:0b:c3:30:47:b6:84:c8:67:7f:41:44:45:42:0d:
         07:92:7e:d6:a5:37:cf:48:7f:32:37:76:9f:b3:eb:04:83:08:
         10:e8:bc:bf:f1:73:b2:c9:87:97:74:14:1d:91:ec:f6:42:42:
         5f:2e:e8:2c:20:01:9d:0c:82:af:24:b5:7f:8d:ff:01:b4:ed:
         fc:e4:9a:36:49:03:ad:18:b4:c4:40:e2:0e:c6:ea:d6:9b:cd:
         53:e9:69:d1:e9:08:42:54:e7:1d:29:48:a7:87:32:8f:6a:3b:
         8d:72:15:d3:40:d7:78:4b:1d:eb:e1:78:dd:94:9e:76:7d:28:
         b8:ac:f1:66:30:d2:f6:db:57:8e:0e:f6:b7:9b:5e:49:21:a5:
         51:cd:13:9e:02:f8:d3:ad:dc:13:2f:1f:15:f7:a2:d4:1e:d5:
         b5:4a:ab:71:e9:f6:f6:1f:f0:d5:03:f7:e2:87:db:df:96:78:
         7b:b6:bf:02:4d:79:70:6e:a4:9f:d9:60:3f:d1:bc:9d:98:13:
         3d:6d:80:1a:fd:b0:e4:c3:ac:e8:31:7c:5b:c3:5d:2e:0b:b2:
         8e:c5:81:c6:09:a0:87:0e:fa:89:b3:44:89:bf:df:b1:6c:4c:
         09:14:77:bb:3c:5b:fb:21:eb:3f:ee:e0:b3:24:cd:3b:35:7d:
         8a:9d:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:02:56 2025 by rpki-client