Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File:                     eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier:          Isi88t9xbn5n91wubOacNG6wUQFiHQ5/yZ+62EoCuPs=
Subject key identifier:   FE:E9:22:68:41:53:4C:EA:39:93:51:B5:1F:CF:DF:5A:0C:FA:27:50
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer:       /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial:       0196BEC9C7A57A6766887AB6769E09C98937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number:          0AF3
Signing time:             Sun 11 May 2025 10:00:16 +0000
Manifest this update:     Sun 11 May 2025 10:00:16 +0000
Manifest next update:     Mon 12 May 2025 10:00:16 +0000
Files and hashes:         1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: uBlzqRpQdCisWPfoEke0heaXlPgO3fUQZtN7NsSMetc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:c9:c7:a5:7a:67:66:88:7a:b6:76:9e:09:c9:89:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
        Validity
            Not Before: May 11 10:00:16 2025 GMT
            Not After : May 12 10:00:16 2025 GMT
        Subject: CN=fee9226841534cea399351b51fcfdf5a0cfa2750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:07:4a:ed:7a:d4:96:8b:5e:3b:e2:2c:9d:
                    fd:9c:1e:64:b2:e4:34:15:e7:7b:9a:43:b1:89:71:
                    f8:da:a9:2c:05:47:57:6e:01:d6:68:de:32:ae:2d:
                    15:ce:c1:68:e6:cf:6a:54:1d:3d:ac:14:28:03:2f:
                    1a:82:f1:5f:36:a9:79:94:0e:26:f7:79:37:34:75:
                    db:c8:7c:90:1e:13:da:cd:d2:96:50:20:7d:c8:e3:
                    bd:10:c6:a9:9c:d9:93:27:70:d1:9a:85:96:cf:e6:
                    f8:32:26:49:cb:96:bb:c9:12:84:ae:7d:2b:18:78:
                    a2:1f:82:a1:39:e8:f5:37:38:9a:12:8a:a7:2c:f8:
                    4b:04:72:59:27:78:d5:ab:19:38:28:28:d5:cc:45:
                    ec:7e:33:c5:34:71:d0:3f:c6:a7:bc:bb:61:b7:07:
                    7c:27:90:99:ec:df:c8:d7:68:77:38:ab:1c:53:4a:
                    30:02:b5:d8:fb:dc:4e:f1:0f:27:dd:94:25:12:49:
                    71:91:fb:f9:5e:7d:f1:62:7e:bf:10:e0:2b:d1:78:
                    b5:c0:a0:94:ae:fc:3f:11:ba:13:b9:86:ed:10:10:
                    79:6c:f3:d3:a3:fe:71:d1:c7:13:7f:13:21:01:a4:
                    34:b6:ad:02:c4:3a:3e:e8:2e:38:ef:4c:7a:58:e5:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E9:22:68:41:53:4C:EA:39:93:51:B5:1F:CF:DF:5A:0C:FA:27:50
            X509v3 Authority Key Identifier:
                keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3e:96:2e:1f:58:cf:27:b8:f1:ef:3f:15:9d:75:63:a6:4e:
         18:4e:5b:47:8e:c7:c0:f3:c9:98:14:3a:9d:c1:dd:4c:d4:cb:
         cb:21:00:39:e3:9e:ad:02:ec:fd:c4:15:79:f2:35:0c:c8:05:
         62:f9:09:2e:36:11:50:6c:f0:e5:6b:21:2b:8f:c0:25:c6:6b:
         13:78:16:4c:0a:3f:ef:7e:4f:a1:54:6a:cd:34:1f:4a:03:e1:
         b6:10:c5:5b:e6:b7:85:b2:cd:c7:71:3f:7e:f9:4e:c4:f7:00:
         d5:d0:bb:77:7b:8a:10:10:14:36:60:ad:3c:43:29:d6:04:34:
         cf:b4:68:17:ed:c8:77:78:c3:9d:36:f7:0e:3c:74:72:aa:6d:
         85:3f:27:2f:82:be:2a:0f:f8:69:d8:84:e0:95:72:9b:9b:c6:
         fe:10:a5:56:cc:54:4b:6c:7b:04:a2:53:71:21:fc:1b:36:36:
         a0:67:af:6a:6c:7c:e9:a7:cd:9f:39:0b:d0:11:02:32:d5:2b:
         48:27:78:73:18:fd:f4:77:63:27:08:46:82:95:05:a7:24:12:
         de:9d:9b:e3:e6:1f:ec:57:90:b4:99:20:1d:7d:3e:d7:7f:03:
         c0:90:56:97:7e:46:3c:ec:00:09:68:76:4a:4e:1e:01:06:ff:
         a8:8b:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:42:18 2025 by rpki-client