Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File:                     Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier:          h0WgKkqdQMhtDQ3SGkUBPUx7RUcUPm8tl2fdb3S/Ve4=
Subject key identifier:   5A:41:6D:D9:40:32:AB:70:C0:94:33:FB:87:B8:90:BF:0C:0C:8F:84
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer:       /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial:       0196C01392C5370AB40B057DA293CCAE5CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number:          0EB4
Signing time:             Sun 11 May 2025 16:00:30 +0000
Manifest this update:     Sun 11 May 2025 16:00:30 +0000
Manifest next update:     Mon 12 May 2025 16:00:30 +0000
Files and hashes:         1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: myJgsZ9/gbiO/NogtBmapxpBZ3LV1NQkPJjR+H3rE28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:13:92:c5:37:0a:b4:0b:05:7d:a2:93:cc:ae:5c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
        Validity
            Not Before: May 11 16:00:30 2025 GMT
            Not After : May 12 16:00:30 2025 GMT
        Subject: CN=5a416dd94032ab70c09433fb87b890bf0c0c8f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:64:65:dc:ee:bd:db:9b:86:88:d9:a1:e9:
                    9d:51:1a:2f:cd:9f:b8:70:ac:2f:25:01:ab:38:66:
                    fa:c3:a8:a8:67:58:53:1f:21:31:45:c7:de:6f:f8:
                    72:f1:2d:a5:44:f1:01:ae:06:c7:d6:4d:70:37:ed:
                    d5:cc:82:c1:6a:c0:14:9b:82:32:b8:7a:ef:28:4b:
                    61:ca:59:bf:23:d1:db:0a:38:24:12:0c:43:5c:16:
                    46:23:2b:6c:b0:65:13:68:b5:cd:bd:83:37:dd:c9:
                    2d:1e:f5:68:4f:85:39:61:17:e8:84:0c:7d:c9:fe:
                    c9:ef:0f:cf:fb:16:eb:d7:29:ca:7b:ce:7b:6a:6d:
                    ff:b5:e9:26:89:e4:ce:9c:6d:6f:29:86:4d:54:8c:
                    a0:c3:30:fb:df:22:1f:a6:bc:e5:03:d8:a3:8c:22:
                    ef:74:8f:73:a9:5c:57:94:bc:ff:1a:ab:b8:c3:f8:
                    26:f3:11:51:d0:b9:ab:7f:07:c2:f6:b2:20:83:2b:
                    1a:d9:be:a7:68:b3:40:7e:6f:de:27:38:1d:ca:fb:
                    4f:11:30:69:08:56:4c:bd:c2:68:ad:f8:87:e9:ac:
                    4a:29:6f:d6:e4:53:9c:88:f2:64:3f:a6:e2:72:c5:
                    9d:d8:4a:8c:a7:ec:96:3b:58:99:7e:b4:b4:93:fc:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:41:6D:D9:40:32:AB:70:C0:94:33:FB:87:B8:90:BF:0C:0C:8F:84
            X509v3 Authority Key Identifier:
                keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:aa:03:12:15:bf:3c:89:a6:ec:98:0c:c5:cd:08:b7:a3:b0:
         43:b5:52:46:6c:02:e4:be:d9:bd:91:6d:7c:65:74:45:9a:f2:
         ce:61:40:6c:db:1c:ae:68:5c:03:8b:53:cf:68:75:4c:d3:7a:
         c1:08:a7:ed:ba:ec:8b:db:a5:9c:d7:ff:d5:16:c8:68:e6:19:
         6a:7e:cb:74:16:10:a4:f3:95:bc:47:1e:cc:bb:7b:31:e6:2b:
         fb:35:f1:35:b2:04:58:8f:2a:c3:42:90:b0:ac:5a:20:d0:64:
         00:61:dd:96:93:89:a3:b7:31:fd:d8:93:c8:c9:54:49:59:28:
         03:cd:04:b6:8d:b5:4d:ad:2a:d5:b8:89:74:2a:89:f9:d1:14:
         2d:d9:a8:69:9d:69:16:70:a8:0a:e1:cc:ff:6e:2e:83:b7:a4:
         de:a9:73:58:f6:79:14:be:29:72:7f:3c:1f:cd:09:7c:6d:da:
         fa:d7:30:f4:e3:96:8b:ac:10:ed:ce:ba:55:51:89:67:f1:88:
         f5:c4:e0:e0:72:01:4e:62:c8:e4:c0:9a:12:91:53:ff:5e:a0:
         30:36:94:2a:a9:ac:70:8f:4e:bd:f4:46:16:e3:02:08:8a:e8:
         9b:12:a3:45:bd:bb:3c:a0:47:18:1d:3f:e9:d9:1d:61:1c:1e:
         35:49:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:26:59 2025 by rpki-client