Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File:                     56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier:          XLuOibo0ad9hGvyV0/Kj8tGEFlfz8MYwAzYg4HgOgiI=
Subject key identifier:   95:CC:8A:95:03:8E:6D:59:AD:7C:1B:74:F2:0F:6F:21:AE:B1:87:6C
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer:       /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial:       0196B5FD845D08A49BC79EDB16CF24429BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number:          4D
Signing time:             Fri 09 May 2025 17:00:12 +0000
Manifest this update:     Fri 09 May 2025 17:00:12 +0000
Manifest next update:     Sat 10 May 2025 17:00:12 +0000
Files and hashes:         1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: CoNrfhfXliJcGyQfukHLz+mnrYDL+pkBUcbYkWo/0rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:fd:84:5d:08:a4:9b:c7:9e:db:16:cf:24:42:9b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
        Validity
            Not Before: May  9 17:00:12 2025 GMT
            Not After : May 10 17:00:12 2025 GMT
        Subject: CN=95cc8a95038e6d59ad7c1b74f20f6f21aeb1876c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:ff:fc:fc:a5:ba:ba:9e:52:62:4a:11:52:
                    0e:22:f9:93:7c:2a:30:39:bc:ca:95:d2:33:fb:1a:
                    90:7e:3a:ef:ba:fa:4c:47:72:a4:e1:9c:05:96:e2:
                    52:70:68:52:6f:b1:1f:7e:eb:b7:36:2f:f1:b0:ab:
                    41:b0:14:a4:ab:dd:3b:e9:58:d6:0f:e0:f6:ab:1c:
                    2c:58:7a:4f:ba:ae:38:16:7c:30:22:60:11:43:61:
                    21:ef:6e:e2:3e:b2:37:b1:ac:18:1a:f4:b6:47:ba:
                    68:53:4b:8c:fc:aa:4a:2b:13:ce:80:ae:42:85:08:
                    9c:5c:ce:e6:9a:05:d3:1d:fa:f9:c4:4f:98:77:b8:
                    aa:fe:a2:f0:5d:f6:3b:f2:c8:dc:1f:27:1f:94:e4:
                    c4:5f:56:b8:92:81:ef:a9:ad:d7:1d:9b:2f:2b:bf:
                    5f:ce:25:7b:86:20:5b:6d:b8:1b:a3:f3:25:ca:0b:
                    1f:b3:35:e9:bc:3a:95:b1:02:7c:c5:32:34:78:57:
                    ae:41:03:b4:89:24:c6:cc:6a:60:9b:4c:ec:6e:d5:
                    83:0c:6a:02:e4:0e:1a:89:7a:84:6a:de:b7:02:75:
                    1b:68:70:88:02:2e:ed:40:56:57:63:76:de:67:ae:
                    bb:55:f5:a6:e7:74:d0:87:a1:e7:c2:c5:11:9f:27:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:8A:95:03:8E:6D:59:AD:7C:1B:74:F2:0F:6F:21:AE:B1:87:6C
            X509v3 Authority Key Identifier:
                keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:5c:23:90:a0:37:aa:6f:45:a8:d0:6d:8c:89:f1:bc:74:
         9f:21:b2:bc:97:b0:12:ec:c3:a1:c0:13:cd:4c:0e:9f:34:85:
         9f:69:99:c8:ed:a1:26:b2:97:d9:8a:46:48:01:a9:b9:b0:09:
         87:7d:ef:2b:12:71:d0:a4:1e:36:a4:3b:8e:44:dc:91:03:c9:
         bc:2f:31:a6:b2:a0:81:57:89:6b:f8:c5:9c:d3:6a:88:2d:c2:
         5a:bc:8e:e2:08:6e:31:73:9d:37:40:3d:df:96:a8:44:1a:58:
         d2:57:ac:8a:bf:14:90:df:51:3a:c2:4f:41:01:5d:a5:72:92:
         2a:48:e8:8f:63:f5:23:ac:4b:39:bb:b7:4d:db:34:f6:30:6a:
         df:30:a5:9b:ff:58:96:7d:64:5f:2b:3b:fb:bd:4c:c6:3f:4c:
         ae:bd:70:d4:c9:7b:7e:b0:3a:0e:96:fc:02:ed:4a:96:53:8b:
         79:5a:4c:0d:35:b9:ce:40:f2:7d:53:58:49:c0:5f:66:5c:65:
         c1:16:42:f3:fd:8d:96:33:31:e4:79:16:76:eb:61:01:ac:ff:
         3c:2a:5b:66:0c:6f:ed:43:06:2a:bc:bd:eb:61:56:f4:32:df:
         e3:f7:88:19:f9:82:fd:29:61:a2:0e:f4:d3:34:39:ee:4e:36:
         5f:0e:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:58:57 2025 by rpki-client