Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File:                     9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier:          /lwq3wGJabDstgD9hWItAFSsOCKXd4Yvbs3pDWW3l4s=
Subject key identifier:   BE:47:A8:4B:49:F3:B7:60:F9:3A:27:1F:DE:48:7A:AF:AC:BD:58:04
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer:       /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial:       0196CB04DD2487645984933678691F61386D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number:          E5
Signing time:             Tue 13 May 2025 19:00:15 +0000
Manifest this update:     Tue 13 May 2025 19:00:15 +0000
Manifest next update:     Wed 14 May 2025 19:00:15 +0000
Files and hashes:         1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: CG6AFIGHUvOwZt10W84GAbzWk1AiigEjBH85/ycti94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 19:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:04:dd:24:87:64:59:84:93:36:78:69:1f:61:38:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
        Validity
            Not Before: May 13 19:00:15 2025 GMT
            Not After : May 14 19:00:15 2025 GMT
        Subject: CN=be47a84b49f3b760f93a271fde487aafacbd5804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:f5:d9:ef:68:6e:12:be:6e:a4:a2:b9:e7:
                    ca:6b:d8:a7:94:f9:2c:5c:69:cd:6f:6f:6b:81:03:
                    22:a0:91:4c:40:71:ff:1a:69:69:6f:43:5d:78:89:
                    ec:9d:15:94:8a:0d:f2:cc:f4:3a:e9:eb:15:78:79:
                    3b:64:8c:d0:42:79:89:5c:a4:51:72:f1:55:0a:dd:
                    60:d9:40:5f:01:7b:fa:9a:12:96:9c:a6:a0:de:e3:
                    f2:2a:b4:e8:ac:04:10:4f:fd:20:9e:2a:b6:63:6b:
                    c9:ba:96:9f:10:ec:34:45:61:b6:b6:d2:0a:f8:a6:
                    49:c3:94:ba:e5:ac:d8:cb:58:fd:02:f8:97:37:2b:
                    de:a9:3b:b4:1c:30:ee:b4:2a:1a:8d:51:3a:69:8a:
                    af:c5:c1:58:99:5f:94:f0:41:9c:b7:a6:a6:b4:63:
                    60:c5:5d:c0:91:6f:d9:16:76:ad:a9:e7:32:fb:cf:
                    b7:59:e1:22:45:5c:3d:c5:32:1d:30:8e:62:0a:64:
                    85:65:26:c9:04:a4:5c:1b:41:fd:a2:8b:28:2c:64:
                    a1:86:bc:a7:db:2c:86:f6:7c:54:7c:8b:1a:fe:18:
                    d0:f8:60:1c:c7:c8:ce:aa:77:11:32:52:39:2b:69:
                    4e:65:21:e3:1f:8a:b1:f3:55:ff:64:99:ba:28:51:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:A8:4B:49:F3:B7:60:F9:3A:27:1F:DE:48:7A:AF:AC:BD:58:04
            X509v3 Authority Key Identifier:
                keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:d7:cb:4b:29:2d:89:04:a2:a0:86:21:a4:4f:9d:23:1b:
         da:fd:4b:71:45:b7:9d:42:65:6c:f2:ed:d0:e0:b0:f1:69:98:
         16:ec:b6:c3:be:b3:c8:1b:8b:5c:d3:75:8c:47:68:45:84:23:
         75:b5:c4:26:43:ef:96:d1:ea:50:8c:85:ea:81:bf:02:3f:42:
         2e:62:f9:26:07:a0:35:83:a6:e4:59:cf:69:aa:88:04:e4:92:
         04:dc:cc:9a:74:38:1a:1f:30:38:ae:a2:a9:74:6f:83:fe:6e:
         02:f4:82:71:39:80:37:8b:38:59:83:cc:09:3d:eb:fc:6c:00:
         a8:46:ff:a7:ec:67:2b:be:c3:b8:50:64:df:00:39:02:2d:5a:
         e6:90:f8:a2:0f:02:d1:a3:77:49:ac:01:21:13:31:9b:34:ef:
         53:1d:91:2f:3d:8b:72:f6:60:28:59:56:df:15:4a:3f:80:41:
         e0:cc:83:01:00:e3:05:a9:5b:98:ba:4c:27:a8:31:0f:ee:2a:
         d8:3b:06:0b:4c:dc:ec:1a:80:7d:bf:bf:4e:16:87:b6:bd:e0:
         bb:01:fe:e1:2c:a4:52:a5:67:e8:f4:a9:ae:a7:9f:db:d9:12:
         5f:e9:65:2b:bb:91:80:f3:3f:bc:74:76:09:49:86:40:0c:c9:
         3f:21:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:56:07 2025 by rpki-client