Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier:          qJL9Wg8Oqx5mw1PTA4CsrcUm2twyy5D+iNPGs/tXjds=
Subject key identifier:   08:AC:84:B3:FF:95:AC:6F:B6:26:72:6D:54:7E:C4:1A:37:9A:BC:58
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer:       /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial:       0196BA7FAE2DC9442BB58319CF46BC6257E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number:          0849
Signing time:             Sat 10 May 2025 14:00:51 +0000
Manifest this update:     Sat 10 May 2025 14:00:51 +0000
Manifest next update:     Sun 11 May 2025 14:00:51 +0000
Files and hashes:         1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: +/X1T/zAWMY0hidh7BWomS/0dP9FPGeeHsfDm4VVjIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:ae:2d:c9:44:2b:b5:83:19:cf:46:bc:62:57:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Validity
            Not Before: May 10 14:00:51 2025 GMT
            Not After : May 11 14:00:51 2025 GMT
        Subject: CN=08ac84b3ff95ac6fb626726d547ec41a379abc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:18:43:07:a3:3d:6e:7d:ee:a5:05:27:1c:
                    a3:85:6a:bb:fe:d8:bc:b4:2e:d9:8f:6d:eb:d0:89:
                    21:aa:61:c9:02:0a:c3:d1:e4:a9:13:b0:9c:6d:1b:
                    73:4b:6e:97:11:2b:f5:d2:7c:8d:7a:cf:c4:d5:7a:
                    54:ec:75:d0:a4:f6:e6:cb:d6:47:2b:d7:7f:b6:85:
                    73:f5:4a:d1:4d:13:5e:d3:a5:66:e6:a9:b4:87:c6:
                    dd:b6:41:91:6b:86:54:65:1a:10:e2:98:44:2e:d1:
                    a6:ff:d7:1e:06:0e:15:cf:7c:1c:2b:76:9c:54:8f:
                    4d:c1:b4:fe:db:6a:74:db:37:41:df:e8:d5:3d:70:
                    ba:1a:c9:93:08:68:7f:3d:4a:68:fb:c1:2a:71:e5:
                    d9:b9:c7:7f:7d:24:94:c0:3f:db:0b:23:95:18:0b:
                    fd:35:c8:1d:d1:27:6f:64:59:f0:2a:83:d7:a1:df:
                    be:ef:d8:28:0a:60:6d:9f:31:52:61:54:60:0a:42:
                    66:ef:45:79:1f:60:52:63:ef:da:03:42:bd:16:c3:
                    d5:6f:63:bb:1b:e2:e7:05:c1:44:d2:fa:11:06:95:
                    fc:4b:20:19:b2:fe:d6:b0:e6:c9:b9:8f:24:55:67:
                    e2:05:09:df:6b:c5:58:b8:48:ea:2f:2e:3f:b4:01:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AC:84:B3:FF:95:AC:6F:B6:26:72:6D:54:7E:C4:1A:37:9A:BC:58
            X509v3 Authority Key Identifier:
                keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:da:b2:5d:52:99:53:95:6c:91:6c:ad:d4:21:d3:45:77:70:
         40:fc:63:4e:e5:77:6f:99:cc:57:36:63:82:54:80:95:e5:01:
         07:88:bb:85:7f:8f:4d:d4:15:ab:03:3e:38:41:10:ab:b4:4e:
         9c:41:b3:37:ec:6a:f9:bd:af:42:83:ab:11:3a:07:1a:28:48:
         48:b3:54:7e:08:a9:10:56:c9:83:3b:55:03:96:52:c8:a9:6f:
         77:d5:1a:65:87:26:38:00:74:66:57:85:78:8a:cd:3c:da:c8:
         76:9e:25:76:3f:c2:ff:4d:f9:9c:3f:1f:13:cb:47:7a:ce:88:
         4d:04:63:c4:de:e5:6c:cd:8c:5b:c8:a6:1e:14:89:e7:00:43:
         b4:41:29:5a:cf:1a:e0:2a:de:11:cb:28:51:7b:95:40:3a:f7:
         dd:ea:e1:94:1e:c6:dd:5e:2b:88:3d:b8:eb:e5:4b:3c:ac:47:
         9f:be:55:81:19:96:07:85:45:17:14:c5:fd:f3:2a:32:8f:ae:
         74:01:d2:5c:5c:24:89:0f:39:45:a9:d6:09:6d:f4:c5:3b:9c:
         4d:40:b5:b8:66:3b:a7:2f:0a:74:82:39:85:c7:e6:86:f8:ca:
         50:a3:91:74:fa:af:55:b5:8e:f8:d8:2b:8e:57:7d:68:ac:6e:
         3e:80:a7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:09:43 2025 by rpki-client