Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
File:                     mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft (raw, json)
Hash identifier:          PtPMTPlz1L7iy+rVXR8AUhEuxKgsDiYYysy2NfLkQ3E=
Subject key identifier:   57:BA:B2:FB:9E:75:87:29:CD:99:BA:CE:18:62:A9:27:42:04:C8:F1
Authority key identifier: 98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
Certificate issuer:       /CN=98d2d8720a7835bdab53b45313381abb176d5dff
Certificate serial:       0196C49561B533A9313499E1734D2794E1F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
Manifest number:          045C
Signing time:             Mon 12 May 2025 13:00:46 +0000
Manifest this update:     Mon 12 May 2025 13:00:46 +0000
Manifest next update:     Tue 13 May 2025 13:00:46 +0000
Files and hashes:         1: mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl (hash: fIihNlKdV08FMbupbBnQJKOW+8Y4jr37U7ynen7MZzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:95:61:b5:33:a9:31:34:99:e1:73:4d:27:94:e1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98d2d8720a7835bdab53b45313381abb176d5dff
        Validity
            Not Before: May 12 13:00:46 2025 GMT
            Not After : May 13 13:00:46 2025 GMT
        Subject: CN=57bab2fb9e758729cd99bace1862a9274204c8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:87:cb:28:4b:17:f6:14:32:f6:2a:b8:34:
                    9e:64:4e:09:f6:f0:11:e4:50:fc:11:95:7b:2d:c3:
                    09:0a:ef:03:ff:7b:b6:99:ba:6e:5a:f4:a9:d1:b5:
                    f3:14:42:c4:3b:5c:d0:2b:16:6f:eb:37:4d:ae:34:
                    37:ff:06:bc:15:7d:6b:49:3d:0b:c1:12:e3:2f:9a:
                    cc:7e:54:86:80:31:60:45:20:7d:2a:22:f8:0b:8f:
                    19:eb:ec:a0:99:48:1c:b3:70:f3:91:80:34:50:d6:
                    76:4f:e0:04:a1:09:1c:b0:16:e7:30:96:fc:35:69:
                    5f:a8:83:14:42:77:9e:b8:67:89:34:38:22:ab:47:
                    10:5f:bf:b4:9e:51:de:5a:8a:d7:40:d6:77:6a:c2:
                    30:31:61:6c:54:5c:33:c0:ae:f1:bb:87:54:5b:ce:
                    02:90:78:bb:16:a6:66:d4:34:73:77:86:14:95:55:
                    f2:8b:e7:b8:60:92:73:48:7e:ab:33:02:17:77:ca:
                    18:0e:17:ef:31:90:21:d6:d6:fd:77:0b:35:ed:80:
                    ea:e0:31:30:dd:3c:85:36:79:16:74:4b:b3:c8:98:
                    a6:b0:e1:98:32:48:81:6e:d2:73:bb:30:47:03:28:
                    9e:13:d3:dc:8f:b3:87:78:09:02:d1:37:22:6a:8c:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BA:B2:FB:9E:75:87:29:CD:99:BA:CE:18:62:A9:27:42:04:C8:F1
            X509v3 Authority Key Identifier:
                keyid:98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:55:9a:07:d5:d9:5b:2e:98:44:ef:d0:6f:24:12:35:b5:6e:
         c1:50:69:b5:db:fa:b7:81:0e:13:71:5a:90:9e:16:5c:f8:34:
         19:e3:16:7e:14:c5:41:5e:2e:94:0a:5d:e0:21:01:d5:34:01:
         52:43:60:cf:68:a4:09:1d:8b:3c:91:27:df:f0:14:43:16:a8:
         02:f1:3f:63:31:19:48:38:72:4b:e1:37:63:be:16:df:29:a9:
         e1:c6:91:2e:ce:15:92:51:7b:b9:67:50:a5:db:ce:ab:2c:aa:
         34:ca:37:aa:9c:4f:f6:dd:7c:71:d1:b8:ef:aa:66:56:c1:2e:
         b6:05:77:1a:28:86:1c:61:0d:9e:21:79:91:26:ed:ee:a2:a8:
         e3:29:02:c0:cf:7b:46:6b:9d:2d:3b:b4:68:6c:44:ec:ee:c5:
         aa:35:21:29:a2:22:96:3f:18:59:e5:b0:36:03:da:98:a8:c1:
         eb:14:0b:6d:47:34:b2:98:fc:2b:9d:6b:19:04:1e:20:35:44:
         ce:32:78:eb:d1:68:63:e4:55:8c:33:b2:ab:00:12:b4:64:5d:
         7e:76:52:bb:8c:b3:55:d3:48:2d:8b:d1:aa:2c:b2:41:34:55:
         1a:53:21:4c:e2:6b:36:c1:d1:6e:0e:ae:02:c2:7c:3c:28:6d:
         6d:bc:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:46:28 2025 by rpki-client