Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File:                     nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier:          5gE9p5BF6z30z/5/+9pDKNWDiUY81UTHU9qnzigQxHI=
Subject key identifier:   64:B4:75:78:DD:BC:01:61:D6:6F:34:F0:B0:05:EB:B0:D6:DE:C3:38
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer:       /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial:       01969E9A20F4E46E7E954867A2B936F2D446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number:          0622
Signing time:             Mon 05 May 2025 04:00:23 +0000
Manifest this update:     Mon 05 May 2025 04:00:23 +0000
Manifest next update:     Tue 06 May 2025 04:00:23 +0000
Files and hashes:         1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: EI7O6WfOzIXQKzU8SEVwXtPPQyXgfRT05MuK74F7vGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:20:f4:e4:6e:7e:95:48:67:a2:b9:36:f2:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
        Validity
            Not Before: May  5 04:00:23 2025 GMT
            Not After : May  6 04:00:23 2025 GMT
        Subject: CN=64b47578ddbc0161d66f34f0b005ebb0d6dec338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:47:83:8d:a6:8e:dd:37:4e:2d:51:27:63:
                    1b:c1:b7:6d:ff:0f:17:54:fc:be:bc:d7:65:f7:50:
                    c2:9d:2c:71:63:cc:98:6a:ab:1e:4c:fd:ef:00:9f:
                    18:1e:83:82:fd:55:8b:e2:de:6b:e0:c3:a2:f8:e6:
                    a7:ef:ac:bd:b6:e0:fe:4b:d8:ca:19:62:bf:b6:92:
                    c2:84:8b:0c:67:b3:a6:34:e7:f9:42:e1:e0:c0:f7:
                    e7:f8:9c:3d:9f:f1:ad:a2:f6:14:c3:bf:5d:78:8d:
                    fc:01:54:d3:ea:22:69:f9:dc:71:a8:aa:97:03:49:
                    05:19:bf:8d:e7:76:ff:e2:93:de:61:2e:b5:f3:01:
                    4a:4d:92:0e:46:21:d4:db:01:e3:e8:9c:b0:9a:2a:
                    38:49:db:82:0b:d1:b6:64:7a:b0:d1:e1:37:09:92:
                    99:29:3e:8e:92:4e:fa:18:c0:52:d2:0a:d3:a9:a6:
                    0a:ac:04:40:b3:dc:4c:3e:af:92:25:98:00:fe:50:
                    97:b6:6e:23:44:04:7f:ba:6d:06:53:61:2f:f3:d3:
                    c8:3c:41:46:54:cf:b3:9e:53:e4:07:f0:b0:a3:b3:
                    c8:a7:37:21:ac:d2:3c:b9:0c:a6:a9:df:67:f6:e9:
                    c9:cc:9f:09:e5:76:21:f5:bc:f2:74:e9:be:aa:b8:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B4:75:78:DD:BC:01:61:D6:6F:34:F0:B0:05:EB:B0:D6:DE:C3:38
            X509v3 Authority Key Identifier:
                keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:31:41:45:7f:53:4b:61:ff:6a:c9:a7:d7:8c:ac:9b:70:71:
         2c:df:aa:7c:15:27:90:c9:a3:ce:02:f5:ea:ef:3f:4d:14:0b:
         bf:fa:64:73:22:ac:0e:f3:a4:4f:6e:48:2b:1e:d5:35:58:27:
         7d:20:cd:95:9c:21:86:55:02:88:1f:b5:3d:6c:56:aa:2f:ea:
         15:1c:8e:2c:eb:65:71:a7:b1:03:a8:93:47:18:55:72:56:bb:
         63:3d:10:51:b9:f1:ab:52:b9:1a:24:1f:05:b8:51:7f:33:4a:
         55:95:a0:07:c1:e3:b7:29:50:17:7a:5d:1f:a9:41:9d:f8:43:
         63:46:72:a5:e4:3d:d2:b8:2c:be:0b:74:ac:1a:2a:3e:21:60:
         ea:25:57:41:20:ef:5e:94:f7:77:1a:4f:95:91:64:e8:87:4d:
         84:ea:c0:bf:c7:7a:a3:b9:af:b7:22:8f:00:51:13:2f:03:4c:
         56:61:85:2a:12:12:66:cd:31:09:ce:61:22:7b:dc:45:2a:b8:
         a1:7a:ce:ad:3f:ba:67:95:5e:18:28:ee:86:92:d6:aa:0e:b4:
         f5:0f:b9:9b:d7:0e:4d:6a:ab:72:18:76:cf:a3:cf:01:b4:d5:
         d2:91:92:13:b2:79:0d:c2:e6:97:81:b8:b6:a6:7c:43:18:a7:
         04:ec:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:42:54 2025 by rpki-client