Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
File:                     h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft (raw, json)
Hash identifier:          H6cf6GZSoLI/xcrYAtEhPVXpXabLtyJBNAttCXeVHeE=
Subject key identifier:   3C:8B:8E:7D:A0:A1:AA:D7:2D:44:F4:BE:E9:C8:6D:D7:8D:D0:9B:D4
Authority key identifier: 87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
Certificate issuer:       /CN=87d49ea28d2591f72e757c7dad300814c27794be
Certificate serial:       0196BC006579730DF4A8087C6EB5FE607B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
Manifest number:          049F
Signing time:             Sat 10 May 2025 21:01:04 +0000
Manifest this update:     Sat 10 May 2025 21:01:04 +0000
Manifest next update:     Sun 11 May 2025 21:01:04 +0000
Files and hashes:         1: h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl (hash: 6kJiJ0/eqFXSbXFAu1S3pN66q+L/DigzTPvljrTJy3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:65:79:73:0d:f4:a8:08:7c:6e:b5:fe:60:7b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d49ea28d2591f72e757c7dad300814c27794be
        Validity
            Not Before: May 10 21:01:04 2025 GMT
            Not After : May 11 21:01:04 2025 GMT
        Subject: CN=3c8b8e7da0a1aad72d44f4bee9c86dd78dd09bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:4b:26:ae:34:4a:66:98:fb:2e:58:89:17:
                    1a:1e:08:fc:19:aa:b7:89:69:1c:46:ae:ba:de:6c:
                    db:a1:59:9d:54:05:ef:bd:41:68:d7:f4:33:63:97:
                    65:52:03:51:a0:ba:c4:40:51:ad:f2:90:2d:ff:82:
                    28:f4:b0:b5:98:6c:0d:32:ad:92:84:54:d4:e4:ff:
                    a1:83:07:af:96:e1:83:35:54:14:d4:91:da:af:15:
                    cc:66:4b:bc:87:dd:59:ff:1d:87:da:00:63:09:be:
                    d3:f3:db:1e:33:d9:d9:5c:bc:21:db:e9:f5:c3:0e:
                    a2:67:51:47:7f:b0:50:e2:b0:80:e2:74:6c:32:9f:
                    fb:0e:7d:ae:82:ac:28:83:45:30:bb:2a:51:0c:b6:
                    be:11:21:70:0f:3d:76:c7:7f:78:45:f2:5a:39:11:
                    e3:48:cc:e7:28:96:1e:ac:8d:a6:32:80:3e:48:74:
                    9a:69:fb:3d:c7:4b:30:fc:96:39:69:57:5a:cb:85:
                    f3:68:03:44:8a:ee:c3:d8:e4:fe:a9:eb:b3:a2:cb:
                    b2:a2:60:59:13:cd:2d:b2:f0:21:3f:54:ff:78:52:
                    41:95:9b:94:bc:12:2a:9d:38:6d:8d:9b:51:28:7a:
                    2e:87:20:27:96:19:a1:8b:e0:4e:de:93:ad:02:ad:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8B:8E:7D:A0:A1:AA:D7:2D:44:F4:BE:E9:C8:6D:D7:8D:D0:9B:D4
            X509v3 Authority Key Identifier:
                keyid:87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:40:7f:8d:28:e5:10:5c:28:65:8a:ff:1e:89:95:7f:b2:dc:
         69:30:c2:20:2e:8b:f3:1c:ea:52:97:49:2b:b7:48:16:67:52:
         5d:67:d6:0d:56:11:e5:34:32:91:14:8c:4c:0e:56:30:7f:82:
         8b:9e:0b:58:7f:55:dc:d2:39:4f:1e:7c:04:f5:42:8b:c6:ce:
         65:f0:a2:9c:6d:ab:cc:30:2a:7c:6c:f4:3b:d6:de:cd:75:12:
         6f:10:85:bd:2a:23:c8:75:4b:b4:52:54:1d:54:2f:42:6c:51:
         ce:82:2a:4f:8a:25:60:85:69:ad:04:26:a6:ab:29:62:71:4d:
         55:eb:0b:5e:db:b7:5f:22:5d:09:0b:89:91:9c:1f:f1:62:57:
         d6:4d:80:f5:e7:21:1b:55:cb:11:ca:7c:66:12:9c:d2:58:79:
         e3:82:47:d5:af:38:61:bf:ec:65:1d:2d:82:60:4f:fe:91:65:
         45:48:8c:e5:3e:09:7c:a7:bf:1b:70:05:ca:52:26:85:91:4d:
         2c:90:d1:69:90:6c:9b:db:6a:66:1b:e2:c5:e7:40:ee:d4:54:
         28:65:21:90:24:9b:9b:99:6e:2d:fa:49:5a:4d:26:47:43:59:
         83:85:c8:58:c6:bf:22:7c:f6:dd:d0:72:0e:ed:2c:50:f5:76:
         cc:d7:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:22:47 2025 by rpki-client