Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File:                     Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier:          0MhSuse2q1AYZFQrjM7FvUnLjwD/+52AYKTAmXZ4Q8E=
Subject key identifier:   68:90:1B:14:9D:95:D9:66:1A:7B:D2:37:5A:8E:0A:3C:A7:5C:68:8A
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer:       /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial:       0196B1EAEBD35A45259E8C17700127E5C3B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number:          096B
Signing time:             Thu 08 May 2025 22:01:25 +0000
Manifest this update:     Thu 08 May 2025 22:01:25 +0000
Manifest next update:     Fri 09 May 2025 22:01:25 +0000
Files and hashes:         1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: 4SRFhnSd0PkW2+yGoY2biVkHhaszohEulueEvEZsP+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:eb:d3:5a:45:25:9e:8c:17:70:01:27:e5:c3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
        Validity
            Not Before: May  8 22:01:25 2025 GMT
            Not After : May  9 22:01:25 2025 GMT
        Subject: CN=68901b149d95d9661a7bd2375a8e0a3ca75c688a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:36:f4:a7:6e:69:ba:36:1a:7c:77:03:be:
                    03:51:e0:0a:85:41:b6:19:97:68:85:15:fc:ce:e6:
                    9e:6c:dd:1e:a1:2f:c1:5a:5d:92:71:1e:59:7d:cd:
                    20:66:71:85:a9:4d:66:1e:42:6a:c0:89:aa:30:2e:
                    84:ab:88:f4:9e:94:41:d3:fb:5d:a5:79:f7:83:0a:
                    a9:8f:c4:f5:fe:e1:bb:56:ca:9b:0a:39:2b:9d:e6:
                    98:21:30:5f:db:01:71:08:66:ea:5b:7b:b6:50:87:
                    ee:4a:d1:81:1a:18:96:d8:e6:ca:68:6c:6d:eb:bb:
                    d4:65:84:5f:32:c6:2e:b4:b0:15:6d:2e:03:57:df:
                    64:e0:0a:e9:6f:f1:0d:d8:85:bc:16:94:b1:ab:fe:
                    1d:2d:9e:69:41:23:bf:5f:4e:40:31:20:9b:68:73:
                    81:fb:78:ab:29:5d:98:dd:84:4f:e2:2b:61:f4:b2:
                    92:59:5d:d7:94:91:7c:8c:36:44:e0:a5:5a:eb:05:
                    2f:14:92:4a:0d:00:7c:e8:71:40:79:93:8d:9b:2d:
                    75:4f:1e:69:7d:0b:6c:97:a6:21:c7:9b:56:5a:74:
                    c8:67:38:cb:48:02:da:54:49:08:4f:e6:02:14:31:
                    fa:92:d2:fe:84:dd:8b:0b:2a:c4:3e:fd:de:4a:2b:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:90:1B:14:9D:95:D9:66:1A:7B:D2:37:5A:8E:0A:3C:A7:5C:68:8A
            X509v3 Authority Key Identifier:
                keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:e0:15:e9:91:ff:f6:88:be:e0:30:46:a1:77:cd:a3:5a:e7:
         8f:c9:68:9e:5e:8e:bd:2c:0b:17:14:4b:59:16:ee:cd:49:0a:
         d5:68:11:29:a2:01:97:ac:f7:9f:99:20:4b:54:83:51:2c:e4:
         4b:fc:61:07:bb:e7:b9:cd:51:cc:8f:5e:06:17:4c:8e:76:c2:
         5c:a9:ba:28:01:43:09:79:86:d4:e8:9d:04:72:1e:69:85:fa:
         79:a4:9a:73:b6:af:be:4b:10:31:ea:21:59:48:16:20:10:2c:
         21:2c:07:c5:32:2f:88:21:ca:2b:85:3e:a9:5a:ca:6b:61:34:
         f3:3b:9e:22:db:f5:fe:77:ad:c9:b6:b2:1b:a5:9b:00:af:04:
         de:47:a7:8e:c8:c7:55:eb:c8:c0:06:26:42:ee:b1:29:f5:08:
         52:b5:94:98:b2:d6:ea:1a:64:30:bf:86:ca:a3:49:20:c4:3e:
         0d:ac:c2:45:2a:84:96:17:c1:e3:d8:60:9d:05:42:c4:fd:76:
         5b:2d:cf:a3:99:69:25:62:9e:b0:c0:d9:e6:c9:91:24:13:da:
         91:ac:8c:f7:70:38:df:3b:58:7b:e0:8f:8a:66:4f:bb:91:20:
         a0:ac:00:84:ff:6e:a9:85:ab:61:97:5e:a0:52:66:9f:6d:50:
         d0:0d:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:00:11 2025 by rpki-client