Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          ETEMY/25joi3su7r9Qm28HWnjVmvlbfsLTGjJAPhuAI=
Subject key identifier:   48:EE:41:51:23:DB:15:3C:4C:A9:BE:C7:80:4F:FD:68:A5:3D:C5:0F
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       0196C2021F274B25CBF594C83BA29DF5891E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          0492
Signing time:             Mon 12 May 2025 01:00:41 +0000
Manifest this update:     Mon 12 May 2025 01:00:41 +0000
Manifest next update:     Tue 13 May 2025 01:00:41 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: vREwMqnvGN+9lcARM+9htBFkBPbhBxcazQpbSFw2sD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:1f:27:4b:25:cb:f5:94:c8:3b:a2:9d:f5:89:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: May 12 01:00:41 2025 GMT
            Not After : May 13 01:00:41 2025 GMT
        Subject: CN=48ee415123db153c4ca9bec7804ffd68a53dc50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:d7:4e:69:01:e9:c8:df:71:5c:c0:c2:c7:
                    d1:bf:4d:93:51:38:f1:f8:b9:a7:bb:c8:ee:6e:07:
                    8e:17:98:9b:b1:37:22:6e:a7:50:05:3d:d4:cf:fb:
                    14:ab:58:ca:20:3d:6e:e5:8c:9f:52:0b:b1:16:06:
                    89:08:9c:8e:7a:f8:d6:0b:4d:b6:fd:9d:29:bd:04:
                    8c:64:55:26:94:8e:24:ad:ab:f1:26:ad:2d:44:ce:
                    a8:81:53:8d:bd:d7:a5:0c:ce:e3:f3:9d:1b:f0:9b:
                    15:90:2a:8e:c4:98:27:05:f0:ed:f9:32:06:1c:64:
                    b8:3f:ab:51:fc:a9:dd:c2:e1:54:c0:2b:b1:a7:78:
                    ad:92:5d:5a:02:18:40:b0:11:00:d6:66:83:b7:3b:
                    99:9e:12:d4:f4:13:a5:ae:57:44:b3:62:1d:f3:ea:
                    0f:15:b4:4f:99:19:26:c1:89:d7:6f:d2:f0:8c:18:
                    16:b4:28:3a:4a:e5:5a:d8:3b:d7:b1:d0:28:ae:80:
                    99:d2:31:8c:09:ee:0a:45:4a:d9:62:e5:9c:4c:33:
                    9b:26:03:7a:b1:ff:0e:0e:61:b4:e1:4e:b4:8e:5f:
                    71:ad:f8:40:83:06:25:2d:6b:fd:9c:13:5a:5c:5b:
                    97:d9:41:56:66:41:da:c6:73:c9:2b:a5:f4:2b:ae:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:41:51:23:DB:15:3C:4C:A9:BE:C7:80:4F:FD:68:A5:3D:C5:0F
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:07:8c:79:52:93:a8:2d:11:4b:fd:c0:ae:f8:7d:78:19:
         23:dc:ad:d6:b1:cf:aa:fc:fa:bf:08:b2:3d:7d:81:71:e9:95:
         34:83:1d:1b:ea:b5:cd:fc:17:ba:f0:d9:8b:6e:26:58:18:81:
         e6:a2:5a:ee:27:fa:e9:70:91:85:c4:2f:c8:63:9d:7c:ba:1b:
         1a:da:25:e9:f9:e6:3e:00:90:96:00:42:33:1b:e5:69:97:45:
         80:ef:f3:52:a7:85:67:69:1f:0e:82:d9:b5:02:f9:bf:9a:e5:
         11:1d:b3:9d:21:b8:1f:8e:78:ab:89:d3:b1:43:06:cb:54:63:
         79:4d:ff:5a:86:9c:22:1e:b5:da:14:42:9e:4c:04:5c:87:70:
         4f:42:28:b4:14:a1:5c:72:1e:dd:1e:d2:45:d0:b7:07:1a:2a:
         fe:e8:d2:4d:41:5e:e1:7e:c1:db:a5:6a:63:83:54:cd:ed:bd:
         e1:fb:b3:1a:47:6c:88:73:86:1f:31:b8:81:3f:a4:f8:7b:89:
         c3:50:f8:0b:24:be:6f:98:8c:0f:22:83:c6:27:5c:db:c5:4c:
         fd:56:13:13:0c:75:e9:61:47:ed:09:a3:82:b6:a1:1c:3b:27:
         df:8a:45:5d:d7:40:b1:5b:5a:83:a3:25:8c:cd:97:c7:b9:83:
         95:e9:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:12:25 2025 by rpki-client