Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File:                     qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier:          6jRulxzkgiy/Kx5x+hzqUWMoNFn0v+BaC27Dj3+CqVA=
Subject key identifier:   B2:F0:A9:FC:9E:01:1A:66:A9:1A:59:B8:7C:E0:AF:45:01:7F:44:08
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer:       /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial:       0196D4082DD183D8D9E663A273EDB496CAB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number:          137C
Signing time:             Thu 15 May 2025 13:00:27 +0000
Manifest this update:     Thu 15 May 2025 13:00:27 +0000
Manifest next update:     Fri 16 May 2025 13:00:27 +0000
Files and hashes:         1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: t6o8Wu7JNiIm9g6pLJ16NuoGnjq3Z3u2GJkvTGcp9oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:08:2d:d1:83:d8:d9:e6:63:a2:73:ed:b4:96:ca:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
        Validity
            Not Before: May 15 13:00:27 2025 GMT
            Not After : May 16 13:00:27 2025 GMT
        Subject: CN=b2f0a9fc9e011a66a91a59b87ce0af45017f4408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bd:d0:43:ce:06:02:c8:ae:27:50:a6:3d:5f:
                    1f:11:3f:62:3d:22:40:cb:e5:5d:4e:16:8d:f0:ea:
                    cc:5f:ee:5a:f8:b2:e6:a5:68:49:74:1c:d9:9c:f0:
                    4f:6c:96:e8:fb:10:a1:2c:8f:9f:d9:78:0d:3a:5c:
                    7c:9a:71:7c:c6:79:25:b4:f5:f5:dd:cc:d9:41:94:
                    7d:42:c0:15:87:a9:b0:5a:08:66:66:1c:9a:b7:f9:
                    27:d9:1e:3a:0c:51:a2:ca:b7:88:ce:b9:35:ac:ca:
                    b7:c6:aa:a5:aa:e8:7f:3b:96:b2:40:5f:40:d6:54:
                    21:7d:a8:6e:73:22:0c:6d:05:39:a5:a7:72:8d:5f:
                    a2:c7:f6:60:ab:1d:3f:d0:17:34:c3:f1:4e:25:33:
                    13:d3:7a:d9:75:48:e0:8d:89:76:2a:8b:e3:1c:ed:
                    de:b8:c4:c9:28:c4:8b:1e:a6:e5:2a:dc:cd:80:a4:
                    24:d7:03:9e:68:22:92:1f:aa:11:69:83:28:fa:ac:
                    1b:d9:48:c3:56:20:fd:cd:a1:5e:cb:53:bc:e2:49:
                    ea:fb:35:a2:da:f9:13:cd:9a:78:01:6f:6b:c2:ea:
                    42:82:90:f0:f4:a7:d1:bf:a5:93:96:a8:50:24:03:
                    76:4d:d9:84:93:b0:86:58:e7:1f:85:f5:8b:19:08:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F0:A9:FC:9E:01:1A:66:A9:1A:59:B8:7C:E0:AF:45:01:7F:44:08
            X509v3 Authority Key Identifier:
                keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:f9:e2:58:5b:ea:1e:dd:92:91:1c:63:54:5c:7f:84:e9:
         46:00:d9:9d:30:70:63:6d:29:f3:fb:5d:d1:88:53:60:f0:95:
         90:b1:4e:b9:4e:f4:5d:43:4f:90:a8:dc:f8:8d:2d:f1:36:53:
         5c:d9:f9:6b:29:af:80:94:0a:73:ce:2f:65:ea:a2:e3:40:44:
         f1:0d:f2:9d:e3:32:cb:86:71:95:bb:14:b1:9f:41:ee:ee:85:
         eb:71:f0:f1:e0:81:7f:de:7f:05:69:d8:68:00:83:e5:c9:79:
         30:0a:c4:48:9e:c9:de:97:68:de:a7:d5:5a:14:c0:9c:4f:95:
         6d:55:a6:1b:5b:77:09:92:81:bb:26:ce:9f:a6:fb:93:b1:fa:
         61:03:7d:a0:9c:7e:f2:eb:3b:91:54:ca:45:b2:bd:ee:90:64:
         7d:56:1d:8c:dc:7e:06:4e:cb:b2:3c:38:13:a3:ac:1e:b4:04:
         1b:4f:a5:ef:23:90:a3:ee:3f:77:87:90:af:85:fc:2e:81:bb:
         0d:7e:cb:ff:9d:37:37:54:b2:32:a0:da:46:80:62:ea:7a:e3:
         e7:80:e8:e6:8f:09:d1:71:f5:e9:ab:43:6a:2e:3f:38:5c:1a:
         82:ab:94:2c:61:2e:05:ed:85:11:13:ee:22:0b:c3:e6:86:d7:
         5f:47:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:17:59 2025 by rpki-client