Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
File:                     t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json)
Hash identifier:          rL5680h+pxWaSSYgOZz/Uqph+6ql96TwgVv8rLqfrUc=
Subject key identifier:   77:FF:65:A9:4B:C9:C4:5B:24:A6:58:D9:51:A0:B5:48:94:BE:A5:95
Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
Certificate issuer:       /CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Certificate serial:       0196BD8028651420D29B18EED3D1946EE7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
Manifest number:          C0
Signing time:             Sun 11 May 2025 04:00:14 +0000
Manifest this update:     Sun 11 May 2025 04:00:14 +0000
Manifest next update:     Mon 12 May 2025 04:00:14 +0000
Files and hashes:         1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: 5aFMj8SRpOHwxxA7WX3unKs+nuaWRIARP8QctL81Ixo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:28:65:14:20:d2:9b:18:ee:d3:d1:94:6e:e7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a
        Validity
            Not Before: May 11 04:00:14 2025 GMT
            Not After : May 12 04:00:14 2025 GMT
        Subject: CN=77ff65a94bc9c45b24a658d951a0b54894bea595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:b8:a2:88:63:38:e4:25:3f:4e:be:ca:b4:
                    b9:45:09:ca:76:1f:4f:0d:84:4e:ca:9b:28:25:6b:
                    77:47:0b:0c:b3:d0:ca:af:52:29:cb:34:9f:e7:4c:
                    a1:0d:f6:cb:88:b0:c9:a1:e9:61:d6:8a:b0:45:18:
                    41:da:8a:b5:0c:e8:97:fa:12:e4:8f:eb:8b:17:e5:
                    0e:53:57:0d:18:94:1d:ad:ad:04:27:4a:a3:21:d7:
                    e3:96:5b:60:14:2f:ba:cf:cf:61:06:10:e8:a7:d4:
                    98:74:06:67:31:d7:2a:79:35:d5:db:17:8d:43:2e:
                    12:1e:ff:f6:5d:6f:b8:6a:b7:a9:c2:d3:cd:49:1a:
                    93:c3:6f:65:d4:5b:3a:1f:05:b2:43:2e:3d:c3:ab:
                    04:3b:1c:fa:6b:bf:e9:b5:ac:1d:e7:d0:00:59:2b:
                    d3:33:6a:ee:c1:8a:33:51:54:90:f4:41:27:4f:f3:
                    45:c0:60:ec:ec:f0:a4:b7:57:43:de:2d:78:a6:cc:
                    26:49:d6:5c:e8:87:78:5c:83:aa:53:c8:6e:53:b0:
                    df:92:9d:2d:59:70:e9:98:5f:c2:57:1b:75:0b:00:
                    c0:7d:00:4b:11:4e:c9:f1:f7:98:3a:72:52:e4:55:
                    f0:58:c8:1e:ae:db:ae:51:00:fe:ef:ce:eb:46:02:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FF:65:A9:4B:C9:C4:5B:24:A6:58:D9:51:A0:B5:48:94:BE:A5:95
            X509v3 Authority Key Identifier:
                keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:31:fb:67:dc:68:7e:28:81:d3:a8:fb:01:b2:77:51:dc:94:
         e8:a1:69:e7:42:ac:ea:c1:80:0b:22:6b:da:b4:e3:95:f7:2b:
         c1:e6:92:d1:ff:83:92:fe:ae:af:1e:c0:19:c4:16:ab:db:de:
         ac:63:d0:f9:3e:eb:94:c5:fe:2c:7d:03:6f:63:ec:64:1f:78:
         f0:b3:0a:5f:f6:57:24:c5:fa:cb:14:05:b3:a0:2b:8b:7d:f0:
         05:5e:5d:7b:d0:41:bf:a6:73:f1:02:82:75:82:6c:a7:ef:70:
         d6:a0:e0:ed:fa:a5:f2:1a:5f:b7:d2:d2:ad:18:57:41:89:9d:
         ab:dc:7f:6e:b6:19:62:7e:8c:ef:21:fd:af:b0:cf:e8:3d:54:
         6f:b0:8c:bd:12:d2:43:8e:f6:37:c5:eb:88:c2:97:bc:57:04:
         14:a2:99:a6:38:81:68:8b:6e:a2:38:61:2d:0f:b1:45:86:e5:
         25:fb:b0:ad:ba:8f:b8:f1:a0:39:58:10:e7:e6:9e:a2:83:fb:
         ee:14:f3:e9:9b:ef:25:a3:b0:00:10:b1:7a:07:49:14:f9:8f:
         56:a2:dc:02:15:87:91:f7:7a:5c:86:d2:8a:2e:0a:20:49:ef:
         98:86:81:d2:76:4b:70:68:01:69:1d:7b:6a:cb:64:4b:3f:be:
         50:26:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:28:10 2025 by rpki-client