Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File:                     t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier:          tOO/lkkOchPve/wNzbGE+UA+00sLb0U+SV4+ZPuOJRc=
Subject key identifier:   90:21:47:5C:EB:93:25:4E:E2:98:BD:38:3D:90:32:69:F4:47:93:0E
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer:       /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial:       0196B22120A965570E54BCD76531354AF650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number:          04E3
Signing time:             Thu 08 May 2025 23:00:37 +0000
Manifest this update:     Thu 08 May 2025 23:00:37 +0000
Manifest next update:     Fri 09 May 2025 23:00:37 +0000
Files and hashes:         1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: 5xU7sxx71zWfDLVI+DHWswOgCUOVtuuKjIdejjJFsXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:21:20:a9:65:57:0e:54:bc:d7:65:31:35:4a:f6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
        Validity
            Not Before: May  8 23:00:37 2025 GMT
            Not After : May  9 23:00:37 2025 GMT
        Subject: CN=9021475ceb93254ee298bd383d903269f447930e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:22:11:73:7e:57:eb:4c:6f:c9:96:5b:f2:
                    f6:40:04:c3:40:a2:42:83:e1:c4:52:b8:c2:0a:55:
                    73:4b:1c:29:77:d6:9a:a8:bb:77:cd:db:8f:2a:b3:
                    2b:8c:33:ff:d7:8d:f3:4a:de:fb:e5:11:e1:81:31:
                    06:94:fd:f4:f1:6d:48:5c:87:6f:c9:32:b9:45:77:
                    8a:d9:44:66:7b:59:49:b6:25:65:84:1f:ef:f5:11:
                    64:51:c6:ec:9d:5e:84:6e:c1:15:1c:06:d6:db:47:
                    bd:9c:46:a0:f7:9a:2e:b5:fa:7a:dc:37:36:d0:d8:
                    57:2a:ae:ef:cf:06:cb:80:40:eb:88:fc:82:bf:e3:
                    c1:52:94:6d:54:17:b5:ea:4a:d1:88:7e:db:f4:68:
                    30:bc:ba:23:76:1b:89:54:74:44:41:02:6d:15:50:
                    0b:63:91:65:17:70:c0:ba:0d:e0:28:c9:c9:92:eb:
                    07:db:29:0d:5b:05:ab:23:f1:c4:c9:75:ee:9e:15:
                    1a:f5:92:13:49:2d:7e:75:1e:f6:3f:0c:8f:92:39:
                    bd:44:36:25:67:d8:43:83:d4:62:71:c0:8f:a0:7b:
                    b6:9f:64:fd:04:f2:16:ff:b9:2e:bd:bf:60:6c:e9:
                    7c:1f:46:bf:1b:20:cd:11:2f:ee:0e:36:00:c8:6c:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:21:47:5C:EB:93:25:4E:E2:98:BD:38:3D:90:32:69:F4:47:93:0E
            X509v3 Authority Key Identifier:
                keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:a9:30:27:39:fd:ba:1e:1f:f3:0f:8f:09:de:ae:52:5b:
         57:87:d4:4e:8a:c5:d4:49:09:af:4b:c9:85:b2:ef:84:30:58:
         ff:d1:bb:2e:d1:ec:64:2a:80:b3:52:c9:7c:6e:6b:d8:20:67:
         26:d6:6b:50:5e:86:f0:4a:91:cb:e9:34:3c:d3:5b:28:77:42:
         93:61:f7:de:69:d1:0b:1f:2c:da:a0:10:d5:33:88:84:96:72:
         2c:e5:3f:91:2e:9a:f1:03:8c:a6:45:6a:31:ac:b8:b0:65:5e:
         d4:ca:52:e7:d9:f9:7f:30:60:79:74:94:92:4f:72:f1:69:e6:
         a4:04:b8:4d:37:2b:2e:81:4c:5d:b9:e8:00:23:6c:56:9f:1e:
         fc:13:62:eb:a4:71:44:d6:e9:6c:72:16:00:3a:71:d9:1d:e4:
         ad:52:1c:ae:23:ac:3b:f5:08:c1:9b:60:97:1e:38:64:d2:31:
         2d:85:00:11:7a:a4:dc:8f:c1:5c:4c:7e:eb:13:49:d0:1b:72:
         17:be:5e:0c:d0:73:66:f6:d9:3d:ca:98:a0:35:f1:a7:b6:32:
         5a:97:41:ad:12:e1:e1:0b:ec:07:93:94:a9:60:dc:c9:74:b3:
         c9:13:f1:29:47:34:91:ff:85:fd:19:a1:a8:94:07:0a:b3:d4:
         c3:e3:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:13:52 2025 by rpki-client