Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.mft
File:                     FumYOImalwSwCE5vbn7GvGaurVE.mft (raw, json)
Hash identifier:          XdvrL0UWlgvvE1ZQyjwUB8r4oZS0Y9mfx06d7q/qPRk=
Subject key identifier:   0F:83:92:DA:D9:57:8D:C6:CE:C4:26:22:BE:DE:5B:47:9E:85:99:86
Authority key identifier: 16:E9:98:38:89:9A:97:04:B0:08:4E:6F:6E:7E:C6:BC:66:AE:AD:51
Certificate issuer:       /CN=16e99838899a9704b0084e6f6e7ec6bc66aead51
Certificate serial:       0196C4951AE43F4C403372E4E8165FCA9B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumYOImalwSwCE5vbn7GvGaurVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.mft
Manifest number:          04E2
Signing time:             Mon 12 May 2025 13:00:28 +0000
Manifest this update:     Mon 12 May 2025 13:00:28 +0000
Manifest next update:     Tue 13 May 2025 13:00:28 +0000
Files and hashes:         1: FumYOImalwSwCE5vbn7GvGaurVE.crl (hash: +9IOxhnEoHw2CGaCl2y6jbgujnL0uNrUHNr2Mssa6qM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumYOImalwSwCE5vbn7GvGaurVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:95:1a:e4:3f:4c:40:33:72:e4:e8:16:5f:ca:9b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e99838899a9704b0084e6f6e7ec6bc66aead51
        Validity
            Not Before: May 12 13:00:28 2025 GMT
            Not After : May 13 13:00:28 2025 GMT
        Subject: CN=0f8392dad9578dc6cec42622bede5b479e859986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:af:e1:3d:7c:6a:ab:d9:c6:3b:4d:a8:0c:
                    77:06:8a:85:34:73:a6:31:57:cd:72:b1:55:75:80:
                    10:3f:2f:67:e9:48:67:a9:09:50:9d:0e:be:08:25:
                    0c:6c:da:f9:be:20:16:0c:7c:fa:72:8b:fe:ba:ce:
                    95:c2:b7:f9:22:df:d5:46:2b:65:48:ed:8a:bf:4f:
                    e8:38:cb:2b:8f:c4:26:d7:1a:4a:09:4d:0d:11:b5:
                    41:0b:de:68:c3:44:1e:2b:4d:84:9b:f9:68:d7:e0:
                    3e:f5:d3:5a:b3:89:5b:4c:9d:1f:16:7a:6b:f1:64:
                    8c:64:db:dc:c4:be:12:2b:d3:4a:f6:91:e0:38:ed:
                    2e:77:e6:50:73:8d:9f:8f:8d:22:1e:ed:1c:03:ba:
                    59:d2:b2:3b:62:73:74:e5:7c:99:73:38:6f:4d:49:
                    96:4f:9b:ca:ef:84:77:a6:0f:9f:eb:10:8c:88:a9:
                    1e:d7:8a:3d:fc:c1:51:5d:d0:e4:e3:06:96:16:b5:
                    2d:72:5a:57:81:50:69:33:81:72:58:21:0c:2d:9f:
                    f2:a4:fc:6f:88:41:a2:0c:fb:cb:66:e4:4b:80:89:
                    02:2b:b9:83:51:b2:87:a0:67:84:5a:3e:6d:1f:93:
                    d0:a7:12:a6:3e:89:1a:63:d4:d7:10:69:4d:a6:64:
                    60:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:92:DA:D9:57:8D:C6:CE:C4:26:22:BE:DE:5B:47:9E:85:99:86
            X509v3 Authority Key Identifier:
                keyid:16:E9:98:38:89:9A:97:04:B0:08:4E:6F:6E:7E:C6:BC:66:AE:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumYOImalwSwCE5vbn7GvGaurVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/803d45-c56e-4cce-975e-4d279158aed4/1/FumYOImalwSwCE5vbn7GvGaurVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:29:36:00:7f:bc:2a:81:3b:77:47:ce:42:a6:4f:9d:a0:e5:
         fe:e3:ba:ef:59:48:12:a7:16:89:6d:50:a4:bb:b5:1d:23:90:
         55:ae:48:3c:4c:44:cd:13:f7:bd:03:ad:d0:92:a4:15:e5:59:
         28:ac:21:41:13:8f:a7:6b:0c:51:4b:6f:9d:69:40:2c:e3:cb:
         73:85:4d:ea:f6:eb:50:e1:37:87:97:55:2e:3e:52:00:59:a5:
         42:d8:0a:26:b6:3a:e8:2f:74:62:fa:84:38:ce:69:42:13:92:
         18:bb:6e:d5:ef:cb:37:26:64:c4:39:71:d7:ef:86:c5:43:f3:
         cc:fb:2c:a7:45:2f:80:15:e9:89:d8:73:db:9a:7d:7f:67:5f:
         55:d1:8a:7f:e6:d4:01:5a:48:22:5e:ff:06:75:f9:c0:52:13:
         5a:f3:c2:f3:c4:53:f8:5d:37:54:01:15:b8:25:07:d9:b5:8e:
         cd:f1:ce:a4:c7:6c:df:01:a6:ff:23:13:2d:81:dd:13:9b:dc:
         55:3e:d7:9e:bc:ef:9a:4b:2c:4d:fe:0d:73:68:46:7f:da:f3:
         67:c5:6a:2c:95:41:65:c3:84:29:45:24:0e:e2:ac:7f:3b:8e:
         62:2a:5c:d7:0c:4f:6c:1d:71:5e:98:2b:6c:a3:84:e3:21:35:
         61:e7:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:20:44 2025 by rpki-client