Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File:                     fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier:          JET54NixliWsYkYuP9Ja8xM9RkBdfOg31rsjI09kMwc=
Subject key identifier:   09:1C:AA:6D:1A:E1:3C:29:3F:26:8B:26:F0:27:14:EE:49:6A:C6:46
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer:       /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial:       0196A8421E1C27265A12F9E9A4F05EE9ADB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number:          018A
Signing time:             Wed 07 May 2025 01:00:27 +0000
Manifest this update:     Wed 07 May 2025 01:00:27 +0000
Manifest next update:     Thu 08 May 2025 01:00:27 +0000
Files and hashes:         1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: e/ga0trJoJPQb9l3+501j6YhenuyiR90DMuTWybSS3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:42:1e:1c:27:26:5a:12:f9:e9:a4:f0:5e:e9:ad:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
        Validity
            Not Before: May  7 01:00:27 2025 GMT
            Not After : May  8 01:00:27 2025 GMT
        Subject: CN=091caa6d1ae13c293f268b26f02714ee496ac646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:b1:67:13:7b:48:ea:00:83:36:d2:5e:e6:
                    a8:ce:20:ab:ed:ed:09:0e:18:1c:db:03:e3:a7:e8:
                    ad:6f:56:5e:53:1d:37:97:01:70:dc:c4:df:55:ab:
                    b4:df:9b:31:57:b5:d9:d1:a4:46:27:c1:43:fe:28:
                    a8:75:16:2f:1c:21:b1:d0:a8:ed:67:91:5a:46:93:
                    ca:9e:3a:6a:32:5e:cb:35:c4:4d:fb:59:2b:52:4c:
                    cf:b4:a9:97:a7:1b:a1:87:f0:1b:83:63:90:4c:81:
                    24:e7:07:50:f9:6e:65:cb:37:56:c4:45:09:33:c6:
                    df:8d:1d:b5:8a:55:72:a0:82:d3:ce:7e:7f:3e:fd:
                    5f:b1:ad:a9:be:87:07:aa:52:bf:b3:54:8c:52:9c:
                    da:96:81:e6:31:df:dd:05:34:57:3c:ed:8e:85:de:
                    12:a6:de:c5:c6:5c:e3:d5:73:6e:41:8c:c8:94:d6:
                    3f:79:eb:24:74:fa:5e:ed:50:81:a4:80:3e:a6:02:
                    b6:63:66:24:88:ba:37:c5:63:0c:38:f9:97:0a:cf:
                    ac:ac:28:81:25:a7:f0:34:1d:d6:da:61:9b:fc:e4:
                    a6:7f:86:9b:ad:27:cf:8a:88:f4:13:39:31:7c:13:
                    cc:db:d9:96:14:2c:8c:69:9a:b4:11:69:33:8b:ad:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:AA:6D:1A:E1:3C:29:3F:26:8B:26:F0:27:14:EE:49:6A:C6:46
            X509v3 Authority Key Identifier:
                keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f5:6f:68:a7:94:f0:83:77:95:c7:46:39:70:04:8a:60:38:
         1d:c4:d3:d2:d5:eb:7c:5b:97:8a:99:aa:19:d6:60:d4:da:99:
         1a:9f:b0:03:06:fe:f2:45:75:db:df:71:ea:fc:69:91:e2:e3:
         5f:16:73:b2:2b:a3:ea:d9:3f:01:1f:59:c8:65:47:74:f8:8e:
         06:03:e8:46:a9:7e:c7:7e:a6:7d:bc:11:40:1f:ed:57:9b:26:
         01:e0:d9:ee:f5:c5:92:3c:fa:15:aa:92:fc:85:7b:fe:70:d6:
         ec:40:63:e8:2e:76:16:77:d7:4c:ec:a0:d4:10:83:58:22:74:
         b2:6f:6b:f1:15:0b:a4:ab:b4:b8:5f:65:f9:d4:e1:df:dd:d9:
         30:f4:a7:c4:1c:d8:1e:e7:98:81:90:5b:c8:d5:06:da:5b:36:
         6e:86:31:80:b2:73:2b:d9:5d:08:a7:92:54:5e:00:6a:c4:c2:
         5a:60:66:f9:52:66:5d:59:ee:24:65:49:05:9c:5d:b1:99:a4:
         ee:cb:28:3c:12:9c:88:9a:d6:7f:51:90:33:67:5f:32:a3:e2:
         dd:bf:cf:5b:36:1d:18:94:c4:4d:ea:03:e2:f2:4f:22:c8:14:
         9b:56:1b:c5:53:e6:e8:20:d1:20:20:de:48:ab:64:28:4f:9c:
         c0:18:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:01:03 2025 by rpki-client