Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File:                     cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier:          qv8+atVJNjCA9DultGIhL3d3yZlguMKwzKyBpJqaxmE=
Subject key identifier:   B1:45:4F:19:40:56:31:89:62:62:5F:7F:6C:50:A3:9F:3B:07:48:8F
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer:       /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial:       0196C3B96FFB0D0E68708F2BBE511741A690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number:          035C
Signing time:             Mon 12 May 2025 09:00:31 +0000
Manifest this update:     Mon 12 May 2025 09:00:31 +0000
Manifest next update:     Tue 13 May 2025 09:00:31 +0000
Files and hashes:         1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: UNOcCo2XYTrAClE57R5/8MGb45wiUiysLrjqx9J6hVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:6f:fb:0d:0e:68:70:8f:2b:be:51:17:41:a6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
        Validity
            Not Before: May 12 09:00:31 2025 GMT
            Not After : May 13 09:00:31 2025 GMT
        Subject: CN=b1454f194056318962625f7f6c50a39f3b07488f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:59:ea:ea:5a:38:11:8e:2a:aa:07:3a:02:
                    c7:7b:15:96:d2:02:91:50:48:27:1e:51:e6:46:05:
                    1f:55:a7:17:a6:f2:7e:dd:74:89:ee:1a:05:b9:93:
                    e9:75:49:a5:74:ca:6d:d9:51:e4:4c:ef:5d:e8:a9:
                    64:94:72:c6:2d:db:c5:16:b4:34:ed:f0:d1:a2:ec:
                    67:ef:ad:19:c8:03:76:7f:dd:cb:52:57:82:4f:e1:
                    26:ef:e6:e4:15:0b:38:f2:47:58:50:43:01:74:0d:
                    00:58:2e:ca:9c:e0:8d:fa:70:cb:86:f7:d2:d9:09:
                    90:43:3f:b7:01:a8:99:74:a8:de:1d:f2:15:41:a2:
                    e4:59:33:99:fd:1b:1a:8a:55:1c:68:6c:af:4d:5d:
                    cf:c2:ef:88:b1:be:3e:b3:f7:15:93:92:a5:53:7e:
                    e8:d2:1a:2c:be:63:33:5f:ba:01:52:2e:6f:54:c6:
                    88:59:8d:7c:b5:ff:27:fd:da:bf:da:8e:4f:6d:96:
                    32:f8:2a:c2:3c:b5:7b:15:23:b7:24:76:7d:2f:08:
                    6f:aa:83:7b:24:80:fa:38:7b:8e:ff:53:bb:81:59:
                    0f:e3:8d:f8:d4:fa:94:7a:39:f4:11:0c:f3:f0:b5:
                    8d:1a:a7:18:38:26:ec:d4:0c:64:a5:2a:32:08:23:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:45:4F:19:40:56:31:89:62:62:5F:7F:6C:50:A3:9F:3B:07:48:8F
            X509v3 Authority Key Identifier:
                keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:90:68:c9:1c:d0:75:6c:cc:15:9b:09:7b:d4:06:0c:13:7b:
         c2:61:1d:e2:60:66:ae:ec:88:bf:80:a9:fc:c9:14:3b:92:b8:
         4e:27:4d:63:3f:a2:98:04:c2:59:18:d6:2f:89:2b:2e:98:2f:
         a1:cb:43:46:e7:89:09:0a:06:d8:7a:2f:22:45:a9:b8:b2:2c:
         0a:02:c6:d3:75:2c:37:aa:70:38:f1:b6:e4:7d:22:19:f9:b7:
         d2:2a:a9:e0:b6:b4:7b:98:d9:98:1a:f7:45:0c:7b:ce:b0:aa:
         64:b4:92:82:b0:d4:b6:b3:dd:40:41:f8:a0:8a:d2:96:1c:d8:
         fa:0b:f9:e9:57:c8:b2:d8:2e:dc:a0:fe:6b:37:1b:cf:11:53:
         c3:22:64:71:f0:03:fe:f6:77:bd:52:15:ac:7b:6a:79:b2:02:
         a6:ce:4e:e3:95:55:4e:2e:92:06:51:6d:50:17:62:a4:99:e6:
         0f:18:f9:29:65:2a:d4:b6:2a:8d:1b:b2:0e:99:6d:eb:f6:8e:
         0b:b7:4c:2f:f7:16:d2:c9:ea:a7:3b:1a:9d:d4:56:36:77:c1:
         d8:1f:c1:12:ca:a8:70:97:71:1c:1f:d9:63:f6:73:b0:7f:f7:
         3b:81:e2:8f:ab:0a:27:3e:5d:6d:d2:36:df:73:24:f2:8e:e6:
         4b:64:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:18:19 2025 by rpki-client