Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File:                     nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier:          G+Z3k0plkuq7S013TLSpAaxZhldmLilCG3aWgejjIFo=
Subject key identifier:   AE:6B:AF:2B:60:82:6D:7E:07:D0:5A:60:FE:04:3B:73:E8:76:12:CB
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer:       /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial:       0196A2776D309684EEF06AA72606C4AAFF5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number:          0B4F
Signing time:             Mon 05 May 2025 22:00:57 +0000
Manifest this update:     Mon 05 May 2025 22:00:57 +0000
Manifest next update:     Tue 06 May 2025 22:00:57 +0000
Files and hashes:         1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: +fEqDHxAUNtPZYOjshFVf+dgxRW9mD9Oq1whYECWx48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:6d:30:96:84:ee:f0:6a:a7:26:06:c4:aa:ff:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
        Validity
            Not Before: May  5 22:00:57 2025 GMT
            Not After : May  6 22:00:57 2025 GMT
        Subject: CN=ae6baf2b60826d7e07d05a60fe043b73e87612cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:66:65:4b:51:5a:28:40:c5:c3:29:de:e9:
                    87:cc:b6:5e:63:1d:cd:ba:35:01:47:c1:80:6b:41:
                    e2:60:37:5d:60:f0:1a:9f:bd:4e:c2:f8:27:65:c6:
                    19:e8:6f:74:70:1d:1e:f2:c3:02:9d:66:23:d2:b3:
                    a6:90:5f:a8:8d:d3:20:fe:e9:88:53:fc:39:e3:c8:
                    c9:05:bc:2d:2a:65:ae:c1:9f:2a:c1:8e:2b:7f:c0:
                    48:72:ea:0a:46:9b:a5:bc:0c:2d:8e:bf:39:42:a5:
                    ca:7d:f7:42:0d:37:62:16:45:2a:88:0a:16:b1:1d:
                    4b:ee:71:49:9f:4b:1c:98:43:fe:3b:35:07:3c:2f:
                    cb:98:de:ff:87:c7:6e:6a:43:08:7f:e8:53:bb:a7:
                    55:50:42:bc:b7:f3:94:d3:13:06:6f:d1:30:08:82:
                    6d:44:1f:d3:06:82:42:56:da:d7:87:1a:ef:55:ea:
                    98:f0:b6:34:97:a3:a6:19:1f:27:f1:34:65:b0:40:
                    0d:76:70:90:f9:ef:59:2b:ab:6c:cb:35:4d:20:ef:
                    34:9b:20:75:ce:75:1f:fc:6e:cb:dd:69:70:03:76:
                    00:1f:49:62:c1:e3:3c:4f:3c:76:a6:1a:f2:62:cd:
                    91:2f:98:33:dc:ff:35:35:f5:5a:3f:61:d5:b6:7c:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6B:AF:2B:60:82:6D:7E:07:D0:5A:60:FE:04:3B:73:E8:76:12:CB
            X509v3 Authority Key Identifier:
                keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:71:48:3c:47:90:9e:23:ee:8d:3b:00:bb:22:7f:39:51:4b:
         ec:be:fe:4e:af:c1:bd:aa:31:ad:74:02:dd:6b:01:48:ea:4f:
         13:10:f2:7a:2b:2c:f6:3b:05:8f:00:23:d4:99:9b:73:61:eb:
         fe:88:0b:6f:f0:56:1a:65:c1:4a:67:32:34:74:c0:48:39:25:
         e3:d6:28:52:f0:90:48:bd:87:e0:4c:95:d5:af:86:dc:16:a4:
         af:8f:90:ab:64:d0:a7:77:da:f8:c8:58:7f:db:c4:0a:52:3b:
         b6:08:87:40:77:02:ca:86:2c:72:5c:db:ef:4d:1f:46:7b:45:
         a7:60:fb:5c:02:af:6c:f9:bb:34:50:25:26:39:00:4a:c6:5c:
         46:2c:a8:f7:89:1a:bc:46:73:93:c7:82:92:02:5a:75:02:4a:
         b2:51:50:cc:cb:0b:53:66:ef:41:93:35:86:a4:4d:72:b2:64:
         ae:63:18:0e:42:e7:13:05:1e:90:cc:ac:4e:da:de:f8:78:8e:
         fd:6c:58:30:ec:5c:72:84:eb:1f:d9:1f:90:0d:4b:b2:a8:8d:
         18:a2:36:5e:63:fa:16:f3:03:84:df:f6:10:97:49:47:83:a3:
         5c:32:ef:08:58:f8:33:01:4d:50:0f:03:10:fd:e1:22:08:4f:
         64:ed:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:27:00 2025 by rpki-client