Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
File:                     Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft (raw, json)
Hash identifier:          EPELGvyqVjIoSWI9+XZzL6c98El2WPtANz72nLmMYGY=
Subject key identifier:   5F:E3:E3:87:D8:20:70:AF:8C:70:B9:13:83:0A:A9:DE:D1:A3:F0:82
Authority key identifier: 46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
Certificate issuer:       /CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Certificate serial:       0196BD813B1E695878AFE4F5754673A378C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
Manifest number:          048E
Signing time:             Sun 11 May 2025 04:01:25 +0000
Manifest this update:     Sun 11 May 2025 04:01:25 +0000
Manifest next update:     Mon 12 May 2025 04:01:25 +0000
Files and hashes:         1: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl (hash: 76ucdybyGeB4tK8o8JVrS/VdlQVk0cvGtj71Mdoxiu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:81:3b:1e:69:58:78:af:e4:f5:75:46:73:a3:78:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
        Validity
            Not Before: May 11 04:01:25 2025 GMT
            Not After : May 12 04:01:25 2025 GMT
        Subject: CN=5fe3e387d82070af8c70b913830aa9ded1a3f082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:27:f3:19:fd:7a:51:a1:a5:e7:2e:fa:65:ee:
                    18:50:16:3e:4b:0e:c9:db:ac:7a:cf:00:3e:4d:da:
                    87:3a:26:2e:4b:e1:87:a3:30:83:25:53:11:4d:7a:
                    76:70:0a:f7:2d:00:6d:83:7d:04:2f:0f:25:29:da:
                    82:86:7d:f5:dd:23:4a:e8:57:1c:60:c1:72:b6:56:
                    ac:e8:66:ca:fa:01:2d:db:15:2f:84:27:a8:a5:2b:
                    65:ee:e9:a0:34:f5:75:0d:aa:1f:90:71:5c:21:0d:
                    d4:fc:08:60:73:c0:b6:ed:84:8b:54:1d:f4:50:f1:
                    4d:28:44:06:a6:67:9c:9a:2b:47:2f:7d:11:6d:08:
                    b6:5a:89:54:65:e5:f2:2c:98:39:d5:e2:b6:48:92:
                    98:ea:eb:d9:bc:7d:d0:b7:7b:cf:d4:7c:46:85:ed:
                    29:53:49:73:52:e2:38:49:0c:a2:2b:78:db:c0:53:
                    70:ea:ba:d4:e5:d1:51:80:f0:ee:d9:a0:a5:c1:0c:
                    e2:8f:a2:3d:73:d1:74:23:98:1f:75:90:8c:af:bd:
                    7d:4e:4e:21:7b:44:06:53:5d:44:77:04:b2:79:7c:
                    b3:19:33:8e:92:93:a1:13:2f:9a:0a:56:8a:b4:95:
                    15:61:2a:74:b9:ea:19:ba:34:30:ce:bf:91:e1:57:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E3:E3:87:D8:20:70:AF:8C:70:B9:13:83:0A:A9:DE:D1:A3:F0:82
            X509v3 Authority Key Identifier:
                keyid:46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:38:10:a8:03:11:47:fc:f7:0b:1d:01:e9:af:0e:6a:dd:
         2e:53:96:72:93:26:67:ab:9b:66:16:a6:a0:81:1b:69:71:88:
         b5:4e:2e:03:c7:28:5d:c2:35:d0:50:87:98:c1:b1:49:2b:ad:
         8d:95:06:82:65:c9:67:9c:c5:23:e2:0f:d1:9a:90:29:03:4b:
         82:a2:ad:bc:7b:17:77:0b:47:1b:18:3c:f0:82:3a:5b:96:46:
         ba:a2:56:9e:66:56:01:9c:b8:d4:21:da:79:7e:cf:29:11:ca:
         a2:bf:cb:47:ff:dd:f8:a1:fa:d8:69:60:65:2f:85:c8:35:ba:
         34:b5:fd:28:41:7d:55:83:61:f4:dc:58:33:a5:04:6d:9b:d2:
         3d:dd:5e:8d:e2:c5:0f:26:e7:99:83:e5:3b:ba:5e:f4:f6:92:
         e0:de:86:7d:c6:48:09:71:0b:1b:40:36:08:55:8d:9c:d7:22:
         32:cd:7b:6f:d7:19:14:ad:0c:fe:0c:47:35:c0:41:31:54:a5:
         64:cd:53:a9:58:25:a1:3b:75:14:0a:0e:99:e3:43:9e:c6:f4:
         35:c0:5d:54:ef:96:a0:00:87:53:7d:8a:3a:f7:d7:b8:ff:36:
         32:ec:d7:e7:d6:fc:ea:d2:80:3e:f5:86:31:37:48:d9:a8:d9:
         99:c5:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:01:49 2025 by rpki-client