Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File:                     4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier:          ONUxDgFuOgRy45oRvwSzskqpOZVd2A0JTEjRDmFGecw=
Subject key identifier:   38:86:D4:5C:B7:78:11:D9:FB:73:5F:20:8A:74:FB:60:B7:B4:A1:CB
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer:       /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial:       0196BC6E743FE213D18CCDFED76FB4207F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number:          0BB2
Signing time:             Sat 10 May 2025 23:01:17 +0000
Manifest this update:     Sat 10 May 2025 23:01:17 +0000
Manifest next update:     Sun 11 May 2025 23:01:17 +0000
Files and hashes:         1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: ebJ1+OVRJGAwLqMzxSOLRvYXO03VzsLKQ2HIu3Q/69M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:74:3f:e2:13:d1:8c:cd:fe:d7:6f:b4:20:7f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
        Validity
            Not Before: May 10 23:01:17 2025 GMT
            Not After : May 11 23:01:17 2025 GMT
        Subject: CN=3886d45cb77811d9fb735f208a74fb60b7b4a1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:5b:10:ef:d9:4e:b6:0b:02:ab:9c:5f:5f:
                    ef:ec:a3:db:54:f8:0d:f0:41:ac:3b:eb:b3:ff:37:
                    ee:53:8f:f4:75:3a:15:9a:af:43:54:e8:28:a0:05:
                    cd:5d:80:e3:ee:86:f7:4c:89:d6:6d:14:39:4e:40:
                    b8:e2:1f:b7:f3:c7:cf:d6:f2:88:69:6d:1c:64:37:
                    91:b9:a6:a9:23:ad:2c:49:4b:3a:ba:35:fc:c6:f0:
                    03:a0:61:b1:bf:51:07:47:14:b4:f6:f7:2c:1b:9d:
                    9e:96:c2:d4:f0:80:0e:80:7b:d8:f8:50:c9:f7:05:
                    b7:2e:3f:e0:bc:15:68:f0:01:88:9b:f5:1d:75:49:
                    79:99:a7:07:21:ea:47:74:41:ba:b1:be:aa:19:80:
                    89:d3:c3:bf:03:86:e6:51:c8:f8:85:87:97:89:3f:
                    0e:08:23:4e:80:8e:1e:fe:3c:54:fe:e1:5d:55:7f:
                    84:fc:84:4b:71:f6:7f:e1:4b:58:bd:93:ab:c4:c5:
                    aa:4a:71:f2:9a:39:a9:41:a0:74:34:de:0e:3f:d3:
                    9d:be:e0:37:9d:67:b6:22:ad:91:77:b9:65:69:3f:
                    45:5c:ee:10:15:03:d5:fc:74:90:73:43:fb:02:0e:
                    38:38:ac:e7:1b:f7:a8:67:7b:ef:6b:15:ec:50:f9:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:86:D4:5C:B7:78:11:D9:FB:73:5F:20:8A:74:FB:60:B7:B4:A1:CB
            X509v3 Authority Key Identifier:
                keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:32:55:f5:6d:7c:91:42:18:b1:18:8e:5c:0d:e9:f1:2b:84:
         1d:22:bd:7c:5c:e3:ab:a2:bb:eb:cd:5e:2f:83:9c:82:9d:d4:
         f0:49:81:50:a8:a9:b5:7f:4b:c7:96:6e:ef:ec:43:ea:97:78:
         e3:9f:81:77:4e:33:e1:36:c7:e8:46:b0:73:2a:77:e5:a9:04:
         af:6b:e6:0e:89:42:f8:d6:80:18:ee:08:87:fe:e9:b6:4f:6a:
         cb:75:81:57:a2:56:7b:c8:65:3b:9f:84:ec:55:87:e8:1d:0a:
         2b:cf:a1:c4:d8:68:9b:e5:e1:e3:31:2b:6c:06:03:f0:27:8f:
         c7:5b:65:12:00:37:0e:9e:67:f3:60:aa:16:5c:aa:b1:bd:6e:
         1f:8b:0a:59:4c:8a:4e:b7:57:26:fb:87:b0:e3:d4:f8:c1:94:
         5b:cc:a4:7d:2e:cd:ea:ea:07:a9:40:5a:42:e1:37:c5:0a:c0:
         c0:30:d8:b0:55:8e:5d:c6:4b:34:62:96:04:62:73:6e:58:a6:
         24:f3:05:86:f1:a3:50:ea:94:f1:ee:dd:72:f6:c5:8b:69:68:
         ec:cc:d1:bf:92:cc:26:3e:a8:fb:37:1a:0d:86:32:df:86:16:
         87:69:1a:e2:47:19:9e:3b:70:e9:5e:cb:24:5b:14:fb:dc:0f:
         e3:e2:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:55:02 2025 by rpki-client