Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File:                     knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier:          SnFq1ut7WJEEJ8vq+MasZRW2lmTG88fAt9EK5qwUCpg=
Subject key identifier:   01:19:42:7E:EA:DF:6C:09:6E:E3:8E:D4:0E:77:C3:F1:23:8C:47:99
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer:       /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial:       0196B7B5D6458ED16DA9FCDF1D8F492A79DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number:          1301
Signing time:             Sat 10 May 2025 01:01:09 +0000
Manifest this update:     Sat 10 May 2025 01:01:09 +0000
Manifest next update:     Sun 11 May 2025 01:01:09 +0000
Files and hashes:         1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: YHsxIO79eVjDXeSHwHS57k8XE3rGvCMI8NcEMqOx3bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:d6:45:8e:d1:6d:a9:fc:df:1d:8f:49:2a:79:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
        Validity
            Not Before: May 10 01:01:09 2025 GMT
            Not After : May 11 01:01:09 2025 GMT
        Subject: CN=0119427eeadf6c096ee38ed40e77c3f1238c4799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:99:a3:18:87:0c:54:41:28:48:6d:5b:d9:
                    31:51:85:e9:75:6a:cb:3a:21:f1:4b:bb:da:39:0f:
                    60:0b:bc:f6:dd:dd:89:06:25:af:d8:d7:d4:ee:1a:
                    3e:c7:81:5c:4a:d3:86:34:fa:01:93:da:a8:bc:08:
                    50:51:bb:4b:70:e4:bd:47:99:93:7e:47:2e:34:37:
                    b8:94:04:53:82:1c:29:ae:55:a4:d2:46:62:49:fc:
                    76:bc:6a:3a:8f:bb:66:13:21:0f:c8:17:39:2c:2b:
                    a6:13:c6:96:6e:ba:7e:ee:81:15:98:d0:c4:04:89:
                    72:1d:80:78:66:64:57:d6:e3:78:18:37:16:a4:2b:
                    bd:cb:78:63:62:2d:64:aa:97:e9:ee:f8:94:ee:0a:
                    90:fb:dc:40:6d:e7:da:ab:85:2f:a7:fe:ea:8a:cc:
                    62:ea:14:67:de:aa:94:9f:9b:2b:df:67:90:de:3a:
                    78:b1:d2:15:84:2e:96:6b:e4:bb:6e:8a:7c:d3:07:
                    66:ff:dc:b2:16:1e:bf:13:49:bf:52:6d:1f:24:f1:
                    35:3d:0a:08:e1:ee:03:27:30:20:07:a7:71:f5:28:
                    94:56:ba:ed:4b:3a:8d:e0:21:dd:ba:58:b1:d3:f6:
                    af:17:3a:0d:08:e8:9b:5b:e7:9e:4b:3f:7b:c3:cd:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:19:42:7E:EA:DF:6C:09:6E:E3:8E:D4:0E:77:C3:F1:23:8C:47:99
            X509v3 Authority Key Identifier:
                keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e4:65:45:d2:e6:d8:91:56:02:14:d7:77:d8:89:76:0a:ea:
         ea:41:3d:13:de:a6:8f:d4:66:d4:ed:9f:9c:3b:0d:65:89:95:
         a6:3e:ca:67:2f:f0:f5:d1:2b:1b:71:5c:0a:0d:83:7f:90:04:
         ce:67:99:a0:5a:d7:b5:2e:02:d3:48:bd:ea:1b:85:7e:62:b1:
         b8:e1:c6:a6:ab:80:ea:51:6f:5e:90:02:af:e3:ce:bb:a5:23:
         92:28:00:a1:6b:f0:49:e7:84:cb:07:35:c2:41:d9:24:6a:9b:
         9e:ef:de:b2:25:30:6c:92:35:9d:21:37:76:f4:1e:e5:d1:45:
         c5:4f:1f:bb:61:24:61:6c:62:14:48:a5:4f:3a:0c:d6:a1:f3:
         0e:5a:9c:a4:5f:89:4c:91:df:fb:37:0f:0a:34:75:1b:2e:a7:
         27:cd:42:d9:1e:3b:bb:7e:e3:a7:7c:b4:5c:30:a1:e1:f0:8b:
         84:31:a9:0a:23:c7:4b:87:db:cb:8f:8d:c6:84:21:53:a8:80:
         f7:5b:43:e1:21:e9:72:60:a5:f4:d3:37:e3:5f:48:9b:bd:c8:
         42:9c:34:e8:71:23:84:09:f3:de:52:34:0f:e9:cb:37:77:67:
         e9:d8:93:1c:ab:09:c0:34:9f:b8:47:2c:3b:14:9f:b4:56:ff:
         dd:60:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:36:44 2025 by rpki-client