Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
File:                     MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft (raw, json)
Hash identifier:          NWvm4ErZFgODBW2JGmIob0wN2f42WbJgw9YTM3c/S+A=
Subject key identifier:   B4:C8:13:44:C0:6D:3A:0E:2B:0A:5D:BC:41:3D:F6:14:C6:88:8E:D2
Authority key identifier: 32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
Certificate issuer:       /CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Certificate serial:       0196BB93018ACBD41D6E19908B38B66D198B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
Manifest number:          06C6
Signing time:             Sat 10 May 2025 19:01:35 +0000
Manifest this update:     Sat 10 May 2025 19:01:35 +0000
Manifest next update:     Sun 11 May 2025 19:01:35 +0000
Files and hashes:         1: MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl (hash: ESc/XZdAmkP0sA81TFMJW5GUZ/fLvHacoHmOTztwbRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:93:01:8a:cb:d4:1d:6e:19:90:8b:38:b6:6d:19:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
        Validity
            Not Before: May 10 19:01:35 2025 GMT
            Not After : May 11 19:01:35 2025 GMT
        Subject: CN=b4c81344c06d3a0e2b0a5dbc413df614c6888ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:99:41:71:2b:8a:b7:8a:6b:ba:90:88:7b:
                    9f:a7:f3:4a:68:a5:00:55:af:46:85:b0:1e:6f:64:
                    16:5c:54:d2:21:8e:53:c7:4c:05:e0:1c:cd:e4:ac:
                    eb:f9:96:f4:0a:66:f7:ca:06:84:94:ea:75:4c:2d:
                    d0:43:63:f3:f0:a9:55:6e:81:ee:d4:c1:6e:a3:da:
                    a7:33:01:57:39:e4:04:14:a6:81:55:2e:70:9a:66:
                    fd:f1:f5:5f:f6:b2:0d:df:ff:22:e8:4c:d1:b7:12:
                    a1:68:ce:f3:d2:1e:bf:75:2b:66:b8:3a:b5:a6:13:
                    d5:74:98:4f:2e:aa:5f:01:67:ce:ea:c4:85:2e:30:
                    2c:15:cc:4d:8a:f5:2a:c1:ca:7b:47:99:55:49:b9:
                    7a:db:09:21:37:36:10:ff:55:fe:d0:27:30:d5:1a:
                    60:90:63:6a:24:b2:4e:bd:ad:d9:1f:37:ad:0b:3e:
                    d3:a8:3e:fb:54:ad:3e:cf:cf:fc:7e:00:7d:6a:4f:
                    e2:a4:69:e3:e7:d8:82:2d:c6:2c:5c:8c:76:01:d6:
                    3b:67:bc:30:c6:7d:0b:99:90:bc:45:34:be:31:7d:
                    76:06:58:b5:be:8b:74:25:0f:06:09:42:78:bc:f8:
                    78:c5:cf:47:37:d8:cf:79:f4:42:c3:71:92:c3:5c:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C8:13:44:C0:6D:3A:0E:2B:0A:5D:BC:41:3D:F6:14:C6:88:8E:D2
            X509v3 Authority Key Identifier:
                keyid:32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:96:10:df:48:4e:a5:ba:85:50:46:1a:c6:13:b2:ea:fe:9c:
         61:4f:65:01:0f:45:e2:e3:d0:e0:37:78:42:92:59:4e:3b:21:
         c3:6a:29:1e:7e:75:cb:84:e3:27:7d:d4:51:06:62:1e:06:7f:
         ae:1b:46:0e:ef:6f:91:0b:e2:65:2e:1e:4e:1c:60:bc:56:28:
         4d:74:ec:e2:12:32:6b:0a:88:a7:c8:c9:11:97:e1:23:12:00:
         54:6b:af:f4:91:7c:d9:54:4e:d6:ed:51:92:a2:fe:31:e9:c3:
         56:17:fb:f3:81:f1:e2:88:5f:0c:de:c8:d8:b0:21:f8:d7:7b:
         c5:0c:e4:df:13:cf:83:2d:2b:56:4d:69:32:89:9d:cb:25:dd:
         c5:fd:b6:d6:90:9c:79:25:67:b3:81:66:68:e4:b4:28:67:a1:
         ed:31:5a:7c:6f:fd:e9:78:b9:dd:3e:b1:24:ed:98:48:6d:1e:
         bd:a0:14:34:a2:10:ed:0e:84:d5:6b:05:67:9a:b4:23:b4:f6:
         7d:3a:e8:68:36:5c:7e:e2:52:46:a7:c4:cb:45:e4:43:aa:87:
         da:b2:4c:3c:90:87:34:19:76:aa:27:1d:ad:b6:5c:df:cf:8f:
         62:4c:87:9d:2d:90:ac:9e:52:d5:21:38:48:52:31:66:86:bb:
         16:73:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:56:23 2025 by rpki-client