Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File:                     4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier:          G5kT3nwQ+0TX9R/wb9ryW3hBCGAoOorbwoDTsWmE6Eg=
Subject key identifier:   FB:68:0B:D7:D7:69:84:E7:F6:A2:39:11:4B:BF:56:7B:59:4B:79:4F
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer:       /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial:       0196BB5B36EE5AD9A6C363D1A6DAE3161DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number:          0E36
Signing time:             Sat 10 May 2025 18:00:39 +0000
Manifest this update:     Sat 10 May 2025 18:00:39 +0000
Manifest next update:     Sun 11 May 2025 18:00:39 +0000
Files and hashes:         1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: BD7qUr15bHqGP3RAo9rKUZA1+eUfkSzgE1fx3ELzAGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:36:ee:5a:d9:a6:c3:63:d1:a6:da:e3:16:1d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
        Validity
            Not Before: May 10 18:00:39 2025 GMT
            Not After : May 11 18:00:39 2025 GMT
        Subject: CN=fb680bd7d76984e7f6a239114bbf567b594b794f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:21:e0:cf:bd:e3:7e:7f:4c:78:21:85:55:
                    f0:e8:69:ac:7d:b6:96:1b:04:28:1d:cf:45:26:65:
                    65:0b:8e:9d:36:4b:e4:f7:42:3d:2c:52:fe:46:c8:
                    5c:9c:22:a8:ec:c2:25:70:6e:c2:6c:34:c4:ad:c4:
                    90:ea:ba:89:44:53:5c:f7:0d:0e:3a:ce:23:4e:ad:
                    af:06:35:20:4c:27:8e:6b:45:ed:6a:6b:ec:81:83:
                    eb:9b:99:a5:57:d2:29:70:60:ed:90:26:fd:d3:cd:
                    a6:05:18:56:23:bb:8f:5a:47:d5:68:69:cd:fd:62:
                    7a:cf:4e:34:af:ce:84:6f:05:09:43:24:de:e8:c4:
                    68:3c:04:41:4c:85:e2:64:b7:01:49:08:b6:a4:a1:
                    af:0d:96:50:8d:3a:05:77:ee:8d:22:32:9a:7c:ca:
                    99:c3:81:d2:8c:01:27:67:da:50:41:7f:d1:57:05:
                    2e:3a:24:56:74:22:5c:97:4c:69:fb:be:ba:c1:62:
                    5e:91:e6:eb:45:17:a8:9b:a8:90:d2:6d:16:9c:e1:
                    22:11:90:f9:48:2c:92:32:80:d5:0b:7e:73:50:1b:
                    a8:f7:33:f7:8d:10:53:ae:95:6d:9a:c7:3c:68:f4:
                    49:b3:22:09:c1:c7:89:d3:c5:97:6b:3b:f7:9a:77:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:68:0B:D7:D7:69:84:E7:F6:A2:39:11:4B:BF:56:7B:59:4B:79:4F
            X509v3 Authority Key Identifier:
                keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:75:db:9b:e2:ca:de:ce:23:4e:f1:23:fb:5a:da:c7:70:03:
         e8:a7:2f:43:b4:7a:73:92:de:21:95:fc:8c:90:cb:48:e2:59:
         2a:ef:e2:5c:a2:ff:6b:34:7b:1c:79:4e:70:02:8e:d0:8c:5e:
         b9:f8:f9:a1:e3:28:78:0c:9b:57:1b:a6:3a:4a:e0:3b:f7:f2:
         c3:48:15:55:3d:4b:1d:38:6d:77:98:94:3d:a3:80:8c:e5:55:
         f0:ae:69:c8:d6:5d:7e:1d:a3:22:70:9b:24:9e:30:42:30:e6:
         ec:ca:76:92:2f:0d:18:69:c1:d3:7f:42:6e:d7:ac:ea:28:7b:
         2d:9c:0c:b5:3e:1c:5a:11:b8:b0:c9:31:c1:a1:a6:59:b8:6f:
         6f:75:38:94:61:89:ad:94:31:c3:5f:10:11:e4:59:f2:a8:cb:
         1f:2a:23:e0:8a:56:98:c3:91:af:42:11:ed:23:6d:6d:73:03:
         f0:d2:cc:19:dd:a6:51:78:cd:d3:29:2f:f9:51:0f:ce:dd:1f:
         1f:8a:76:35:0e:83:0d:de:f3:81:d2:9a:dd:7a:f8:5c:02:3b:
         c2:e1:24:bb:4b:3c:27:48:c9:2f:d8:aa:4f:7c:25:68:80:9c:
         06:02:dc:f5:15:c4:28:13:50:7c:44:e0:ee:94:d5:80:3e:ba:
         1c:1a:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:11:30 2025 by rpki-client