Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File:                     RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier:          lKpLq0tJwmqSa/Sg8uVJFaXniCeeW19B9CWl1zpgjkM=
Subject key identifier:   B2:01:EC:19:C1:A4:50:EE:69:0D:9D:8F:1D:5E:16:B3:33:E9:D6:16
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer:       /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial:       0196CA976D9259327AE8651EB07AF3F6E3A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number:          0412
Signing time:             Tue 13 May 2025 17:00:43 +0000
Manifest this update:     Tue 13 May 2025 17:00:43 +0000
Manifest next update:     Wed 14 May 2025 17:00:43 +0000
Files and hashes:         1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: qDzFraDpaYh65+Og/K4YaHC6Fx4kLecLnzBSMXTssuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:97:6d:92:59:32:7a:e8:65:1e:b0:7a:f3:f6:e3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
        Validity
            Not Before: May 13 17:00:43 2025 GMT
            Not After : May 14 17:00:43 2025 GMT
        Subject: CN=b201ec19c1a450ee690d9d8f1d5e16b333e9d616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:7d:66:a3:5c:74:ac:dd:8e:86:fc:81:0b:
                    e0:d8:16:50:f5:6e:65:3e:83:78:4c:c2:c7:2a:01:
                    a7:5b:9d:7b:95:8b:2a:f7:7b:d8:98:84:4f:99:42:
                    73:60:1e:8a:47:42:58:6e:a9:1d:1c:cc:b7:7d:af:
                    16:0a:fe:1b:da:19:98:1c:ad:38:3e:94:b7:15:e3:
                    c4:34:67:b7:30:8d:04:3b:3c:a7:54:db:36:3f:19:
                    73:6c:70:29:b1:8d:aa:51:fe:82:bf:98:dd:39:ff:
                    72:43:2d:a6:6a:c7:35:ac:42:fd:2f:6e:95:53:7f:
                    d0:eb:76:49:dd:20:30:43:7f:90:19:b7:1a:3c:84:
                    05:a1:83:c2:fc:3a:dc:a8:bf:93:26:71:05:6b:02:
                    1a:6b:77:4f:e1:83:89:9e:8a:74:fe:90:be:e2:71:
                    70:78:8d:74:df:e5:fb:78:2f:73:8e:4f:50:9d:69:
                    60:12:34:7a:a8:88:a0:b1:10:6d:e5:fa:bc:ef:32:
                    b7:37:e7:0f:72:41:62:10:ec:ed:f5:69:a3:33:b3:
                    18:69:9c:54:27:04:fc:d5:43:fd:87:df:22:99:d6:
                    24:ed:68:7b:1c:c4:ff:6d:56:4b:63:ab:9b:0b:71:
                    3a:42:51:4a:b0:30:4e:14:f1:e2:e5:4d:42:40:bd:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:EC:19:C1:A4:50:EE:69:0D:9D:8F:1D:5E:16:B3:33:E9:D6:16
            X509v3 Authority Key Identifier:
                keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:34:ed:fc:ff:31:41:8f:c7:1d:ab:5a:ce:d6:72:27:da:57:
         91:e1:2a:09:ea:4a:37:8b:ec:2a:ce:66:35:09:bf:94:aa:e5:
         a9:59:c5:4d:4c:a5:bf:33:4e:44:30:0a:0a:1b:2d:b2:9d:e3:
         22:98:a2:e3:9a:03:a2:d7:78:75:10:e1:2c:27:12:1c:8b:b4:
         c3:56:59:56:23:d2:88:7b:a6:3d:35:66:11:5e:b8:be:92:7d:
         03:0d:4b:a8:5a:ce:aa:7a:be:f0:eb:04:af:dd:e6:17:f2:6f:
         ff:c2:46:fd:67:d7:63:d7:60:d4:0a:31:77:40:e4:78:c3:80:
         bc:96:e5:df:d1:a9:16:9c:41:3c:b3:86:c9:54:02:df:97:b1:
         d4:c7:08:ee:1d:bc:4d:cc:ce:21:7c:a3:f6:96:98:77:75:f8:
         e4:37:c9:0b:ac:39:75:f0:04:c5:92:df:46:eb:03:84:6d:4f:
         f6:9f:e7:32:f2:d5:ed:ab:a5:18:01:04:cc:b1:2d:d2:60:4a:
         01:fc:43:1d:00:a7:3b:e1:f1:07:3c:9f:ab:b0:e6:71:c8:2c:
         40:4c:66:58:cf:8b:a4:20:7c:60:ec:01:66:d4:6e:f1:d9:ea:
         b6:41:66:46:17:74:72:b0:05:69:56:b2:88:a8:e8:8f:72:9e:
         fc:96:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:31:26 2025 by rpki-client