Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File:                     _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier:          qlwRTw70L7D7Gf2/wvvaUF6Amf6j41i9eRDF4wo6t7I=
Subject key identifier:   62:CD:E8:07:5C:F0:60:2E:71:E2:F0:B3:DA:2A:55:A7:35:C0:F1:DB
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer:       /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial:       0196A3C0F0B971924EEC5931E5F9FE54379B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number:          0C2F
Signing time:             Tue 06 May 2025 04:00:52 +0000
Manifest this update:     Tue 06 May 2025 04:00:52 +0000
Manifest next update:     Wed 07 May 2025 04:00:52 +0000
Files and hashes:         1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: acQefGDFvt3cflWNeMgyT9LLqWq57ssJMu9Hh6KzWG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c0:f0:b9:71:92:4e:ec:59:31:e5:f9:fe:54:37:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
        Validity
            Not Before: May  6 04:00:52 2025 GMT
            Not After : May  7 04:00:52 2025 GMT
        Subject: CN=62cde8075cf0602e71e2f0b3da2a55a735c0f1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:92:02:d8:e1:03:da:f8:9a:60:bc:2c:36:cd:
                    31:d3:d3:31:7e:30:57:eb:40:a3:15:9f:0b:cf:a8:
                    9a:be:5f:a2:e5:59:4e:d2:de:cd:98:4d:99:5b:cb:
                    eb:ad:be:88:e9:cf:5f:73:75:68:82:2b:f1:a5:31:
                    9d:76:bd:a7:6a:60:d1:5b:e7:c3:d0:ab:a0:97:4a:
                    f8:b9:ee:bf:a1:6f:e5:f6:7c:e3:73:c3:ae:79:02:
                    8f:c8:70:5e:aa:89:df:c9:a5:37:78:a8:b4:15:85:
                    95:5f:41:c5:ce:62:5f:a5:39:66:2e:99:6b:fa:f4:
                    2c:f3:24:94:1e:9d:fe:09:2e:92:7b:41:c3:45:1c:
                    1c:ea:62:cc:78:de:b9:2e:af:10:05:cd:cc:97:2b:
                    4f:20:aa:c8:00:6c:2b:b0:22:15:a0:9a:ad:d3:cc:
                    7e:f3:46:dd:df:16:06:12:61:13:82:1b:97:e5:c3:
                    8a:0e:30:7f:a4:a2:11:06:d3:1a:39:66:99:bf:65:
                    c0:39:18:88:1b:3e:67:53:f7:d8:16:33:f9:d0:1c:
                    48:56:50:9d:e1:d1:04:19:41:27:38:21:28:eb:dd:
                    76:12:0e:14:a9:84:4b:ba:67:fd:c2:e4:8c:f2:21:
                    b7:00:d2:23:8d:38:54:e1:9d:59:c6:3e:98:27:76:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CD:E8:07:5C:F0:60:2E:71:E2:F0:B3:DA:2A:55:A7:35:C0:F1:DB
            X509v3 Authority Key Identifier:
                keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:09:dc:64:c2:19:58:35:98:dc:f2:28:8c:e3:7b:90:d4:74:
         df:3c:cd:25:2e:f9:de:16:5e:17:55:71:20:59:00:b0:bc:be:
         5e:01:30:41:47:ed:fe:23:fa:83:76:0c:2b:dc:f4:d9:50:70:
         c3:c4:fa:1c:42:79:69:05:6a:9e:ae:86:05:55:71:17:11:08:
         21:57:a4:84:7b:00:42:96:c7:2a:7f:c1:88:7e:61:24:5d:5d:
         4c:43:ac:70:15:65:33:b0:21:02:2b:5e:e9:b1:66:02:a4:5b:
         43:d6:29:84:e0:f1:37:54:64:c6:e2:78:1f:1e:f8:34:6b:ea:
         e0:b3:45:55:d9:51:25:55:68:ad:0c:59:06:00:f5:4e:eb:1f:
         d8:82:e6:ac:4d:50:8a:11:cc:80:fd:a3:77:85:6f:a8:3d:9f:
         f0:b0:d7:31:f4:bf:8e:90:a7:f8:dd:12:f4:57:aa:98:94:ae:
         52:6a:d6:82:7e:11:a8:e1:27:b2:17:be:90:62:67:3a:d1:58:
         a9:70:3a:22:c6:c8:ea:12:fd:4f:25:c4:f2:21:1e:70:05:51:
         d3:50:e7:4d:d7:eb:01:07:ee:88:26:9a:ea:93:e6:8c:30:64:
         12:f7:29:ca:7f:ab:97:30:99:ec:f7:3f:37:c3:ac:2d:55:66:
         30:a6:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:09:22 2025 by rpki-client