Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
File:                     bCjEbAuUE8313if9HJ9rRnMnfHs.mft (raw, json)
Hash identifier:          VUNQUlLnfuNsBc9qxOxnxO6Bh0d8N6kn0OWQlpsnJqg=
Subject key identifier:   4F:21:B3:02:1D:0C:91:41:58:6B:7D:C2:48:6D:D2:F5:52:0B:5F:DB
Authority key identifier: 6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
Certificate issuer:       /CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Certificate serial:       0196B58FCC9DAFB55F85F52D8CE5A74FDE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
Manifest number:          08C6
Signing time:             Fri 09 May 2025 15:00:22 +0000
Manifest this update:     Fri 09 May 2025 15:00:22 +0000
Manifest next update:     Sat 10 May 2025 15:00:22 +0000
Files and hashes:         1: bCjEbAuUE8313if9HJ9rRnMnfHs.crl (hash: d0eHF+QdoJ8DLbTZdNbJ0114OJOpUvOmEzYEhQaFs6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:8f:cc:9d:af:b5:5f:85:f5:2d:8c:e5:a7:4f:de:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
        Validity
            Not Before: May  9 15:00:22 2025 GMT
            Not After : May 10 15:00:22 2025 GMT
        Subject: CN=4f21b3021d0c9141586b7dc2486dd2f5520b5fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:d0:80:af:5a:e7:8c:65:88:49:84:a5:5f:
                    b8:c8:38:a5:e9:49:28:50:62:f5:d8:5a:df:28:e5:
                    af:72:83:4f:83:a4:57:06:60:0c:99:f1:8c:b8:24:
                    d8:76:3b:93:64:85:ad:43:00:d8:28:02:e8:36:5a:
                    f5:84:d7:2c:4d:94:0f:25:3b:2c:26:b2:88:59:36:
                    e9:b8:d0:72:22:84:d4:a4:ef:1d:9c:05:84:00:15:
                    00:7f:aa:5c:d0:63:c7:9c:90:3a:e7:54:5f:a9:7f:
                    f2:1f:04:e5:d7:80:6c:21:9e:66:cf:e8:74:47:4c:
                    12:31:ee:03:1e:4a:dc:4e:dd:1e:61:7a:8b:3b:1e:
                    4c:7f:37:fd:3a:8a:7a:75:0f:d0:12:02:35:df:2e:
                    05:e7:3e:c7:d4:f5:52:68:97:49:b8:70:ca:94:de:
                    8e:c0:7d:1d:57:14:e5:b6:7d:23:51:b1:76:80:27:
                    f0:de:95:a5:8f:b8:ec:12:24:93:ad:e5:a2:46:be:
                    f4:68:f3:b2:bf:fc:76:51:08:b6:63:5b:b6:c6:0d:
                    aa:dd:53:6f:6a:f9:05:8c:b8:04:5d:49:30:d5:23:
                    9d:6e:c3:4d:fc:2f:59:53:84:76:d8:2c:54:10:f1:
                    af:ae:4f:cf:2b:b1:f6:d1:24:ba:03:3a:e6:34:51:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:21:B3:02:1D:0C:91:41:58:6B:7D:C2:48:6D:D2:F5:52:0B:5F:DB
            X509v3 Authority Key Identifier:
                keyid:6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:56:e7:0d:c3:dc:ec:2e:31:61:d3:64:dc:c9:df:7a:38:5a:
         bf:61:0c:df:68:7a:b2:cd:78:15:b2:9d:1b:01:6e:c5:47:8a:
         e1:25:12:18:03:a2:ae:8a:8a:79:5d:3f:5d:c8:6a:07:53:13:
         a4:b4:b2:fc:5c:87:8a:be:a9:0e:be:e2:c0:a1:ec:c2:62:e3:
         51:f9:d7:54:e0:d5:ca:82:ae:54:02:65:06:37:0e:d7:82:b7:
         49:bb:a6:2c:26:3d:ef:d6:25:f7:90:15:51:71:44:ce:c6:ab:
         6f:cd:6f:cc:88:33:5a:f2:23:c4:b2:9f:7c:73:3c:d8:ca:76:
         f2:f3:68:e0:15:03:0f:97:8c:7f:ed:2d:02:dc:04:c1:20:f3:
         d7:c8:dc:14:6f:43:b6:85:1a:53:90:d7:6d:b6:ab:e9:93:37:
         0b:0a:cb:fc:c5:94:5b:2c:23:b2:82:c3:41:fd:2d:2a:e0:b2:
         6d:65:b5:63:56:e8:40:e3:f7:cd:a5:b9:52:dc:68:f4:c5:e0:
         b4:33:ed:79:db:cb:bf:c2:ce:12:57:86:b2:75:c9:96:c1:fd:
         ce:84:cb:00:05:15:fb:6c:97:cf:aa:f5:ea:33:43:49:90:0f:
         de:de:ff:91:81:e0:96:27:4e:63:cf:66:85:ea:20:30:53:7e:
         f5:d7:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:44:09 2025 by rpki-client