Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
File:                     pMqKz4g4TsU94Z4om10mQqEf9_0.mft (raw, json)
Hash identifier:          A2/ehYJWCNPkYTt0gxLtmcsqRYqp///e+XhPr1/gEdE=
Subject key identifier:   B1:FD:0E:58:05:AF:FD:2B:36:9E:E9:F0:06:65:04:B5:4E:56:10:1F
Authority key identifier: A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
Certificate issuer:       /CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Certificate serial:       0196C238FACD2E2D67C818F25F0367E96EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
Manifest number:          0308
Signing time:             Mon 12 May 2025 02:00:36 +0000
Manifest this update:     Mon 12 May 2025 02:00:36 +0000
Manifest next update:     Tue 13 May 2025 02:00:36 +0000
Files and hashes:         1: pMqKz4g4TsU94Z4om10mQqEf9_0.crl (hash: /u5RHUiLfPwtHGB45RS38BcMdC3/HbncJ5oUgaMnP+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:38:fa:cd:2e:2d:67:c8:18:f2:5f:03:67:e9:6e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
        Validity
            Not Before: May 12 02:00:36 2025 GMT
            Not After : May 13 02:00:36 2025 GMT
        Subject: CN=b1fd0e5805affd2b369ee9f0066504b54e56101f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:3f:b8:7f:f6:10:d8:2a:e9:cd:75:f8:9b:
                    e4:79:90:6f:6a:19:71:5a:d7:c8:fb:3c:f9:49:b4:
                    d7:70:bc:39:6b:40:27:58:d1:a4:41:c8:70:70:40:
                    0b:48:13:b9:54:eb:aa:27:4e:85:b3:d5:52:fa:53:
                    5a:96:d8:08:85:62:3a:57:50:1c:52:23:01:cb:5a:
                    52:28:4f:3c:f4:cb:f1:a5:74:df:00:99:a0:d3:52:
                    e9:72:ef:0e:d1:34:ed:a5:43:b1:fa:c7:64:e2:b7:
                    37:3c:8a:e6:eb:e2:92:a3:4b:35:a4:c8:ac:13:b7:
                    e6:7f:8e:64:e3:73:0f:98:35:19:0c:df:37:5d:b4:
                    a5:21:52:a2:ec:03:35:ca:dd:e8:d9:d8:aa:20:f6:
                    d2:44:9c:a0:3b:d0:f6:cd:6b:35:e7:47:0f:82:20:
                    ff:f4:15:be:6f:8a:dd:bf:2c:47:fb:2b:37:51:eb:
                    8b:9c:dc:e3:4c:4d:59:ea:34:cb:07:a1:ea:15:fd:
                    48:72:1e:e6:3f:ab:0e:f6:ba:e4:43:95:b7:4f:61:
                    7a:8b:9e:3c:b4:70:62:3b:37:f4:5c:53:d5:bd:92:
                    e5:1c:33:7e:21:c3:82:14:51:82:4b:c4:90:1b:3c:
                    52:d8:89:6d:33:1a:d1:56:f8:9c:b3:2f:60:70:ef:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FD:0E:58:05:AF:FD:2B:36:9E:E9:F0:06:65:04:B5:4E:56:10:1F
            X509v3 Authority Key Identifier:
                keyid:A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d6:1d:9c:6c:f2:cb:23:8b:86:9d:cc:d9:96:7c:3a:35:2c:
         14:83:13:45:90:47:1d:24:da:31:d3:4d:1b:2b:42:6f:ad:9d:
         7f:ee:4f:cc:60:99:17:db:3c:f1:62:c1:79:62:40:c7:31:f5:
         11:3b:22:34:3f:d7:18:1f:d2:bc:c2:6c:a1:b0:92:9e:64:df:
         78:74:97:9a:44:df:3d:12:1b:38:43:2c:90:68:a1:d6:53:8c:
         82:38:78:17:80:cf:44:c4:ac:42:39:29:32:2c:b7:c2:67:48:
         8b:3d:f9:5c:32:33:81:db:31:57:43:37:da:e6:9c:19:af:e7:
         a7:e8:47:d7:2d:5d:e6:be:2b:59:1c:05:14:f5:5e:1c:96:d7:
         ae:df:b7:22:29:d8:96:49:99:92:1f:b6:37:08:d8:84:f3:30:
         59:a0:0d:7f:e3:de:94:cf:78:86:d8:1f:c6:77:c4:77:86:bc:
         25:20:3f:b8:ac:52:90:3a:3b:9a:dc:9a:ba:ca:84:11:67:70:
         6c:7d:e6:cc:32:d8:7a:51:96:7e:ac:a0:f0:ca:38:ae:c7:71:
         bc:cf:57:e3:5f:df:38:a8:e2:90:76:2f:06:aa:94:1b:7d:3b:
         98:61:dd:1b:03:8c:e0:f8:50:f0:e6:71:3e:e4:ac:d3:63:78:
         b8:43:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:33:14 2025 by rpki-client