Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File:                     k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier:          D/CkgYlXE3khxju5eHUMYyvoR8voSXNBQcV7IoBXU4I=
Subject key identifier:   4D:11:13:7F:10:21:0A:8B:F2:48:D6:BC:8B:F4:46:AA:E5:C4:0C:98
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer:       /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial:       0196C984CDB15602F838B19995540FEDF326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number:          0D04
Signing time:             Tue 13 May 2025 12:00:45 +0000
Manifest this update:     Tue 13 May 2025 12:00:45 +0000
Manifest next update:     Wed 14 May 2025 12:00:45 +0000
Files and hashes:         1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: lRvSLklsnEVNOtLMZPTlDNsdFp1mFX0cnI7nbeRpc/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:84:cd:b1:56:02:f8:38:b1:99:95:54:0f:ed:f3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
        Validity
            Not Before: May 13 12:00:45 2025 GMT
            Not After : May 14 12:00:45 2025 GMT
        Subject: CN=4d11137f10210a8bf248d6bc8bf446aae5c40c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:06:d1:fe:e5:ab:92:20:81:34:d2:89:da:
                    a9:b5:a2:f5:aa:86:85:d3:e8:b6:1c:97:ba:00:1c:
                    78:2d:e8:20:47:07:cc:bd:7c:16:57:7e:7f:ef:7c:
                    1e:46:b6:fc:36:d8:36:f8:ff:89:56:8b:48:40:2d:
                    8c:13:e6:4b:eb:c4:d1:fb:d8:95:09:1b:fa:13:7d:
                    35:16:90:d1:b1:1e:ef:27:29:9b:bb:32:14:bf:70:
                    13:5b:ba:26:d7:d7:f0:92:b6:5f:48:6f:cb:b0:c0:
                    bb:37:85:9a:1e:53:95:83:51:51:be:01:80:be:12:
                    20:9b:99:5d:69:9f:83:12:65:f7:3b:82:91:8b:4f:
                    3b:bb:d5:4d:7f:68:1e:d1:48:3d:89:12:c1:13:0b:
                    c1:fd:46:32:b4:02:e1:a3:8b:d3:6d:15:94:57:09:
                    59:0f:16:16:26:6d:a1:95:d0:6a:82:f6:43:3e:dd:
                    f7:0c:6d:59:4d:c1:cc:4d:6f:8f:b9:ec:72:64:8a:
                    c3:74:c9:72:1e:9f:d7:ba:77:e4:36:f4:2f:bb:03:
                    45:14:72:95:28:b3:9b:72:29:45:5d:78:36:6b:e8:
                    23:48:6c:b9:3d:ff:b0:ab:a4:b2:07:eb:4a:0c:33:
                    1f:cf:7f:af:f8:1c:df:5a:74:08:6c:5d:59:d8:a4:
                    72:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:13:7F:10:21:0A:8B:F2:48:D6:BC:8B:F4:46:AA:E5:C4:0C:98
            X509v3 Authority Key Identifier:
                keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:36:cf:77:25:b4:16:64:cf:9c:1f:c1:ae:ba:5b:7a:51:
         2c:82:51:1f:6c:61:32:f2:51:42:33:9c:5f:cd:cb:44:14:3f:
         10:12:12:bf:7b:08:e7:1f:98:f9:60:e0:35:b2:43:e5:25:b8:
         3f:e9:cd:24:4d:4f:e4:7f:01:1e:1e:fd:a8:28:14:a1:7c:f2:
         8a:e5:66:37:9c:6e:e4:be:2d:9f:73:61:38:1e:58:94:1b:e1:
         04:d2:be:06:2d:2a:43:b9:5e:0b:c6:9e:3f:2f:75:82:64:8b:
         f9:05:65:65:7e:7c:73:21:80:b3:03:d8:36:f2:68:24:31:ee:
         bf:8d:d3:86:d9:ba:07:da:16:61:35:8e:75:b8:1d:fe:89:7b:
         ac:0a:1f:7a:fd:89:df:28:70:e5:72:7f:ed:3c:af:2d:2c:1d:
         31:d6:ae:6d:70:26:98:8b:46:2a:f2:f5:4e:cc:f6:ce:7b:34:
         50:bd:f8:0b:d4:3d:50:75:95:a3:00:76:62:95:7e:2a:22:e7:
         fa:1c:a7:c3:e1:70:02:04:8e:03:4f:09:5c:d5:80:c9:c7:3c:
         0f:9d:f5:78:a9:7e:8f:ef:7b:c4:af:e3:20:5d:a8:c1:3c:59:
         13:fc:19:8e:09:1f:64:4a:fb:fc:02:7d:66:92:8e:91:89:57:
         10:66:b0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:31:32 2025 by rpki-client