Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File:                     1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier:          0tQc5kC3pn+2JBiC60k5hoFbja+yQyOzWZTTRyI3M3A=
Subject key identifier:   A4:3D:D9:5D:56:E2:05:0F:F0:57:C2:67:70:72:B9:5C:8F:25:30:87
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer:       /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial:       0196CEE21D1750D3069764BD822ACEE9E514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number:          0A21
Signing time:             Wed 14 May 2025 13:00:47 +0000
Manifest this update:     Wed 14 May 2025 13:00:47 +0000
Manifest next update:     Thu 15 May 2025 13:00:47 +0000
Files and hashes:         1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: LEJF4hSkaQuUoAbSaaWkReSDhOs7ZlcFmkYO6u8nUR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e2:1d:17:50:d3:06:97:64:bd:82:2a:ce:e9:e5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
        Validity
            Not Before: May 14 13:00:47 2025 GMT
            Not After : May 15 13:00:47 2025 GMT
        Subject: CN=a43dd95d56e2050ff057c2677072b95c8f253087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:94:fe:65:8b:df:57:a5:68:39:de:41:07:af:
                    e7:8c:9a:51:6e:61:81:41:7f:a9:2f:d9:a0:83:b7:
                    17:8e:05:97:a4:ef:5f:e3:15:96:6b:51:15:4e:b4:
                    a8:51:46:40:6c:d9:f9:96:16:03:4c:70:a2:44:02:
                    96:c4:02:9b:ac:6e:31:a7:ae:72:95:c1:7c:3b:a6:
                    1d:b5:a9:1b:55:62:12:26:5b:f1:4a:bc:f2:7a:30:
                    9a:09:74:86:b4:f9:41:ef:ef:69:cd:20:c9:46:21:
                    d9:11:df:ab:75:0d:ef:6e:ed:6a:1d:63:c8:3b:9f:
                    73:ea:1d:20:92:bb:8d:2d:a9:ae:2a:13:e2:7e:76:
                    e2:11:75:da:57:55:84:07:6d:a2:2d:a9:b9:31:6e:
                    72:db:6d:69:7e:e0:ec:d4:b5:76:f0:92:0b:44:3d:
                    35:af:7b:a1:a7:10:d0:f9:45:86:6b:fb:7f:7a:62:
                    b6:26:13:f3:08:d2:45:a5:02:a0:e3:fe:f7:bf:33:
                    cf:86:db:ce:ce:f3:99:9a:08:8b:b6:f5:3f:6f:ad:
                    76:dd:ac:c2:70:8d:d2:1e:61:fb:1e:59:6c:eb:6f:
                    ad:57:8c:25:1c:d9:88:e9:f5:1f:35:0d:8a:00:ce:
                    97:72:58:54:8d:22:bf:ca:70:d5:bc:fa:74:f0:eb:
                    4b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3D:D9:5D:56:E2:05:0F:F0:57:C2:67:70:72:B9:5C:8F:25:30:87
            X509v3 Authority Key Identifier:
                keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b9:9f:88:0f:ad:73:9e:e2:2e:40:4f:11:e4:e0:74:89:c3:
         77:6e:d4:fb:cd:36:9e:2a:6d:b8:d5:4b:15:b7:af:49:2c:ba:
         5a:5f:15:33:89:4a:75:5d:84:fd:18:3f:ce:25:87:0c:fc:9f:
         a8:b4:af:9c:80:56:83:35:1f:61:d6:c8:7d:a7:48:89:ad:9d:
         c7:cc:16:6d:1d:c6:8c:a4:41:ee:bf:5e:55:ab:08:36:ee:fc:
         a7:4f:73:1a:21:e5:ca:37:e7:73:3e:c9:b4:a5:b6:2e:f4:fd:
         5a:2f:c6:bd:aa:f9:c5:a8:f0:73:b2:0e:36:2d:85:c3:44:e8:
         da:ef:0b:ff:08:f4:26:69:56:57:e6:dc:47:b5:9a:a7:61:26:
         ef:9d:b7:ed:bf:cb:f0:14:a3:58:05:c4:af:c6:ef:76:0c:cf:
         0f:b4:cb:44:69:0d:87:30:98:1e:19:6c:e4:6c:be:a5:a7:c4:
         91:e8:aa:a2:0a:68:1c:c3:b9:39:8a:a8:c8:b2:08:85:01:a2:
         37:49:c1:a9:c5:b7:a7:ef:b2:f6:3b:bc:e7:ef:57:52:a9:14:
         c7:c7:84:db:f8:34:ce:42:8e:1e:3a:a2:5d:33:82:9e:4b:8a:
         94:e8:e1:ce:12:01:ad:2c:f7:b7:5b:2a:64:e2:89:84:73:02:
         75:16:72:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:27:37 2025 by rpki-client