Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
File:                     n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json)
Hash identifier:          wRS7kiLXo3JejX/rusIo6HknUyTBUG5A7RUuOnIua64=
Subject key identifier:   BA:07:95:5C:69:80:46:AD:8E:D6:5B:BE:1D:5B:7B:DF:BF:72:26:FC
Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
Certificate issuer:       /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Certificate serial:       0196C0B84F31439E59DD55BB73409917ED8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
Manifest number:          02CD
Signing time:             Sun 11 May 2025 19:00:26 +0000
Manifest this update:     Sun 11 May 2025 19:00:26 +0000
Manifest next update:     Mon 12 May 2025 19:00:26 +0000
Files and hashes:         1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: k58inICY3UIKAfW/+NPIPcvf1lkIr5UxDRSzBNVUsoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:4f:31:43:9e:59:dd:55:bb:73:40:99:17:ed:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
        Validity
            Not Before: May 11 19:00:26 2025 GMT
            Not After : May 12 19:00:26 2025 GMT
        Subject: CN=ba07955c698046ad8ed65bbe1d5b7bdfbf7226fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:33:1d:de:4f:52:82:52:eb:a9:f6:07:57:
                    2e:bf:71:d9:10:37:c4:3a:8e:a5:fc:de:ee:e4:a5:
                    33:70:6d:66:a6:02:67:d6:b0:05:2f:3f:1a:13:08:
                    43:9a:04:66:46:07:b7:9c:a0:40:e0:5c:d2:f0:b5:
                    3f:9a:ee:9f:d4:71:28:c9:5d:05:80:24:c5:57:9f:
                    9b:1c:9c:42:74:60:fb:18:ef:23:b4:c2:fd:cf:94:
                    b6:be:f6:6a:3a:20:9c:f2:af:67:83:11:76:dc:a6:
                    c7:8e:4b:a3:a2:22:ea:7c:a1:cb:38:8e:40:23:a8:
                    4c:a9:dc:99:16:ed:c0:48:f6:6e:9b:aa:af:fd:fc:
                    04:cb:7c:28:bf:11:c5:3b:3f:fb:6b:d3:fb:0c:42:
                    d7:3a:05:62:f4:72:da:e9:f2:5c:54:30:f5:c8:90:
                    fc:9c:53:10:19:c4:c8:d8:58:95:26:43:84:1c:0d:
                    f5:36:8d:10:ba:bc:76:12:dc:ba:99:bb:09:0c:bf:
                    72:2e:41:db:a0:6e:85:56:ea:05:5d:34:d8:52:6c:
                    5c:0d:87:ea:17:56:19:24:c5:7f:fc:4a:b6:be:2d:
                    d8:09:85:af:dc:9d:04:c6:68:62:bd:e0:49:6f:39:
                    9d:f0:29:ed:8e:97:09:cd:04:81:67:9a:82:3e:db:
                    fd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:07:95:5C:69:80:46:AD:8E:D6:5B:BE:1D:5B:7B:DF:BF:72:26:FC
            X509v3 Authority Key Identifier:
                keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:48:e5:62:6e:ab:d3:ed:4a:85:68:74:e4:f0:97:25:48:f6:
         ec:b1:d0:6d:13:8c:36:eb:12:78:e7:53:dd:32:0b:34:40:b3:
         bb:28:e5:d8:ba:35:53:b1:15:e7:bc:00:4a:b4:98:35:ab:92:
         01:57:39:18:ca:02:91:bc:90:a7:d2:58:44:31:e0:41:c3:b3:
         10:20:a1:eb:89:36:53:27:9d:78:25:00:cc:88:5a:2f:5d:24:
         13:ba:11:d8:d3:53:43:88:83:f7:39:f5:75:cb:15:4f:3c:8f:
         62:b1:cd:7d:da:65:a7:37:8d:64:f9:05:47:10:a7:8c:04:bb:
         f7:df:57:6b:a8:1b:91:26:a7:c6:da:68:cd:89:cd:64:86:69:
         f7:55:27:f4:13:31:d9:e9:47:64:ba:ac:a9:99:89:20:8d:08:
         ce:ad:08:24:2c:52:5a:3b:e5:f6:9a:19:91:d8:da:53:ba:95:
         04:b3:fa:ec:9d:13:4a:35:24:a3:57:6d:5e:e0:5c:4d:2b:6a:
         7b:ca:4e:f9:3e:0f:06:e4:f3:03:e8:49:51:da:1c:9e:06:73:
         f9:f9:91:87:bc:84:a6:e3:3e:5b:dd:69:fa:fe:66:82:07:e9:
         84:ee:d4:06:e5:69:4d:84:02:1f:d2:07:36:74:cd:7a:52:bc:
         1a:4b:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:12:21 2025 by rpki-client