Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
File:                     ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json)
Hash identifier:          6t2oJldrz9DbylJjuqdY0IIe4Ed5Pu4kgYBCogp2V5o=
Subject key identifier:   29:E1:B0:DD:2B:9B:A1:63:35:97:F1:E6:4B:D6:87:FE:93:E9:17:06
Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
Certificate issuer:       /CN=724f14189ab7105620375daf9baa814d6dd937a2
Certificate serial:       0196A84343944BA31D4995B4614A145D055C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
Manifest number:          0697
Signing time:             Wed 07 May 2025 01:01:42 +0000
Manifest this update:     Wed 07 May 2025 01:01:42 +0000
Manifest next update:     Thu 08 May 2025 01:01:42 +0000
Files and hashes:         1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: 5skQqw/5kG6ZR8U0ZSOhmysJIXqWmTRumsd2RahCtBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:43:43:94:4b:a3:1d:49:95:b4:61:4a:14:5d:05:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2
        Validity
            Not Before: May  7 01:01:42 2025 GMT
            Not After : May  8 01:01:42 2025 GMT
        Subject: CN=29e1b0dd2b9ba1633597f1e64bd687fe93e91706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:64:44:1b:79:44:81:1b:54:d0:9a:fc:7e:
                    7b:65:c5:70:a0:45:f4:47:21:83:fb:6a:08:b9:8c:
                    88:26:9f:b9:51:12:92:86:4f:e6:e6:c1:61:8f:73:
                    38:dd:8e:44:ce:ef:2c:d7:a3:d2:1f:76:b4:b3:ce:
                    34:19:06:27:7e:01:d3:c9:a8:c2:c7:ec:61:53:e0:
                    df:3a:37:d0:22:f9:50:0e:4e:cd:03:3f:d2:ee:6a:
                    01:7e:a0:11:c9:4e:7f:12:c2:95:69:bf:15:bd:73:
                    c5:9b:82:39:94:49:39:bb:82:ca:c7:c6:f6:d3:07:
                    2b:66:55:6f:d5:a4:31:ca:68:86:59:d2:24:5b:e6:
                    a0:5e:35:c6:68:c7:6c:07:d0:13:64:59:48:16:f3:
                    29:2b:9b:f8:30:5d:2f:31:0d:39:85:fb:b0:6c:3c:
                    2f:1c:4e:e9:c9:fe:65:7d:a8:7a:4e:a5:3c:57:a0:
                    23:be:79:b2:34:d4:4c:bd:fa:d1:37:54:cb:43:72:
                    2b:40:2c:3b:a8:b3:2f:10:0f:fc:d5:e0:1f:11:4f:
                    1d:e8:80:b8:ed:94:34:39:38:0d:92:b1:6e:59:4e:
                    7a:8b:59:0a:e9:de:62:1f:8a:5d:44:1c:09:8b:98:
                    7c:77:0b:1e:1d:13:15:c9:2c:7a:86:b0:e4:ec:23:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E1:B0:DD:2B:9B:A1:63:35:97:F1:E6:4B:D6:87:FE:93:E9:17:06
            X509v3 Authority Key Identifier:
                keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0b:ed:c2:cb:2b:3c:03:30:ef:73:43:68:01:fa:ba:35:85:
         37:19:e7:4a:e0:e2:dc:60:ca:db:e3:ab:00:0c:5a:00:49:6c:
         fe:98:65:fb:bb:fe:be:55:83:32:47:a6:93:82:60:0d:54:73:
         df:73:45:bf:31:4e:bb:23:02:fa:37:5c:d4:1a:43:c4:e5:1d:
         00:35:39:c8:8c:8c:aa:4f:6a:65:03:30:8e:6a:03:90:22:c0:
         f7:ca:e6:5c:2c:5f:f0:37:9a:b3:5c:2d:35:17:21:57:38:e8:
         07:85:b0:ad:43:51:21:61:b9:65:80:b2:b6:f5:83:3d:b0:69:
         bf:66:b2:29:51:80:82:5f:cc:de:2d:74:3b:00:c2:ba:b5:47:
         03:8f:2e:fd:db:ae:f6:71:24:d5:3c:50:02:9e:dc:93:86:23:
         8b:48:a1:db:40:5b:3a:1e:d5:be:f4:34:5d:e3:3f:ff:23:1b:
         19:43:8c:2c:37:a1:8e:c9:ba:4e:66:d0:f0:b4:2d:c8:a9:aa:
         04:9e:af:d4:2f:1a:3a:be:80:34:6e:08:84:3f:0e:ff:e4:51:
         c0:23:5c:e0:fa:0e:74:f7:b5:44:ff:c2:8c:25:39:03:93:b5:
         d8:72:22:ee:27:1d:4a:c9:1d:5b:36:13:4c:11:a8:98:0f:c6:
         7f:f6:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:52:23 2025 by rpki-client