Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
File:                     rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json)
Hash identifier:          p+3g6MN/zakD+oJUh9rkZqxH9RY4M/UNiKJ8gWkjjgI=
Subject key identifier:   0A:16:AE:BB:E9:87:D3:33:DD:ED:45:D9:AF:39:8E:B3:0E:6E:39:2B
Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
Certificate issuer:       /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Certificate serial:       0196C7CD011D685050F365FE8F8D95659244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
Manifest number:          1537
Signing time:             Tue 13 May 2025 04:00:23 +0000
Manifest this update:     Tue 13 May 2025 04:00:23 +0000
Manifest next update:     Wed 14 May 2025 04:00:23 +0000
Files and hashes:         1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: ILlW0a7dCpJ+5JQk+0oojIJDxeRTdUTpzGDCI4JE8Co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:01:1d:68:50:50:f3:65:fe:8f:8d:95:65:92:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
        Validity
            Not Before: May 13 04:00:23 2025 GMT
            Not After : May 14 04:00:23 2025 GMT
        Subject: CN=0a16aebbe987d333dded45d9af398eb30e6e392b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ed:df:4c:af:a4:99:39:b3:e3:95:95:a2:97:
                    d4:dc:0c:d8:3f:43:fc:19:1b:07:19:04:7d:d8:6b:
                    0f:e5:47:4a:2d:3b:76:3f:f1:fa:ee:21:2e:1b:14:
                    f5:bb:1b:32:66:0c:4d:c3:2f:b0:bc:54:c6:8a:69:
                    53:32:02:92:54:84:34:ff:36:80:4a:f7:48:7d:3a:
                    38:c7:a6:ab:0d:12:63:47:bf:27:0f:16:75:fb:bf:
                    16:7f:cc:d3:d0:e9:33:2e:06:38:f3:69:62:e4:c2:
                    8f:2b:18:5f:da:d1:da:a3:6c:77:72:b1:b0:3f:c3:
                    59:24:ad:e8:ed:b5:de:1c:2f:3f:33:e3:96:62:2d:
                    43:e7:3e:da:a8:12:3d:04:a9:8f:03:ee:85:4e:ad:
                    ac:bf:0a:62:22:b9:c1:be:50:12:c9:45:90:83:cb:
                    66:ab:33:1f:7d:6f:63:e4:dc:1d:6c:dd:b1:d8:1b:
                    b1:43:47:c4:ef:6c:3c:cc:a9:a9:bd:83:e1:e2:4f:
                    1a:fb:e7:3e:74:84:3f:f3:f4:70:cd:ac:1b:ed:d7:
                    81:48:3d:51:6f:7c:45:8f:82:cd:a6:02:31:05:a9:
                    08:e7:f0:4d:00:21:45:63:f6:4c:2d:89:2b:9b:5e:
                    f3:7a:3f:3c:32:e0:96:98:fe:d1:c7:23:e1:04:02:
                    a5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:16:AE:BB:E9:87:D3:33:DD:ED:45:D9:AF:39:8E:B3:0E:6E:39:2B
            X509v3 Authority Key Identifier:
                keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:89:62:3b:02:65:2e:e8:cc:ab:57:69:af:98:7d:af:15:54:
         45:d4:f4:bf:de:27:e4:87:06:cd:39:0a:3a:b9:9c:80:18:6b:
         9f:7f:38:b0:20:c3:f1:86:01:0f:5c:73:1c:a0:f5:d9:29:ed:
         82:a3:56:fd:aa:11:fe:3a:f4:2b:e1:9b:85:1b:ed:71:d7:dd:
         51:4f:76:e4:e9:fb:b1:71:92:99:b4:45:0b:fc:2a:b6:e5:1f:
         0b:90:54:8f:71:c8:27:47:87:f6:e7:11:66:a1:63:0e:c9:d6:
         3d:4b:d8:0d:41:db:ce:e0:8d:ef:6a:2d:4c:76:65:78:66:fa:
         2d:13:7b:38:c0:2b:58:72:50:4f:ce:63:b1:7a:3b:b9:d4:d7:
         47:28:f6:be:b0:0a:85:5a:b9:db:74:e6:14:32:f2:82:49:17:
         af:1a:67:48:d2:2a:83:a5:94:ee:d9:0c:28:e2:f9:8b:2f:8c:
         ac:1a:81:0f:1d:ab:7c:88:4c:bc:7e:31:b7:de:d5:0e:9c:b9:
         3f:15:2e:17:88:3e:89:12:6b:3f:2a:46:bb:b6:87:03:85:25:
         57:d2:b4:30:a1:74:74:95:f9:38:fc:14:28:ad:b8:6f:a1:a8:
         9e:ca:4f:11:ae:76:64:21:27:75:9f:52:4c:29:a4:69:30:51:
         c6:f9:08:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:20:30 2025 by rpki-client