Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
File:                     rqVXfKLwuifftTsIjifG2Uty7_c.mft (raw, json)
Hash identifier:          9lAAV7TjIznSuG0WV0cWaQdkUuBcsEdiGcTOVnzch8U=
Subject key identifier:   07:BA:24:8E:7A:24:19:D5:E0:19:3C:B5:15:47:F1:D2:A4:D4:9F:E8
Authority key identifier: AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
Certificate issuer:       /CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Certificate serial:       0196C34B84D36763C4D9D68FCF03076E70ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
Manifest number:          0C2B
Signing time:             Mon 12 May 2025 07:00:28 +0000
Manifest this update:     Mon 12 May 2025 07:00:28 +0000
Manifest next update:     Tue 13 May 2025 07:00:28 +0000
Files and hashes:         1: rqVXfKLwuifftTsIjifG2Uty7_c.crl (hash: jEWhq9CeFcIlZ00K7gXtbvbwfJt+O/G8ftQHDw4OG9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:84:d3:67:63:c4:d9:d6:8f:cf:03:07:6e:70:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
        Validity
            Not Before: May 12 07:00:28 2025 GMT
            Not After : May 13 07:00:28 2025 GMT
        Subject: CN=07ba248e7a2419d5e0193cb51547f1d2a4d49fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:08:61:70:47:2b:09:ee:04:d2:0e:44:4c:
                    99:e1:b3:2b:74:7d:dc:f6:26:2c:e1:e2:a3:41:65:
                    ae:81:bf:08:ae:b7:a2:d0:e8:97:6f:b5:c0:f9:4e:
                    21:da:a9:ce:8b:b5:e3:d8:43:18:4f:f2:26:da:bb:
                    ef:76:3e:1f:98:27:fe:af:5a:1f:5e:09:5d:7d:d0:
                    3e:0c:78:53:97:94:af:fe:89:28:b7:aa:69:6f:6e:
                    01:eb:da:a5:d3:90:9e:73:50:82:fe:e3:61:bf:f5:
                    cc:dc:99:9b:65:5c:9a:ff:c4:ea:b8:03:6b:4c:74:
                    c2:71:46:8e:6c:e2:d9:d3:4d:bc:d6:03:18:c3:1b:
                    3f:b5:af:93:36:4f:98:98:af:d7:12:55:ad:4e:d5:
                    29:21:54:a7:7f:e5:9f:e4:5c:e3:cc:e6:ba:b2:23:
                    0f:6c:1b:91:17:26:6b:3f:09:6f:18:92:00:e8:37:
                    51:a6:91:44:ed:95:af:88:02:22:65:ee:fe:c2:37:
                    fd:17:d0:b3:c8:c5:1e:64:cd:07:44:52:6f:72:20:
                    63:35:75:a0:cd:20:03:16:95:2f:b5:bb:8b:e6:3e:
                    11:8c:4b:8d:7b:8e:00:12:28:b9:02:ce:b3:99:3a:
                    a3:f1:8c:ce:48:cd:00:ce:da:f6:72:73:07:1f:7f:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BA:24:8E:7A:24:19:D5:E0:19:3C:B5:15:47:F1:D2:A4:D4:9F:E8
            X509v3 Authority Key Identifier:
                keyid:AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:15:a0:b3:c2:ab:70:c5:55:8d:10:99:08:7b:0d:6c:02:2b:
         5e:39:4e:96:c2:48:d2:f2:56:43:7d:6c:82:08:b4:e1:a6:66:
         bf:d0:6b:c9:72:89:7e:01:b2:c0:a1:96:d9:72:0f:1b:bd:f3:
         42:60:6b:f0:f2:1b:28:63:fe:b1:35:9a:35:22:b3:8e:4c:e4:
         5f:1a:bf:65:41:cd:98:a9:bc:4f:14:53:a0:23:46:2f:43:7e:
         7f:2d:07:dd:cd:68:f8:b2:26:e9:60:ad:74:4f:26:cd:f9:46:
         57:97:e3:84:dc:31:71:b4:fc:dc:fa:dc:d8:02:db:55:94:f1:
         48:a5:a2:f1:0d:02:0a:e3:63:63:54:e2:13:0a:46:5c:cd:cf:
         72:eb:20:8c:2c:d3:a9:b3:fc:6f:4f:f5:a9:ae:e9:37:19:1b:
         fc:70:2a:bb:33:20:1a:3a:69:41:e5:93:dc:a8:9d:b4:91:e8:
         09:c5:29:32:a7:de:21:60:29:ec:90:21:61:fd:22:08:fb:47:
         44:18:b6:9d:c9:d6:4f:a4:18:4c:3c:a1:64:ac:f1:24:df:fb:
         00:81:46:5c:6b:e5:8c:0c:ec:b5:83:41:4b:e2:2c:68:da:22:
         1d:44:d4:69:de:17:fa:f5:b0:70:fa:6c:f8:56:71:02:6b:46:
         8f:af:b8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:41:22 2025 by rpki-client