Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File:                     RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier:          7fXtgaZavf+90oHs6CTzIt6ZApwkysMoECKHUgHjAlw=
Subject key identifier:   5C:F7:55:D8:E6:3B:8E:F7:99:B2:1F:01:F6:3A:32:58:7E:49:57:12
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer:       /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial:       0196B8FED766FED444D7897C89B9CA930208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number:          095B
Signing time:             Sat 10 May 2025 07:00:30 +0000
Manifest this update:     Sat 10 May 2025 07:00:30 +0000
Manifest next update:     Sun 11 May 2025 07:00:30 +0000
Files and hashes:         1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: lYvXwvEp7H8RSMvNYLaflFfVanJ61zDRs29mjb9rhuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:fe:d7:66:fe:d4:44:d7:89:7c:89:b9:ca:93:02:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
        Validity
            Not Before: May 10 07:00:30 2025 GMT
            Not After : May 11 07:00:30 2025 GMT
        Subject: CN=5cf755d8e63b8ef799b21f01f63a32587e495712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:ae:28:09:8e:eb:f5:49:95:37:ee:44:dd:
                    15:e5:44:34:50:80:c8:ac:3e:a9:f2:bd:05:f3:54:
                    bf:ef:c0:20:ed:cb:41:06:b6:bc:fd:35:c9:04:70:
                    13:75:f7:a7:cc:73:22:9b:bd:54:a1:b5:87:92:77:
                    5a:89:cc:07:73:fc:18:73:8e:54:10:38:8b:6f:8a:
                    e7:98:e0:14:af:f7:67:e3:d5:f3:5f:eb:e4:eb:e0:
                    68:c0:74:0c:90:06:ec:53:d1:5a:31:bd:f1:20:6a:
                    91:87:62:2b:c2:af:7b:66:27:f2:5b:16:6e:dc:97:
                    12:a5:3f:6a:aa:5f:18:62:40:ab:0d:c0:eb:84:1a:
                    c0:da:c0:d4:05:d8:1f:54:43:d3:74:0e:71:b4:b4:
                    aa:c1:1f:21:29:15:46:7d:9b:bb:f3:e8:d2:23:56:
                    1a:57:da:06:89:8c:db:f4:e4:eb:8f:44:16:43:1e:
                    3c:f1:9f:28:e9:e8:de:4f:ab:3c:4f:0c:ca:15:3f:
                    f4:0e:fc:20:05:fd:d6:57:0d:53:71:b1:01:f4:84:
                    dd:ac:06:5d:bb:5e:51:d0:ab:f1:63:5c:42:6a:86:
                    5b:dc:cb:d6:b6:d7:c5:4f:d6:c9:70:61:d1:35:c2:
                    12:0d:16:c6:97:84:78:24:f0:76:71:0c:ca:ef:90:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F7:55:D8:E6:3B:8E:F7:99:B2:1F:01:F6:3A:32:58:7E:49:57:12
            X509v3 Authority Key Identifier:
                keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6a:a5:70:29:4a:7e:68:0b:10:9b:8e:c1:4a:26:e2:01:5e:
         5d:30:2e:c3:b9:4b:b0:15:7a:76:bc:5c:32:61:01:39:5f:32:
         bf:89:dc:9f:80:8a:fe:cf:95:f1:a6:d5:d8:a7:25:58:54:bf:
         ac:a5:d9:ce:5f:8b:12:fc:f1:e1:07:63:a7:a1:f8:12:d5:01:
         92:9c:54:a1:4d:b7:45:b6:4f:14:dd:6e:e7:43:cd:3b:f4:87:
         da:87:af:98:68:1d:ae:93:8d:b6:ef:f6:69:31:08:22:62:63:
         c8:7a:7d:00:78:f1:ff:1b:47:73:9b:0c:d6:08:87:de:36:30:
         0b:b1:d5:56:2a:af:3e:47:90:b1:f2:44:fa:bf:6c:51:2d:7b:
         d7:3c:af:e3:48:db:4d:ef:a3:0d:1b:9e:5a:39:3f:a4:29:d2:
         cd:ef:09:ee:49:90:cf:b6:ad:53:1c:26:5c:14:e8:45:ba:36:
         ed:14:b8:11:75:5e:fd:3f:d3:4d:f3:3d:55:f1:95:76:f6:c1:
         7f:35:a1:04:b1:03:49:50:83:0d:ae:dd:d5:93:70:01:97:85:
         2e:35:10:15:78:23:0c:30:4f:21:15:44:c0:4a:98:e0:02:d0:
         e3:f6:e6:d9:d0:09:e1:31:cf:0c:c8:17:a9:51:73:b5:2e:83:
         f4:ae:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:38:10 2025 by rpki-client