Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File:                     9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier:          m7Xjv99NZ62O37Zb8rfXUmRSxYXqJPKcpuKNoQqu1gk=
Subject key identifier:   1B:77:28:C0:B4:2E:F1:37:55:34:DE:C3:0C:18:4A:07:1E:3A:9D:B3
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer:       /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial:       0196BDEEC8A726ED9A1F120B2FC4428EC82F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number:          14C2
Signing time:             Sun 11 May 2025 06:01:04 +0000
Manifest this update:     Sun 11 May 2025 06:01:04 +0000
Manifest next update:     Mon 12 May 2025 06:01:04 +0000
Files and hashes:         1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: KRwYCWKIvEGkoVH3/Hhs1r/EYko8D7gdtnFwjuOiFwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:ee:c8:a7:26:ed:9a:1f:12:0b:2f:c4:42:8e:c8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
        Validity
            Not Before: May 11 06:01:04 2025 GMT
            Not After : May 12 06:01:04 2025 GMT
        Subject: CN=1b7728c0b42ef1375534dec30c184a071e3a9db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:0f:0d:3f:c5:ba:25:ec:51:03:28:f3:d5:
                    98:da:5f:7f:e6:38:fa:7d:e2:85:6f:49:53:e0:cd:
                    2d:cb:c7:cf:22:f1:10:55:5f:5f:86:7f:e8:dc:6f:
                    63:92:0a:43:d1:71:fb:8f:3d:52:7b:ae:46:df:f1:
                    2f:00:e4:59:f1:17:31:1b:d0:81:f4:ae:a9:54:b9:
                    2f:eb:bb:a4:e6:66:d5:5e:cd:0d:6b:69:bf:ac:c2:
                    03:5d:69:02:6c:ec:1f:19:73:4e:9e:f1:ff:de:08:
                    dd:ce:1a:31:8a:48:b9:c8:4e:7d:21:4e:86:b4:a2:
                    20:63:ee:c3:f0:02:84:30:ec:5f:da:81:6f:e6:22:
                    41:c7:1e:fe:86:f6:ea:73:50:11:00:6a:82:a6:d2:
                    be:8a:6a:c9:cf:c9:4b:50:c8:7c:a1:d4:49:bc:4d:
                    73:fe:c7:cb:3f:1c:2b:c8:a8:c6:e0:6d:b5:c8:6a:
                    6e:53:ef:06:c5:af:fe:42:c7:8d:f3:e4:9d:0c:3f:
                    42:92:93:a7:54:0b:75:43:0a:a9:96:67:d8:c8:d5:
                    52:53:9f:8c:eb:a1:21:1d:68:20:a4:79:c3:76:fe:
                    31:cd:b5:57:15:bc:5d:fe:b6:eb:7e:70:fa:d0:64:
                    d8:cb:32:78:fe:26:47:be:b2:97:53:8e:f6:6d:01:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:28:C0:B4:2E:F1:37:55:34:DE:C3:0C:18:4A:07:1E:3A:9D:B3
            X509v3 Authority Key Identifier:
                keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:76:6e:7f:7b:df:72:76:c8:3f:23:17:a2:fb:7b:18:9c:c9:
         15:1c:56:36:63:f7:95:ae:bb:4c:c3:b7:18:67:40:13:7e:d8:
         89:a5:ad:26:f1:f3:5e:1b:ff:81:75:0f:54:bd:da:06:01:0a:
         d3:80:db:3f:37:7c:13:59:e7:e6:8e:cd:14:39:2e:dc:0d:cc:
         25:92:c5:91:ed:92:0b:f9:06:c6:0a:e2:88:82:b8:4a:4b:34:
         ee:d6:d5:9e:33:75:ed:b7:3f:df:33:9c:5f:a8:47:74:c7:88:
         e2:43:56:1b:46:d6:21:40:4c:f5:15:a7:6e:f4:c0:c3:43:81:
         ed:2c:ba:7f:32:66:a9:46:9d:73:11:fc:5c:e2:66:9f:a5:e5:
         69:91:40:bc:a4:95:74:85:29:e3:65:67:4c:12:cb:d0:b1:a5:
         88:6a:fc:f4:1f:0b:62:1e:71:c2:c2:35:da:fd:8b:6f:60:57:
         a2:86:bc:b1:6b:af:be:0b:55:53:87:68:ec:fe:25:2d:32:48:
         1b:4a:cf:d8:2f:4a:35:57:ec:70:0c:16:20:55:d6:a0:2e:50:
         cf:8b:e8:54:10:ff:69:96:40:42:29:f4:84:23:02:c2:cc:2c:
         73:e5:71:aa:5f:11:a5:db:6a:31:b9:ad:87:23:96:85:6c:55:
         cc:9e:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:25:58 2025 by rpki-client