Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File:                     pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier:          Dw6geE6kdmEvHqZwpAbd3L3AQWs9jYfwbx8aOjWwZJc=
Subject key identifier:   94:05:7C:15:02:6D:5B:AB:6B:90:87:CF:6D:66:F6:2D:DB:2F:D4:AE
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer:       /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial:       01969E9A518BCD391E60264F74E772C6E84D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number:          06B2
Signing time:             Mon 05 May 2025 04:00:35 +0000
Manifest this update:     Mon 05 May 2025 04:00:35 +0000
Manifest next update:     Tue 06 May 2025 04:00:35 +0000
Files and hashes:         1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: 0vJxqGJq3CVl+mvvacfukOGvtMAmcA9MLYUsD/yf/Uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:51:8b:cd:39:1e:60:26:4f:74:e7:72:c6:e8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
        Validity
            Not Before: May  5 04:00:35 2025 GMT
            Not After : May  6 04:00:35 2025 GMT
        Subject: CN=94057c15026d5bab6b9087cf6d66f62ddb2fd4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:1a:18:e6:c8:7b:80:32:f7:9c:bd:c4:d7:
                    72:25:03:ab:c0:b6:b3:e6:db:de:d8:ee:72:d1:ed:
                    8a:df:60:b1:6d:6d:91:a7:bc:1a:7e:0b:3a:96:06:
                    44:90:1e:75:75:d4:49:35:09:ed:88:55:08:05:d9:
                    7b:d6:bd:70:f5:56:56:93:5b:25:05:61:9a:79:68:
                    b3:77:51:76:d6:c0:0b:e4:c6:66:36:b2:41:5a:76:
                    87:5b:c4:02:6b:a8:ae:e4:e9:d0:81:11:c1:49:0f:
                    49:be:dd:cc:79:17:b0:b2:9f:a2:36:14:57:0a:99:
                    06:cf:40:aa:d8:f7:7c:25:28:86:79:46:7c:78:23:
                    a8:0d:6d:7a:70:18:ed:34:24:01:66:b7:12:ea:9f:
                    13:0a:0b:84:a8:6d:63:ee:8f:37:47:30:c5:af:e2:
                    15:1e:36:b2:39:a1:22:7e:2e:fb:1d:cd:e4:81:20:
                    73:18:21:ca:bc:ce:40:b7:e4:3b:81:b4:f0:53:fb:
                    68:8f:d4:55:db:4d:76:d1:d7:e7:e6:12:df:df:90:
                    78:3e:66:1e:a5:85:6f:e2:25:64:63:2d:60:29:28:
                    20:e5:96:4a:e8:d0:17:e9:c3:8f:25:84:80:08:24:
                    0d:23:40:32:a7:c4:06:c0:9b:c1:7d:55:f8:09:98:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:7C:15:02:6D:5B:AB:6B:90:87:CF:6D:66:F6:2D:DB:2F:D4:AE
            X509v3 Authority Key Identifier:
                keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:ef:a5:99:c9:59:96:bd:43:af:0d:e7:65:33:7f:76:bc:
         b7:30:1f:04:6b:99:aa:b5:42:85:9b:a7:2f:60:14:76:6e:e4:
         20:e1:c9:d3:c8:47:40:b5:33:34:e7:a2:c6:ac:fd:4a:39:f1:
         98:e7:02:4c:e7:e3:0f:af:7b:62:4f:81:1c:69:e3:d8:d6:80:
         9f:b4:3b:0a:2d:51:7c:40:64:03:8f:cb:5c:c7:36:82:ee:19:
         60:c5:96:7d:03:12:78:54:66:7d:f4:ae:f5:52:33:0a:78:a6:
         48:7e:d0:0c:f6:53:63:ff:e4:9c:10:e2:5d:69:97:0b:64:64:
         c2:43:06:40:19:af:fd:6d:04:82:6e:0b:a6:86:c0:4a:ae:04:
         11:99:56:a3:40:0e:b4:11:d8:c9:ad:85:01:f0:b9:41:92:4d:
         08:32:4f:5c:2c:a1:41:00:53:f1:36:1b:97:24:e7:af:34:b4:
         d6:34:14:66:de:da:af:0c:dc:7e:37:99:7a:b0:18:e6:25:89:
         84:92:8f:96:6b:9a:6b:67:17:16:4b:e0:83:47:b1:6b:1e:09:
         27:a4:ab:bf:d8:6f:43:eb:71:5f:fc:4e:3e:dc:fc:82:3a:cc:
         ca:d9:e0:61:68:a0:94:d4:b6:4f:e8:cd:a1:b6:3d:4a:17:16:
         ff:68:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:54:44 2025 by rpki-client