Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
File:                     n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json)
Hash identifier:          fTJOOhlpf4NgVENNDtJLxeNwVpagUbsVRX3nVVnDOA0=
Subject key identifier:   FE:8B:3B:0E:F8:ED:69:BC:F4:1B:1D:65:45:7A:C7:07:EE:FD:68:EC
Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Certificate issuer:       /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Certificate serial:       0196DAAF299AD9E1681FE9B2E93D96FF0350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
Manifest number:          0293
Signing time:             Fri 16 May 2025 20:00:34 +0000
Manifest this update:     Fri 16 May 2025 20:00:34 +0000
Manifest next update:     Sat 17 May 2025 20:00:34 +0000
Files and hashes:         1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: 7lis1w9VoGIxw6mJQLn23QzUrwUGiWbECdqC0vL2qBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:da:af:29:9a:d9:e1:68:1f:e9:b2:e9:3d:96:ff:03:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
        Validity
            Not Before: May 16 20:00:34 2025 GMT
            Not After : May 17 20:00:34 2025 GMT
        Subject: CN=fe8b3b0ef8ed69bcf41b1d65457ac707eefd68ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:fa:06:8b:e1:60:78:78:0a:35:29:ab:0d:
                    03:60:33:49:7e:bc:54:13:85:c2:19:04:fe:9b:0a:
                    1b:3b:d1:1a:82:78:17:1c:61:bb:8e:2e:aa:24:f6:
                    e4:be:d1:81:96:25:42:ae:86:96:8d:36:70:95:7f:
                    57:d7:66:a8:e1:91:1b:26:6e:2b:5b:18:2e:4e:ca:
                    a5:d7:ae:d0:d3:f7:69:88:7e:e1:11:63:de:c6:a5:
                    4a:85:cc:c5:35:62:06:da:10:00:6f:6a:a6:70:3e:
                    69:98:74:01:48:5c:48:e6:b1:34:92:67:b1:cc:6d:
                    93:79:68:58:c6:29:96:e4:36:36:18:fb:22:15:5c:
                    95:86:70:f9:07:90:75:10:8a:47:e9:8a:3c:28:c8:
                    10:89:fc:e1:82:ef:1a:a6:1b:4e:b0:08:5d:e6:b8:
                    31:bd:0b:03:72:86:4c:f8:c6:fe:b8:f0:8b:6f:f3:
                    22:55:3f:e3:c8:4c:3a:c4:86:0f:e4:b4:ea:7c:82:
                    b5:20:64:0b:2d:00:47:19:d4:f1:2c:c3:56:fc:39:
                    0c:1b:80:d5:fc:21:7d:4e:96:7b:30:c2:5d:c2:dd:
                    6a:58:6b:e7:28:6a:c9:42:c7:e4:1d:15:2b:ac:24:
                    97:0b:80:ba:23:db:e6:dc:82:cd:a3:99:0b:a2:c7:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8B:3B:0E:F8:ED:69:BC:F4:1B:1D:65:45:7A:C7:07:EE:FD:68:EC
            X509v3 Authority Key Identifier:
                keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:25:08:27:c4:e9:19:78:81:b1:33:4e:98:46:ee:2e:f0:8a:
         d2:2d:81:ec:49:04:78:18:86:fc:14:8f:cb:a3:aa:5e:84:6e:
         7c:bb:a6:7d:09:cd:fd:e7:79:82:a4:06:26:59:e0:6e:71:f9:
         9a:46:83:a3:86:6d:20:06:26:00:14:8e:95:aa:3f:4b:e3:da:
         50:33:d2:d1:c6:2f:f0:94:9f:7c:ba:32:d0:b2:5f:2a:c4:6b:
         9b:a8:47:02:c5:3c:4c:8f:b8:ae:e5:f6:da:cd:9d:26:bb:c3:
         6a:22:04:fa:eb:f5:a1:ae:07:45:43:4e:50:41:2f:ed:53:8d:
         dd:ec:af:2f:53:ad:64:32:1e:17:bd:c5:0a:a0:8a:08:1f:1c:
         fc:5c:bb:86:6d:f0:db:8f:84:dd:8a:84:45:c4:dd:bf:79:02:
         c4:61:55:c2:cc:1f:c4:88:3c:af:85:88:61:39:bc:ea:07:4a:
         43:99:d4:20:2b:e6:b3:a7:5b:bd:07:61:15:5b:f3:8d:af:64:
         ce:00:62:50:92:de:36:67:9c:76:c5:fd:01:b7:ef:2d:3d:d1:
         76:74:fa:23:33:09:c3:2b:4c:94:c8:f7:80:ef:a6:01:df:9c:
         45:8f:22:ce:84:1f:51:65:52:04:87:82:8b:a3:58:4a:6a:c8:
         03:a7:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:30:35 2025 by rpki-client