Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File:                     qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier:          iPlvvksix7y7mxoEdq63eRDegddJE/6jp6D+2++DwcU=
Subject key identifier:   FF:3A:B0:A5:24:85:BE:07:C9:D7:6E:D9:DD:60:2F:B1:01:14:A7:6A
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer:       /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial:       0196AE7B18D41D397A0AAE7D66834FEF2890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number:          047B
Signing time:             Thu 08 May 2025 06:00:24 +0000
Manifest this update:     Thu 08 May 2025 06:00:24 +0000
Manifest next update:     Fri 09 May 2025 06:00:24 +0000
Files and hashes:         1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: tkR87Y+eMXclXSM9LRgsOGuYXumxBKh9Mz8iIUWEfVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:7b:18:d4:1d:39:7a:0a:ae:7d:66:83:4f:ef:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
        Validity
            Not Before: May  8 06:00:24 2025 GMT
            Not After : May  9 06:00:24 2025 GMT
        Subject: CN=ff3ab0a52485be07c9d76ed9dd602fb10114a76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:c8:02:1c:40:2a:86:a4:60:81:36:f1:f1:
                    37:38:a6:34:78:3e:37:0f:66:bb:d3:a0:bd:02:1f:
                    7f:0c:d2:d6:23:a6:87:df:22:be:27:05:23:7e:2d:
                    64:d4:d6:61:43:06:ce:b7:c7:b5:48:79:ff:6e:28:
                    4e:b0:11:27:24:4b:37:ee:71:35:7e:c0:15:d8:a2:
                    ea:df:41:d3:82:3d:9a:a4:90:7d:9a:08:ac:de:60:
                    d3:db:36:8c:3a:c7:96:40:55:12:47:26:4f:86:bb:
                    78:e6:27:ea:64:f0:7d:5a:9c:61:74:d5:48:09:e5:
                    4c:7f:48:73:56:01:a8:1e:f6:02:36:42:bd:91:3a:
                    53:55:93:23:e0:51:c9:25:46:70:f8:75:a0:52:af:
                    87:2c:3f:18:0d:d1:91:16:03:70:c9:5e:5f:65:7a:
                    f5:cd:60:9c:f8:20:24:3f:75:27:67:91:95:20:c8:
                    89:d7:bd:cf:7f:73:6f:06:c8:a9:aa:9e:97:cb:fc:
                    84:60:8c:ab:cb:26:eb:0b:97:cc:56:3e:0b:d8:16:
                    25:84:0d:d6:46:d2:64:c2:26:0b:02:9e:47:31:0b:
                    c8:28:1a:81:ca:1c:e3:30:16:24:8c:fb:96:a3:bc:
                    41:93:f0:0e:53:f5:e4:e7:08:a1:22:43:7a:e8:76:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:B0:A5:24:85:BE:07:C9:D7:6E:D9:DD:60:2F:B1:01:14:A7:6A
            X509v3 Authority Key Identifier:
                keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:34:07:eb:42:f1:67:e4:e1:a2:3c:f6:c8:a8:53:c7:33:
         3a:40:30:b7:67:2a:e8:d1:10:31:fc:bd:0b:5f:e2:1e:32:50:
         63:7c:04:11:3b:a0:64:80:3d:d4:e2:45:61:21:d3:67:71:37:
         c2:39:5d:08:92:4e:22:7d:80:7a:20:34:36:30:b8:13:c3:05:
         4c:6c:de:c6:90:d8:9d:13:8e:c1:77:73:5a:a6:48:a0:04:38:
         a6:d0:31:24:7c:9d:ac:0d:bc:a5:97:b8:3c:34:41:89:06:fb:
         d2:00:06:ca:fc:b3:30:1a:b5:9f:a1:73:e1:80:5c:a7:62:f3:
         bc:f1:f0:af:94:f6:72:ec:2a:d8:22:4f:ae:f7:c9:64:f6:87:
         f3:74:b5:cc:49:02:6d:03:6a:1c:c6:45:07:ac:9e:a0:94:b0:
         bb:ad:9b:80:d6:af:31:dd:b1:83:17:45:ec:dd:cb:82:5a:6d:
         b3:7a:d7:11:b4:b8:d8:4c:1c:70:bf:e0:e0:26:6b:ca:37:79:
         52:ab:a8:1e:50:fd:80:1b:fc:62:34:eb:8e:7f:27:c9:9a:6d:
         7b:cc:fe:49:33:f6:3a:4d:43:07:e8:81:d5:e0:19:dd:e8:91:
         48:55:1d:ba:32:89:bc:f7:90:a9:bd:a1:58:c9:52:0e:25:a2:
         3a:10:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:02:03 2025 by rpki-client