Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File:                     syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier:          y5872Ejq8b5zs0cMU40PsvNLHZpaL7D1YR1ewj3x3j4=
Subject key identifier:   B7:2B:ED:D6:34:71:2D:9B:5D:C6:44:CD:5A:21:A3:2F:6E:7E:BF:A4
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer:       /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial:       0196A9F9CE1FD2C25F8717662433F2043BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number:          0233
Signing time:             Wed 07 May 2025 09:00:42 +0000
Manifest this update:     Wed 07 May 2025 09:00:42 +0000
Manifest next update:     Thu 08 May 2025 09:00:42 +0000
Files and hashes:         1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: /O/1GNtnK6UbMDJJoSDLOd063vo/SYwEAf1Ux5FGZqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:ce:1f:d2:c2:5f:87:17:66:24:33:f2:04:3b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
        Validity
            Not Before: May  7 09:00:42 2025 GMT
            Not After : May  8 09:00:42 2025 GMT
        Subject: CN=b72bedd634712d9b5dc644cd5a21a32f6e7ebfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:ad:eb:40:20:bb:2e:df:e6:0b:15:f0:4b:
                    0b:d0:87:77:8d:0b:f0:ae:f3:94:bf:b3:e9:32:70:
                    d3:15:e6:5b:d6:f5:0e:ee:55:ac:6f:7c:dc:c1:a0:
                    42:06:9b:d9:cc:a7:6a:70:f5:33:ac:46:69:31:14:
                    fe:a2:eb:6d:2f:78:22:df:bf:1b:01:bd:e4:18:fe:
                    d7:e5:5c:51:24:44:5f:67:fc:05:ed:97:61:d7:db:
                    cd:0d:6b:0b:d4:1c:ef:31:0c:9f:cd:d4:69:b7:ff:
                    60:f1:df:ef:8a:b5:61:85:b9:d2:80:d2:71:c2:f0:
                    c3:6a:ec:a7:18:15:71:bb:ef:70:3d:93:74:dd:77:
                    17:f2:ef:24:49:ed:87:bf:bc:8c:96:7e:b5:0d:5d:
                    e6:35:44:14:4c:40:43:4b:41:de:85:de:a4:6e:39:
                    8e:9e:79:8e:db:93:5d:35:d7:88:a3:14:74:8d:72:
                    af:19:13:b0:16:fc:a1:bf:a1:a9:ec:3c:7a:fd:a5:
                    1a:e1:d7:2d:b3:01:90:4a:1a:31:bd:52:f0:14:85:
                    04:ee:17:cc:cb:05:b2:d9:bf:4f:07:40:59:8d:54:
                    cb:6e:e0:b6:eb:74:04:83:d9:d9:8d:15:41:9a:39:
                    d5:2f:35:f9:44:5b:fb:43:af:7f:a2:30:14:4c:ca:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2B:ED:D6:34:71:2D:9B:5D:C6:44:CD:5A:21:A3:2F:6E:7E:BF:A4
            X509v3 Authority Key Identifier:
                keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:08:cc:bc:9a:46:b3:39:19:ac:af:d7:e6:f6:3d:97:6e:bd:
         f8:6a:24:3f:57:d7:cc:7d:9c:c2:8a:52:71:9c:a3:bd:03:1e:
         58:46:b2:72:2c:47:6b:2b:0e:0e:c3:c5:36:39:7a:af:72:7e:
         7c:51:d9:c0:d3:3c:d1:63:cd:da:c9:b6:57:85:37:a9:24:55:
         dd:97:a1:3e:82:ec:8c:8f:32:f5:b0:7b:71:54:0c:6b:f8:ef:
         7f:86:d0:8f:40:94:37:6a:36:09:5f:3b:e9:b7:8b:aa:dc:90:
         8c:e0:8e:2a:26:a3:47:cb:22:53:71:47:f5:8a:e3:c6:55:54:
         41:d2:38:b6:e7:14:2e:b0:33:7b:a6:12:63:13:74:5c:60:f6:
         87:69:1d:94:c0:2e:84:c0:9a:21:c2:e0:65:7b:ca:7a:d6:08:
         5b:41:7d:5c:4e:42:38:9b:e5:7c:0d:11:b2:8f:58:27:ae:29:
         7a:c4:31:37:af:3c:6a:7f:e3:60:ae:3a:d9:85:ca:b8:9c:5a:
         d7:c5:10:b4:c1:76:a5:83:32:14:fb:f3:11:52:d6:98:12:0a:
         3c:f3:69:66:e0:ad:80:65:0f:e2:d6:db:7c:dc:b2:50:5c:f7:
         a6:a5:e8:4a:95:41:61:e1:ef:0d:bd:20:5a:e0:fb:23:ed:62:
         df:6e:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:46:29 2025 by rpki-client