Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File:                     SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier:          WTSOp5rwIzDFVRaeRS7/4onpUC61NexMrf+zGPYY3fg=
Subject key identifier:   13:33:F9:C0:24:F9:21:62:C1:9A:EF:72:04:B1:0A:0D:83:CA:CF:EE
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer:       /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial:       0196C728D40FC2A6E450B1B317B2F8D7D97B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number:          0C1C
Signing time:             Tue 13 May 2025 01:01:03 +0000
Manifest this update:     Tue 13 May 2025 01:01:03 +0000
Manifest next update:     Wed 14 May 2025 01:01:03 +0000
Files and hashes:         1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: G7pMeXgdsX0CeU7MNvkh2/0TROPF8yp8nNEUcyD1zLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:d4:0f:c2:a6:e4:50:b1:b3:17:b2:f8:d7:d9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
        Validity
            Not Before: May 13 01:01:03 2025 GMT
            Not After : May 14 01:01:03 2025 GMT
        Subject: CN=1333f9c024f92162c19aef7204b10a0d83cacfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:b0:d0:de:a9:53:81:d4:00:fa:96:a6:4e:
                    1f:22:0a:c1:fc:b4:fe:cd:9d:32:dd:80:a0:80:de:
                    7f:65:7e:09:78:b2:2a:d2:e3:e4:04:7f:18:d0:33:
                    a3:36:77:2b:a0:37:8e:6a:91:8e:3c:d5:17:72:27:
                    b0:ea:f4:ae:9e:31:7e:6f:c8:b6:34:88:24:6d:32:
                    4a:a1:57:00:f9:f9:cd:03:b4:e7:b8:14:50:36:85:
                    d7:b5:de:71:92:56:52:e5:ab:85:4d:f9:a4:a0:f6:
                    cb:94:72:1c:b7:8b:e9:30:10:2f:81:35:8c:d6:85:
                    ac:09:73:37:31:12:3c:a3:79:e5:04:04:08:4f:18:
                    4e:f9:8a:c6:0b:98:ee:14:6d:2d:83:53:f9:5b:52:
                    61:ef:71:0e:94:40:5c:0b:20:f1:f7:cd:d6:bd:db:
                    f4:e1:93:77:a1:cd:47:bf:ab:dd:f3:35:b6:12:61:
                    9d:55:56:92:d4:e0:17:f3:d9:bd:0c:f7:43:10:79:
                    23:65:21:e0:54:3e:a5:45:25:92:32:fb:8e:ed:da:
                    db:93:be:c7:c9:59:8f:e1:e1:bd:7a:6a:76:1c:eb:
                    97:a9:a8:16:b0:91:d3:f4:35:a2:1d:bd:e6:21:50:
                    4d:57:77:65:09:78:fb:0d:ea:75:a4:a5:0c:63:bf:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:33:F9:C0:24:F9:21:62:C1:9A:EF:72:04:B1:0A:0D:83:CA:CF:EE
            X509v3 Authority Key Identifier:
                keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:cd:cf:e1:bd:e8:24:bf:13:67:b8:0e:b7:eb:80:6b:8b:
         36:fc:4f:c0:d4:ae:d2:36:74:66:67:ef:6d:01:f0:64:39:71:
         35:5f:2d:6e:df:cb:d7:88:55:ef:a4:d8:7a:1d:6a:0e:0f:97:
         4f:f6:a0:15:09:3c:6d:2a:e2:83:3b:11:18:e5:98:c4:d0:e3:
         78:d2:61:ed:16:8e:c1:55:99:a2:6e:2e:0f:92:8a:a8:ba:b0:
         1d:35:6d:bd:a3:c8:bf:00:79:58:e4:97:42:b0:25:5d:e7:8d:
         48:a0:8e:8e:91:bd:8f:b2:5f:2f:23:85:70:a3:25:e3:80:c2:
         3d:08:27:81:02:c7:c2:d4:15:df:21:a3:b0:44:cc:b0:9a:e8:
         d3:63:7d:d7:20:06:45:f7:e6:5b:cf:68:88:75:3b:19:63:85:
         6d:c5:86:4c:dc:c2:04:3c:9e:cb:a5:62:83:27:e4:05:ea:1c:
         77:2e:94:bd:65:de:3b:fc:99:37:8b:bc:11:86:1d:38:4c:f1:
         f2:52:07:8f:63:85:c6:aa:85:c7:1e:83:8f:61:b0:e4:47:9f:
         17:21:6e:77:3f:a4:44:40:ed:99:61:c4:a8:03:5d:4c:c7:47:
         8f:16:9d:d1:79:3e:39:cc:98:13:38:a6:5f:fc:92:34:8e:c6:
         cc:53:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:09:59 2025 by rpki-client