Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File:                     C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier:          pmvY0rF5wY9yJlvoWS2e7eipX1cpseiSZ2+2+tp4V+M=
Subject key identifier:   1A:F3:DE:77:01:21:2A:DF:50:0D:73:B2:70:D6:A9:FF:9C:43:61:C9
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer:       /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial:       0196AFC4ADF67EE1DA36DCDA1B99B3A42E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number:          03E7
Signing time:             Thu 08 May 2025 12:00:24 +0000
Manifest this update:     Thu 08 May 2025 12:00:24 +0000
Manifest next update:     Fri 09 May 2025 12:00:24 +0000
Files and hashes:         1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: tCSHtg4hiZJT2vQ00QZ/msdpsOnLoljhxC6CRijjXPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:c4:ad:f6:7e:e1:da:36:dc:da:1b:99:b3:a4:2e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
        Validity
            Not Before: May  8 12:00:24 2025 GMT
            Not After : May  9 12:00:24 2025 GMT
        Subject: CN=1af3de7701212adf500d73b270d6a9ff9c4361c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0b:9b:ec:e7:c1:f8:27:91:87:0b:04:70:db:
                    b6:02:ec:16:9c:0d:6c:5e:a4:0e:47:f4:e5:c7:83:
                    bb:0c:f1:37:fe:02:55:42:b8:8d:eb:8e:ea:95:50:
                    4d:5d:3d:41:bc:53:f3:fc:44:79:4b:0b:dd:f1:5d:
                    30:4a:59:27:4e:c0:37:d5:de:7a:0b:99:0d:18:5c:
                    f0:f5:d4:0d:9c:1d:1b:11:07:ba:d0:78:a8:8d:d5:
                    d6:fa:7d:80:60:59:29:5a:5e:2d:f6:2d:79:ca:d7:
                    cd:07:3a:bb:d7:6b:94:92:c6:d7:5b:25:a9:be:50:
                    1b:2e:88:23:36:af:3a:6f:00:39:4f:24:03:87:f9:
                    a9:16:20:0c:f5:de:f3:29:07:db:99:8d:0b:50:76:
                    12:cf:72:d7:13:3e:8c:f4:78:c3:7d:b8:16:fd:ce:
                    bc:2f:0b:8a:b9:30:2f:a9:74:e9:00:d3:74:6e:6c:
                    37:a9:3e:2f:07:38:45:00:23:49:37:c3:d0:92:a4:
                    28:11:4f:e5:d2:2f:23:83:f8:db:b2:4d:11:4e:c1:
                    9e:c2:53:d7:5a:65:6e:2a:8c:c1:a9:f8:81:c1:ea:
                    a5:78:6e:38:2e:b4:d9:18:84:3c:0c:9d:3d:db:ff:
                    0c:bd:bf:04:ca:0c:7c:f9:db:f8:f9:19:73:3d:0f:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F3:DE:77:01:21:2A:DF:50:0D:73:B2:70:D6:A9:FF:9C:43:61:C9
            X509v3 Authority Key Identifier:
                keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:b9:9e:44:76:3a:c6:ea:48:bc:b3:7d:a0:12:37:d5:32:
         35:35:05:17:af:ea:d7:26:1e:0b:d3:fe:1f:ac:d3:b5:43:cc:
         35:e9:a4:7b:d1:8d:67:cc:13:03:0f:57:73:63:c6:3e:99:35:
         05:ac:7f:f7:8a:55:e5:2a:50:51:b6:f8:65:ed:69:8a:47:09:
         2f:b1:2d:20:f5:dc:4c:80:7b:1d:e2:16:86:5f:1a:83:f1:99:
         a5:cd:a5:d4:7b:02:f2:44:f5:a8:27:0c:45:85:e7:ae:1b:3f:
         99:17:f0:f4:da:46:a6:b0:be:b7:9e:c4:30:60:eb:94:b0:16:
         17:47:f9:9f:53:d2:b1:55:ca:de:ca:eb:95:4e:25:b0:21:39:
         9e:e8:b3:9e:67:14:af:e3:0c:f0:f1:65:9c:e5:de:d9:08:70:
         0a:9b:65:cd:dc:14:1d:0f:cc:c6:8e:43:9f:73:fd:60:6e:21:
         e0:24:84:6e:29:68:ba:ce:88:bc:07:ce:ac:c9:d7:3e:b3:f1:
         8f:99:5a:01:f6:c3:42:7e:00:36:6a:70:23:a3:0c:31:87:e8:
         21:07:2a:54:c2:d0:9a:ed:a0:87:ba:2a:f4:7d:89:42:77:7e:
         de:b6:c0:50:fa:7a:76:0e:69:99:51:32:b9:dd:5b:0d:a3:49:
         fb:e7:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:12:09 2025 by rpki-client