Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
File:                     wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json)
Hash identifier:          MraZ6JQREctQ1IPyzRX833oCiE4tMABodSzIRmmP0/Y=
Subject key identifier:   48:96:6F:F2:29:0F:2E:14:B7:4E:5A:58:E0:57:66:23:A3:85:FE:0C
Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
Certificate issuer:       /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Certificate serial:       0196C2DDDAD25EEC419068E786F13BB6C36E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
Manifest number:          C9
Signing time:             Mon 12 May 2025 05:00:41 +0000
Manifest this update:     Mon 12 May 2025 05:00:41 +0000
Manifest next update:     Tue 13 May 2025 05:00:41 +0000
Files and hashes:         1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: opuj+HHLRV6rwxUYYHvG0auKEQCpCMo6ba1ZV50XW5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:dd:da:d2:5e:ec:41:90:68:e7:86:f1:3b:b6:c3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
        Validity
            Not Before: May 12 05:00:41 2025 GMT
            Not After : May 13 05:00:41 2025 GMT
        Subject: CN=48966ff2290f2e14b74e5a58e0576623a385fe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:bf:d8:ee:cc:34:15:bd:6f:a7:79:3f:ba:f8:
                    e9:cc:a4:d7:f5:8b:28:4f:33:a7:87:74:1f:0d:c0:
                    71:c0:1f:12:ea:90:81:04:14:d4:06:67:f7:2b:80:
                    da:cb:d9:6a:dd:64:f6:71:7d:4e:6a:1a:f7:1b:15:
                    6d:f0:eb:24:96:7c:26:2e:ba:30:cc:49:67:18:e3:
                    99:9e:48:16:a4:64:f2:3d:36:2e:2b:4e:03:05:cb:
                    03:6b:a0:39:ad:85:0c:f1:50:1c:b2:8d:93:8d:9f:
                    0c:16:c1:6d:8f:4b:c6:3a:fc:22:9f:e6:69:88:b8:
                    54:9e:24:86:83:7d:04:82:48:08:aa:8b:3e:3d:71:
                    cc:dc:67:b5:ed:0e:80:63:84:24:07:8c:15:b8:28:
                    be:ab:ab:40:65:6b:5e:d0:a0:34:1c:c4:ef:c8:00:
                    ef:e6:35:25:c6:71:7d:59:bf:46:c2:a8:a4:fb:41:
                    c7:1b:b9:ee:f6:77:d3:97:cd:8b:3c:15:4e:05:dc:
                    7b:af:01:07:ee:23:a2:bb:1c:ed:26:d2:9c:3f:57:
                    d3:4b:bb:94:3f:64:bb:b2:8f:bd:25:20:a8:7d:fa:
                    6d:ce:a4:b9:fd:41:0c:d8:c6:07:82:e4:b2:26:35:
                    70:79:48:7e:ee:2b:ef:46:2e:cb:bf:5f:12:41:a6:
                    a9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:96:6F:F2:29:0F:2E:14:B7:4E:5A:58:E0:57:66:23:A3:85:FE:0C
            X509v3 Authority Key Identifier:
                keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:16:ab:b7:eb:ab:e2:bc:5b:d5:0f:01:4b:d8:3d:c1:26:e5:
         d5:fe:c4:6f:84:35:7a:97:dc:76:d1:c8:62:96:91:5c:c3:c1:
         56:a5:48:d6:19:84:bb:64:69:fe:39:69:a7:29:16:5d:06:06:
         00:59:56:90:a0:0d:f2:49:f8:d9:22:7d:80:1c:58:aa:49:15:
         78:47:d4:88:f0:ba:9a:fe:3a:c5:a2:91:8b:e4:dc:d8:3f:3a:
         7f:f8:f4:35:1a:c3:6b:c9:9f:93:3b:38:f4:11:86:3d:b0:59:
         a5:3a:92:88:10:8f:45:82:b5:d7:6b:cd:ed:57:9f:20:80:eb:
         69:a7:ff:8a:a0:48:0a:f2:ae:be:35:0f:a8:2a:d5:8b:1d:8c:
         1a:15:7b:5a:d9:2f:6c:25:0b:4c:0b:15:78:d7:5f:f6:4f:36:
         40:f2:94:08:03:90:f8:f1:0e:8b:9e:73:43:f6:aa:44:fa:68:
         95:87:9d:08:d5:fb:da:ab:07:62:c5:b4:38:9f:ca:fe:0b:c8:
         8d:79:31:38:fe:ec:ec:0b:98:4d:6a:e4:f5:18:96:f9:92:64:
         67:f6:34:57:e5:d2:7d:8a:8c:07:d1:71:9a:92:62:5b:b3:53:
         bb:c6:ee:33:97:0c:64:63:30:0b:01:41:81:ef:7a:7e:7f:cb:
         ef:4c:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:19:30 2025 by rpki-client