Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File:                     MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier:          d6KY1KM4xiz7CEuU+kvSmBlBVQSyMBxbucqQBJt5MoI=
Subject key identifier:   E1:36:EE:04:B9:92:8F:11:18:CD:BC:D3:0C:8D:21:0B:03:F5:1D:DA
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer:       /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial:       01965C15BC5475648DD0CE34A0B4F5B89D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number:          0EF9
Signing time:             Tue 22 Apr 2025 06:00:50 +0000
Manifest this update:     Tue 22 Apr 2025 06:00:50 +0000
Manifest next update:     Wed 23 Apr 2025 06:00:50 +0000
Files and hashes:         1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: CKWfjMxsstFdhH5K/Poq0HV2ndrlLWg6teUbniEKRu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:15:bc:54:75:64:8d:d0:ce:34:a0:b4:f5:b8:9d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
        Validity
            Not Before: Apr 22 06:00:50 2025 GMT
            Not After : Apr 23 06:00:50 2025 GMT
        Subject: CN=e136ee04b9928f1118cdbcd30c8d210b03f51dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:a5:45:d6:f7:d9:ce:58:dd:1f:10:98:da:
                    b0:e3:3f:22:0a:9e:0b:1f:6c:ca:e8:52:19:02:7b:
                    53:19:a1:49:b2:d6:94:b8:e3:60:7f:0e:01:cb:e8:
                    95:3e:3e:23:d5:09:d3:6b:a6:e5:b2:57:9c:35:56:
                    9e:39:c0:67:fe:e4:43:82:b4:af:a5:08:ab:29:8b:
                    f7:4c:73:ce:62:5d:bd:b8:ab:63:0b:33:45:ed:c2:
                    86:f5:56:96:5e:6b:2a:ae:49:23:30:31:03:07:cd:
                    5f:ed:16:24:22:a3:ea:7a:8c:86:59:1f:8b:e1:49:
                    d1:94:af:25:9c:8d:20:80:ac:74:38:13:2e:87:cf:
                    a4:69:89:55:2f:2a:27:47:46:05:39:d0:a9:fe:25:
                    52:40:c2:3a:df:3e:3b:3c:fa:2d:d7:91:c0:98:b3:
                    82:99:81:b7:a2:84:e1:07:b5:b8:38:b1:d2:8d:cb:
                    42:d5:cf:8b:3b:5f:57:69:23:e3:68:4a:77:4d:dc:
                    71:07:57:14:ad:d8:6c:9c:ab:a4:09:54:41:18:fa:
                    f0:31:ad:a7:1d:49:d4:f1:95:25:ee:fa:ac:dc:51:
                    24:fb:87:35:1a:b7:4e:67:2a:2e:76:83:ac:53:b3:
                    41:58:b9:c1:af:98:77:97:38:c8:09:08:ab:8c:3c:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:36:EE:04:B9:92:8F:11:18:CD:BC:D3:0C:8D:21:0B:03:F5:1D:DA
            X509v3 Authority Key Identifier:
                keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:ff:fc:29:44:70:65:e1:9b:d3:46:43:22:3d:54:da:d4:
         19:08:82:cc:60:a2:91:0d:6a:6d:d2:92:2a:09:a0:b7:5f:12:
         a9:98:9c:f4:49:e3:03:3d:eb:75:db:d3:b1:97:e4:5a:ff:31:
         b9:df:4f:9a:d9:54:d4:9d:e4:e7:51:37:97:6f:8e:eb:3a:f4:
         fa:55:23:f2:0c:07:04:65:cf:65:77:64:b3:c2:94:04:69:5e:
         40:c0:52:ee:f1:69:a8:cb:bc:ed:0f:b3:2b:0a:e4:d2:23:20:
         c7:a2:c7:68:18:65:eb:21:a6:88:52:62:77:d5:af:18:e4:a7:
         72:dd:96:f0:e4:65:6c:d1:91:44:b7:76:c0:c6:15:1b:99:6f:
         33:2f:a6:6d:c5:81:15:2f:ca:50:73:d7:35:36:84:6b:23:5e:
         51:f9:3e:c5:0b:27:5f:39:fa:cc:c4:36:9e:3f:ec:02:e6:c8:
         0d:52:0e:55:0b:9f:b1:cb:bf:ff:79:59:67:b8:de:c9:a1:a2:
         47:ea:5a:85:c9:3d:bf:7a:39:85:23:2c:60:c6:af:6e:95:d6:
         2e:4d:ba:b9:81:b5:02:38:aa:5f:db:57:8a:47:88:9e:c8:00:
         e8:b6:83:3e:1c:43:24:b8:83:b5:95:20:d0:ee:e1:9d:43:b4:
         4d:40:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:48 2025 by rpki-client