Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File:                     mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier:          aaCSsroiyOiGNgvqybjimqijZ6Iv4egX/VYoRiGVFFI=
Subject key identifier:   E1:26:97:0E:9C:3A:51:00:8D:C9:03:A9:F4:0E:C5:20:A8:0A:5F:83
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer:       /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial:       0196470E085D7ADB4C717E15BC8D2EF4060C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number:          0FDE
Signing time:             Fri 18 Apr 2025 04:00:23 +0000
Manifest this update:     Fri 18 Apr 2025 04:00:23 +0000
Manifest next update:     Sat 19 Apr 2025 04:00:23 +0000
Files and hashes:         1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: PJ6eiN6VeO1zHHuyoe7RCkWdfngY/Ug8EkdVD1SqEdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:0e:08:5d:7a:db:4c:71:7e:15:bc:8d:2e:f4:06:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
        Validity
            Not Before: Apr 18 04:00:23 2025 GMT
            Not After : Apr 19 04:00:23 2025 GMT
        Subject: CN=e126970e9c3a51008dc903a9f40ec520a80a5f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:0f:47:bd:fa:00:c6:c5:a3:62:11:f9:95:
                    bc:4d:5f:c2:89:91:86:6f:04:cc:f7:22:3c:7a:20:
                    6e:18:bf:77:e5:a8:7d:2f:46:1a:a6:6b:9b:43:c9:
                    ee:aa:83:61:ba:5f:e5:cb:6e:0e:04:9d:6e:dc:58:
                    70:c9:73:d0:d7:c2:69:6f:7a:b2:7c:b8:23:7a:43:
                    27:68:a2:46:cf:02:a2:8d:b0:8f:21:17:6f:7c:55:
                    d5:9a:0e:1f:42:68:b7:a8:7a:b5:54:db:08:07:f6:
                    3b:2f:7e:6f:c3:08:dc:c4:e5:66:29:42:e2:3d:d2:
                    6d:c0:9e:76:0b:51:8a:00:78:da:57:e6:89:c5:16:
                    6c:c9:49:e2:7e:df:0b:2c:a1:97:14:48:0b:f3:2b:
                    cb:d9:73:f0:ed:d8:28:d4:7a:79:3e:0a:a7:28:fa:
                    2a:34:f4:df:60:88:a4:10:25:14:a5:29:a7:2f:f6:
                    fa:53:db:74:8d:54:07:a2:0e:be:c8:2f:9d:c4:54:
                    5b:45:73:07:6f:36:49:aa:82:0b:cb:0f:a5:9d:65:
                    1f:ac:b5:77:5b:35:55:a6:15:d6:0a:95:fa:62:f0:
                    66:b9:0c:fd:69:6c:f5:c0:9a:4f:21:41:71:ff:9e:
                    88:7e:1a:93:57:55:02:c9:0c:91:4c:de:f1:64:19:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:26:97:0E:9C:3A:51:00:8D:C9:03:A9:F4:0E:C5:20:A8:0A:5F:83
            X509v3 Authority Key Identifier:
                keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:2c:63:6c:e3:64:22:48:a4:cc:4e:ce:c0:76:12:14:57:
         38:69:c4:69:cb:c7:a1:bf:35:6e:f0:90:d5:7c:57:0b:e8:97:
         0c:d7:f5:f3:b3:79:95:a2:40:3c:23:63:74:8f:df:d5:4d:9c:
         31:28:6b:e2:9d:94:84:65:4b:6e:6c:1e:e2:8e:63:42:bd:ae:
         9a:ad:92:ba:9b:2e:86:42:8e:8d:22:50:95:77:f6:39:2a:f6:
         55:2b:38:e0:fe:15:7b:ba:98:d1:a4:f6:ba:09:97:e8:b2:7c:
         b2:be:aa:10:67:4b:90:77:9b:d4:29:42:5d:98:73:34:fb:63:
         05:bb:54:89:d4:d6:43:1d:42:4d:c0:96:7c:61:28:d7:4e:03:
         fd:97:5b:cf:82:51:08:bc:8c:84:5c:69:e1:c5:f0:d4:0e:e2:
         73:ad:29:76:c1:bd:8a:b7:11:24:c8:53:af:db:ff:85:ae:04:
         75:8b:29:de:c1:12:d4:06:6a:76:87:10:86:9f:92:f7:90:5f:
         e6:38:9b:88:c4:5a:81:ea:e4:4f:0c:ef:6a:14:69:81:56:6a:
         bd:9c:ed:18:60:71:05:60:6c:c5:3a:7a:32:c1:66:b5:a3:93:
         13:0c:cd:2e:5e:de:98:70:cb:1e:2e:d0:76:3f:d2:95:dc:ef:
         36:1a:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:52:31 2025 by rpki-client