Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File:                     RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier:          mUI0OYbS64e94zhTo9BfOXSbBUL5LMQgg2WEvrtfHZ8=
Subject key identifier:   E2:BF:CC:79:B9:7B:D5:7D:BD:C6:75:D5:37:A9:A2:8A:BA:B1:F1:DA
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer:       /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial:       019644B1F0D689B89798BE2D3A95E7DDC63B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number:          063C
Signing time:             Thu 17 Apr 2025 17:00:34 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:34 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:34 +0000
Files and hashes:         1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: D7itRlqMoPeomI2tMtYFMeqNUEOOI2acZRw9SG7PM9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b1:f0:d6:89:b8:97:98:be:2d:3a:95:e7:dd:c6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
        Validity
            Not Before: Apr 17 17:00:34 2025 GMT
            Not After : Apr 18 17:00:34 2025 GMT
        Subject: CN=e2bfcc79b97bd57dbdc675d537a9a28abab1f1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:81:bf:f8:93:85:c8:d9:d6:68:83:4d:5b:
                    a0:d4:e6:6e:6f:9b:49:e0:8a:f2:fd:b1:7d:73:0d:
                    30:68:d1:7b:77:1e:dd:6e:8f:2e:82:9c:0b:18:ac:
                    31:93:94:57:0a:85:6c:8c:61:ef:d2:a6:0e:9f:60:
                    17:3b:84:2d:5f:d8:16:e4:72:dc:61:77:4b:72:57:
                    11:95:0b:b1:4e:de:11:91:35:6e:ed:9a:ae:36:0a:
                    84:7b:80:bc:e3:6b:77:42:b8:fe:73:2a:8f:1b:bc:
                    96:96:54:0a:81:e6:2e:0d:c1:82:44:b7:78:c4:28:
                    cb:fc:9c:ec:65:77:30:1e:7f:ad:14:10:b1:86:4e:
                    b1:35:87:b7:32:65:ca:c7:82:1f:eb:df:2a:94:c7:
                    34:32:29:a7:1b:7a:16:4d:a4:12:4c:b0:64:cb:44:
                    62:f0:89:c8:c4:13:9a:1d:a3:63:d0:ea:31:81:e5:
                    f5:f4:fd:bf:34:64:b8:0a:47:25:60:4b:b3:c8:96:
                    69:d5:53:f3:b0:7e:26:3b:e1:a1:e4:88:cc:5a:cc:
                    7b:72:dd:13:51:90:ea:ce:12:23:75:7e:96:cb:24:
                    58:99:a2:b8:6b:0c:35:13:be:1d:c4:c0:80:88:55:
                    58:c8:fe:37:a1:d3:ae:01:04:36:0b:78:63:3f:b5:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BF:CC:79:B9:7B:D5:7D:BD:C6:75:D5:37:A9:A2:8A:BA:B1:F1:DA
            X509v3 Authority Key Identifier:
                keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:55:a2:65:d2:c3:85:3b:fd:6f:9d:1d:d1:0e:c9:ab:15:28:
         0e:ed:50:39:23:9e:cf:73:fe:9a:cd:43:c9:17:8a:2a:ee:05:
         d9:c3:13:c9:e5:ed:1e:94:b8:71:59:ef:3e:1f:5c:66:b8:8a:
         6e:22:5f:a8:dc:49:93:21:93:c0:8b:c8:d1:bd:08:e2:bd:18:
         30:11:aa:02:d5:ad:3a:99:27:d5:bf:30:51:c8:0e:eb:c3:4a:
         fe:45:ca:d5:3f:4f:2b:c1:4e:00:69:ca:96:f0:69:2c:1e:b0:
         f8:23:9a:40:3c:ac:1a:e5:58:9f:7f:f0:b7:12:2f:e3:31:18:
         ec:2e:fe:84:75:a8:d8:44:c4:99:a5:ab:f5:f9:65:d7:21:3e:
         a3:97:fa:22:5e:b7:e6:f2:9c:b2:f8:27:eb:1d:e5:2b:1e:d1:
         1f:aa:c9:39:68:95:94:f5:32:c1:8d:81:17:ed:a6:cb:79:4f:
         b9:13:8e:81:c1:23:01:d7:4b:b9:ba:47:ec:f3:bd:08:15:97:
         89:d4:ae:d0:fa:02:f4:73:cc:11:65:53:62:46:32:8f:61:ab:
         7a:b5:b1:78:9d:8e:0b:ba:48:65:f5:2c:47:c7:fe:7e:c7:b0:
         12:fc:39:ee:2e:f3:90:c2:5e:0f:e7:f3:b7:d3:9e:1e:2a:7e:
         66:f2:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:15:07 2025 by rpki-client