Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/688c23-6a53-4854-a19a-c2d005008ef7/1/e4BZu40DtmLHuAOenyYDqippkPQ.mft
File:                     e4BZu40DtmLHuAOenyYDqippkPQ.mft (raw, json)
Hash identifier:          wPu19Rny8vKFNd12hmmSbQ9SqG0R61dFWABcbp8tMYU=
Subject key identifier:   93:15:3F:79:1B:59:13:10:6B:34:61:37:81:35:9F:73:89:FD:68:A1
Authority key identifier: 7B:80:59:BB:8D:03:B6:62:C7:B8:03:9E:9F:26:03:AA:2A:69:90:F4
Certificate issuer:       /CN=7b8059bb8d03b662c7b8039e9f2603aa2a6990f4
Certificate serial:       01965537C3DB76D3EE49729B1BBB407B674A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4BZu40DtmLHuAOenyYDqippkPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/688c23-6a53-4854-a19a-c2d005008ef7/1/e4BZu40DtmLHuAOenyYDqippkPQ.mft
Manifest number:          0733
Signing time:             Sun 20 Apr 2025 22:00:40 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:40 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:40 +0000
Files and hashes:         1: e4BZu40DtmLHuAOenyYDqippkPQ.crl (hash: El08KJHXzRUdJBcHcKAblj2fojxJqSS+QNp1KLuimCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/688c23-6a53-4854-a19a-c2d005008ef7/1/e4BZu40DtmLHuAOenyYDqippkPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/688c23-6a53-4854-a19a-c2d005008ef7/1/e4BZu40DtmLHuAOenyYDqippkPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4BZu40DtmLHuAOenyYDqippkPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:c3:db:76:d3:ee:49:72:9b:1b:bb:40:7b:67:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b8059bb8d03b662c7b8039e9f2603aa2a6990f4
        Validity
            Not Before: Apr 20 22:00:40 2025 GMT
            Not After : Apr 21 22:00:40 2025 GMT
        Subject: CN=93153f791b5913106b34613781359f7389fd68a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:96:6a:e1:01:83:5d:b2:30:82:74:16:24:b4:
                    a0:af:0c:23:8a:d4:71:ad:38:92:9d:a1:04:bc:37:
                    5f:05:d3:e4:bc:e4:a5:dd:56:04:bd:af:c5:dd:43:
                    84:e7:a8:78:47:16:00:94:4c:37:e2:83:c3:36:e1:
                    09:a7:f9:be:50:d9:c4:d5:1b:2c:38:1e:fd:74:3c:
                    2e:93:13:2e:b5:2e:bd:d9:bc:ee:4e:f4:3d:bd:ec:
                    cf:da:00:b0:d0:2e:c6:a2:ff:a1:18:58:d1:de:21:
                    5c:52:a0:2e:ae:35:72:86:9a:5b:c1:11:74:b2:3c:
                    69:08:73:d8:d4:63:d4:23:5a:8c:3e:53:40:79:f5:
                    00:ed:1f:62:fe:d3:bf:29:10:20:a6:17:37:f5:72:
                    b2:01:9e:13:39:15:6d:86:3c:59:81:61:6b:59:a9:
                    40:0c:cb:d6:f4:55:fb:0e:9b:07:e3:4e:03:78:ed:
                    b3:29:92:c5:c6:4c:fd:ad:a1:22:d0:e2:7d:79:cf:
                    a1:0b:77:c7:0b:bd:c1:27:9f:3a:e9:d1:fd:d9:b0:
                    25:f4:8f:8c:8b:21:57:09:79:4f:b2:a7:e3:35:37:
                    c0:cf:78:84:94:a9:69:8e:85:78:44:ff:3a:4b:d3:
                    0e:0a:d4:7d:20:f6:59:8f:34:30:f7:d9:83:d1:80:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:3F:79:1B:59:13:10:6B:34:61:37:81:35:9F:73:89:FD:68:A1
            X509v3 Authority Key Identifier:
                keyid:7B:80:59:BB:8D:03:B6:62:C7:B8:03:9E:9F:26:03:AA:2A:69:90:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4BZu40DtmLHuAOenyYDqippkPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/688c23-6a53-4854-a19a-c2d005008ef7/1/e4BZu40DtmLHuAOenyYDqippkPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/688c23-6a53-4854-a19a-c2d005008ef7/1/e4BZu40DtmLHuAOenyYDqippkPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:59:7b:9a:86:fb:cc:27:f7:7a:14:10:19:73:e0:3f:cb:
         33:41:d5:23:02:21:ad:f2:5d:a1:c7:41:90:00:b4:ea:a9:f5:
         d3:39:f6:44:6b:3f:3b:f4:4c:dc:b0:4d:4a:cd:7c:f0:94:ef:
         8b:2d:4c:84:af:43:7f:3b:cc:3d:70:32:40:c4:49:84:20:f3:
         b8:a9:6e:d3:0b:f7:b7:bb:10:c6:a8:c9:e4:85:a8:2f:79:da:
         df:71:e1:b2:62:e2:4a:98:09:d1:54:2d:c1:20:88:25:bf:cd:
         f9:0f:f2:53:f7:1d:be:d3:53:16:50:f2:ec:a1:dc:77:17:5f:
         dc:ca:98:97:32:39:37:4a:11:ed:dc:ad:09:8c:a8:84:55:db:
         65:c3:f1:9b:5f:38:2d:f4:5b:8c:0a:e1:5f:b8:44:8b:41:fa:
         85:2a:e1:17:bc:78:54:a3:8f:b1:d6:3a:77:0c:6d:9f:22:3c:
         56:01:7d:dc:c4:56:62:d7:7f:ee:71:62:01:1e:f6:8e:15:f4:
         ea:20:ef:4d:a8:f0:20:45:90:23:1e:b0:56:a3:95:4a:ea:56:
         5e:83:48:de:54:5c:9b:4e:95:96:2c:5f:83:f1:be:37:24:2c:
         12:d7:8c:73:db:c4:d4:13:b3:ff:94:93:47:04:ad:ae:c4:f4:
         f2:40:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:18 2025 by rpki-client