Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier:          yptZwXcS2YSW6nPfaViLTz4E4rdR8BQ0N7I2BBGBmh4=
Subject key identifier:   03:B8:79:E2:61:73:F5:4F:F8:0F:7D:EA:69:26:92:F4:4A:C9:D1:CE
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer:       /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial:       01965236CB8119FC21A97FCD3C021805C072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number:          0813
Signing time:             Sun 20 Apr 2025 08:00:44 +0000
Manifest this update:     Sun 20 Apr 2025 08:00:44 +0000
Manifest next update:     Mon 21 Apr 2025 08:00:44 +0000
Files and hashes:         1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: 54ZCvnbTVgBBjfkkuaYwaI8MG9V9ChlpWVuTKrEd+Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:36:cb:81:19:fc:21:a9:7f:cd:3c:02:18:05:c0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Validity
            Not Before: Apr 20 08:00:44 2025 GMT
            Not After : Apr 21 08:00:44 2025 GMT
        Subject: CN=03b879e26173f54ff80f7dea692692f44ac9d1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:93:5e:c9:dd:7e:03:25:dd:46:24:0b:e4:
                    76:55:a9:5d:8b:24:88:3e:e7:54:f1:86:ff:74:e0:
                    aa:6c:06:90:88:9e:68:ce:4a:3e:81:09:ca:d6:db:
                    7c:dc:57:1f:10:10:c6:68:0d:99:00:3e:16:89:8f:
                    97:c7:e7:20:dc:10:fb:30:60:95:f0:69:c5:5f:e7:
                    fb:13:06:45:f6:fe:38:f0:b9:20:b9:7b:99:ae:ed:
                    5c:ac:4c:e6:06:e4:ba:a4:86:93:c5:5b:1d:de:06:
                    6f:7f:24:78:57:9a:38:17:33:6c:b6:88:62:22:bb:
                    2f:5b:5c:b7:d2:29:e6:5c:a4:6b:79:b3:e9:cf:9d:
                    bc:4f:00:4a:52:cf:0d:f1:16:26:60:2d:ce:cf:e2:
                    c7:e0:64:50:22:8b:4d:25:e1:08:ac:21:9b:62:4e:
                    ef:d5:c3:ee:57:66:e2:3a:d3:32:0c:59:fe:0f:5a:
                    cd:59:87:f2:22:92:31:17:38:e4:4d:17:12:e5:37:
                    3c:3e:16:c0:b8:fe:2b:a3:25:6b:b0:99:8d:74:8d:
                    73:14:79:ac:6b:f1:ec:91:29:7c:e1:44:61:76:91:
                    36:c5:3e:e6:fe:1e:f8:29:05:0d:ca:b8:b0:af:2b:
                    d6:4c:87:e2:fa:f8:26:61:76:b1:9e:22:70:8e:b3:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B8:79:E2:61:73:F5:4F:F8:0F:7D:EA:69:26:92:F4:4A:C9:D1:CE
            X509v3 Authority Key Identifier:
                keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a1:a5:34:b9:80:d7:e7:56:56:6f:51:9c:11:67:2f:73:8e:
         99:96:2f:ac:56:25:e1:83:58:db:27:0a:51:63:e0:8a:bd:11:
         41:43:9f:f2:4b:0e:39:79:0d:0a:a6:f5:b3:cd:31:d7:74:c6:
         7f:5e:01:0d:1b:29:e4:43:04:93:b5:e3:cf:12:22:a6:e1:8f:
         a1:77:33:97:cf:41:7e:5c:b8:55:37:61:ea:95:85:1e:d8:cb:
         d8:61:c1:c4:8e:88:d7:dc:96:e0:10:c5:23:d2:87:d7:3f:12:
         69:e3:03:d4:6c:a8:59:e7:61:52:e0:78:0e:80:89:17:c7:5b:
         7e:f2:4a:c6:3d:8c:46:a6:21:ac:68:2a:0f:32:bb:64:90:fc:
         2a:5e:e3:16:66:f3:8f:3e:6c:c1:25:73:0a:66:40:80:53:49:
         c8:cc:89:ae:f6:3e:74:b4:f2:72:03:ba:83:03:ef:52:58:02:
         ba:5a:4c:5c:87:80:7c:56:d5:7f:7d:fc:41:7d:1a:08:93:a4:
         dc:ae:b6:ee:60:d3:40:8d:b0:fa:4c:b9:ce:c4:5d:4b:7c:44:
         8a:a7:e4:24:03:fa:4f:54:e3:de:45:44:7a:20:e2:6b:d6:74:
         68:05:3e:d8:14:90:d2:d1:86:c4:e1:5c:a8:05:1d:8b:e3:37:
         2d:d7:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:41:46 2025 by rpki-client