Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File:                     ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier:          xttZnOnUT19ev/jNzm6mkj/IuW2SuTK18YUXzOSG/aw=
Subject key identifier:   94:F5:CB:84:F6:DC:C9:5F:E1:8D:8C:71:6C:0B:AF:D8:DF:2B:46:F5
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer:       /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial:       01958F985AD4C0472971E30DB06B07944017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number:          1496
Signing time:             Thu 13 Mar 2025 13:01:21 +0000
Manifest this update:     Thu 13 Mar 2025 13:01:21 +0000
Manifest next update:     Fri 14 Mar 2025 13:01:21 +0000
Files and hashes:         1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: GWNiRgJsd1G5JXvcK3/yqMJdyNP1ZF6/+THOYC4BkNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:98:5a:d4:c0:47:29:71:e3:0d:b0:6b:07:94:40:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
        Validity
            Not Before: Mar 13 13:01:21 2025 GMT
            Not After : Mar 14 13:01:21 2025 GMT
        Subject: CN=94f5cb84f6dcc95fe18d8c716c0bafd8df2b46f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:2b:b5:b2:34:8c:1b:70:5c:62:e6:27:89:89:
                    83:e2:c0:43:c3:e1:05:c3:fb:23:e2:b3:f5:de:c5:
                    32:06:a5:6e:f7:99:9d:87:6d:ba:d6:51:8e:85:97:
                    83:78:a4:24:9b:51:ec:1f:b9:29:61:7c:cf:95:1d:
                    27:88:f9:e1:e4:f7:ef:ba:3c:b0:da:d8:3f:74:6a:
                    00:96:2b:38:32:93:38:f4:93:ba:5e:34:ac:df:41:
                    25:21:22:eb:5f:76:96:6e:89:80:84:c9:e1:aa:a2:
                    80:09:d3:dd:fb:79:0a:04:53:34:95:3e:cd:23:41:
                    0b:5a:65:8f:14:c6:37:be:94:c8:06:e5:18:95:84:
                    9f:b3:fd:9d:81:9d:47:5a:32:59:7a:68:c2:7d:ea:
                    76:61:86:26:4f:b4:6d:cc:73:cc:98:ac:25:9e:6d:
                    bc:61:00:a6:ff:ec:2d:7b:94:bb:b9:29:e7:26:b3:
                    f3:29:47:39:b9:a5:17:4b:55:bd:45:b2:8a:aa:79:
                    a9:ca:37:8f:ee:e2:b1:93:78:dc:c0:e6:87:77:52:
                    af:51:fd:3d:d6:3e:e6:d4:b8:8e:80:5b:08:a3:df:
                    5f:b1:09:94:f4:9d:ca:b6:0a:22:1e:3e:60:00:35:
                    3b:69:66:02:c5:f6:50:ec:e4:6c:f0:14:8f:d9:5d:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:CB:84:F6:DC:C9:5F:E1:8D:8C:71:6C:0B:AF:D8:DF:2B:46:F5
            X509v3 Authority Key Identifier:
                keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:de:98:6c:ec:4c:76:63:d6:fe:80:97:31:34:7e:a9:7b:
         37:04:b2:3a:f9:ce:70:a0:d4:64:83:94:ba:d1:7c:11:a1:eb:
         32:94:79:e6:0e:a0:f6:6f:78:43:2f:d3:73:2f:44:b7:d3:b6:
         82:03:9a:cf:e4:e0:06:f5:91:bb:5a:57:85:5f:53:7c:11:5c:
         d7:f2:f3:e6:1f:46:80:d5:fe:af:56:e8:ca:b7:f3:5c:7a:02:
         70:9e:8a:83:df:3d:d3:86:81:62:eb:fa:06:ae:d7:24:52:a4:
         6d:07:aa:b2:cf:c2:a7:e0:54:47:75:0f:db:15:7a:ea:dc:a7:
         b8:b5:c4:46:73:44:13:8f:e8:98:bd:90:5a:df:22:03:11:5c:
         f6:8c:1d:fb:78:c7:72:17:bb:c5:1d:c3:fc:f4:3d:78:60:4b:
         51:d8:b9:9c:8a:75:f1:e1:39:c3:7a:45:09:ac:26:14:b7:6d:
         75:6a:2b:d0:d5:28:39:8e:03:02:12:9b:69:02:ce:07:b7:af:
         36:88:67:d2:90:2c:7e:c7:87:d8:26:2f:15:9d:e6:13:2b:e3:
         3b:05:15:d6:40:32:25:d8:f7:69:d1:d2:78:1f:7c:ef:0c:42:
         c1:a3:5c:ff:3b:63:b1:fa:03:7a:81:0f:dc:fe:15:d6:a6:86:
         e1:3c:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:48 2025 by rpki-client