Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File:                     n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier:          u1WFhoTOO2vpExqCy93cq1NpmRncPFGqalFb9H6FRhc=
Subject key identifier:   1A:AF:D7:36:A9:BF:06:B2:CA:AF:6A:C8:A5:D4:F4:0C:C1:76:7E:56
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer:       /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial:       01964A7D40B6023F25822FC9D6AA78C373E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number:          03F4
Signing time:             Fri 18 Apr 2025 20:00:44 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:44 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:44 +0000
Files and hashes:         1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: tLqoNO8aCef86y2LajrKHz+4EV01XNhB7eEmLeb71ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7d:40:b6:02:3f:25:82:2f:c9:d6:aa:78:c3:73:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
        Validity
            Not Before: Apr 18 20:00:44 2025 GMT
            Not After : Apr 19 20:00:44 2025 GMT
        Subject: CN=1aafd736a9bf06b2caaf6ac8a5d4f40cc1767e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:ae:39:8f:c4:4a:ed:3b:1c:ec:b4:7d:dc:
                    68:22:7b:12:c9:fe:9a:70:44:35:7a:40:ea:b7:67:
                    7d:5c:0e:bb:7d:3a:0d:a9:bc:3c:2f:cb:2b:de:c6:
                    c4:5f:65:67:55:8c:15:b9:23:c0:86:37:61:e0:10:
                    64:7f:83:d4:5d:27:a1:72:bd:99:8e:c6:ca:e8:a0:
                    2e:29:0a:a7:fd:52:93:b5:4b:97:32:7e:62:5b:ad:
                    0c:43:a8:1f:4b:5d:c0:7f:af:fb:8d:75:73:8d:a3:
                    49:ca:1b:85:1d:d5:2a:e4:a7:e1:18:84:7f:a5:f1:
                    b6:06:ba:58:cb:89:dc:f2:31:af:67:43:34:1b:9c:
                    77:73:dc:64:58:78:86:bd:4b:01:c2:04:0a:fb:86:
                    6f:d6:80:c9:ad:f7:3d:2b:31:76:63:f7:71:7c:d1:
                    e8:24:32:cb:b1:3f:12:7c:88:ac:3f:9c:a4:b6:2b:
                    b2:50:17:e7:4f:72:44:bb:ef:a5:39:00:2c:cf:ea:
                    46:16:18:3b:bd:66:77:bf:3c:f3:29:fd:0b:74:b8:
                    91:1b:65:e8:68:41:54:7d:13:b8:ab:8a:28:76:8a:
                    b0:40:2b:43:99:bc:67:6b:36:94:34:e7:5b:f7:a2:
                    fd:cc:20:2a:2d:0d:04:ff:33:7f:5a:eb:4e:61:7f:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AF:D7:36:A9:BF:06:B2:CA:AF:6A:C8:A5:D4:F4:0C:C1:76:7E:56
            X509v3 Authority Key Identifier:
                keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3c:b2:27:63:a2:a6:1b:39:04:8b:9f:b1:79:2b:70:5d:42:
         ba:58:b0:84:99:36:4c:ef:53:90:45:32:21:ef:85:c1:e3:a4:
         d4:20:aa:8e:c9:dc:4d:d8:19:02:ec:0f:de:6d:54:e8:ba:3b:
         8d:5b:2a:10:dc:cd:3c:f6:1c:95:94:d9:93:bc:12:30:a7:28:
         fa:c4:a1:96:e6:ca:3a:08:99:fb:48:6a:a5:88:b2:09:55:4e:
         46:4a:3b:b0:05:22:98:63:0d:5b:3c:3f:80:39:d1:7f:97:ce:
         32:93:0c:12:5c:0a:58:c9:0d:01:e2:ab:2e:3e:a4:a8:38:d7:
         82:6f:f0:dd:64:bb:2a:d0:b2:55:9d:88:b9:c3:d2:0d:31:54:
         fb:c1:63:04:21:50:bf:59:07:3d:71:47:59:36:2c:2c:05:18:
         ce:18:a3:43:43:d7:f4:20:74:2b:21:00:a8:75:6b:fe:51:02:
         f7:84:f4:f7:ce:f7:50:64:3c:a7:b8:35:1c:1c:2f:12:a3:b3:
         23:37:76:13:c4:da:28:ac:81:2c:8f:11:ed:a4:dc:ba:f5:4a:
         a2:d4:57:76:6f:be:91:08:45:ff:15:89:db:e5:69:86:88:b5:
         98:1f:f3:95:32:ca:13:b9:8e:f9:d5:61:0f:ef:b6:4c:33:eb:
         e3:55:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:42:00 2025 by rpki-client