Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File:                     mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier:          GtwyysnGRTMG6Rzh0CKoWwUzQW/vWBKdLlgQ1roWNhI=
Subject key identifier:   C2:82:5D:03:DD:87:86:97:F1:32:99:7B:1F:49:FE:EB:B9:58:30:13
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer:       /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial:       01964632E7865B82C01743155C93CEDD5E31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number:          04EB
Signing time:             Fri 18 Apr 2025 00:01:03 +0000
Manifest this update:     Fri 18 Apr 2025 00:01:03 +0000
Manifest next update:     Sat 19 Apr 2025 00:01:03 +0000
Files and hashes:         1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: U1bJPw8n3pYlpt9bHpQHXYZmf+UJyoy+jMrsMGXo3bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:32:e7:86:5b:82:c0:17:43:15:5c:93:ce:dd:5e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
        Validity
            Not Before: Apr 18 00:01:03 2025 GMT
            Not After : Apr 19 00:01:03 2025 GMT
        Subject: CN=c2825d03dd878697f132997b1f49feebb9583013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:c4:04:40:86:74:56:a2:66:69:7d:3a:ef:
                    3c:dd:cf:42:01:c3:bc:48:d7:1b:87:0c:d9:5d:dc:
                    22:4f:91:af:fe:6e:49:a1:52:cc:d9:5a:ba:9b:bc:
                    85:52:7c:3f:6d:41:f8:51:22:88:33:8e:1a:04:8c:
                    40:70:5d:3d:5e:63:84:99:95:e1:26:46:64:9b:5a:
                    6c:59:8c:49:01:4c:1d:c0:26:58:1c:a7:15:5a:fe:
                    01:b5:0e:24:f6:cb:13:fb:95:1e:9e:34:6d:fd:1e:
                    c5:fb:b8:51:bd:18:47:15:da:f0:b2:67:91:b9:41:
                    d2:cc:f0:f2:5f:90:18:2c:19:6c:87:4b:81:b7:9d:
                    78:65:5a:30:60:da:03:07:2a:0f:61:31:bf:26:e6:
                    5c:5c:15:2c:34:49:98:63:b2:14:06:e5:a3:d2:6c:
                    ff:89:39:bf:17:5e:26:b3:be:92:6e:16:05:7b:39:
                    5b:25:88:f2:c5:b5:cb:3f:a9:03:20:38:8b:4a:3b:
                    47:0d:08:59:7d:6f:f3:a0:e6:3c:43:30:3e:94:59:
                    5b:db:1c:70:1e:8c:b2:35:f1:30:b9:2b:58:0b:32:
                    65:f2:93:77:64:d7:13:f0:c8:5e:67:e5:ef:a9:d2:
                    91:fb:90:d2:25:2d:9b:c1:3b:7d:5f:d3:08:88:69:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:82:5D:03:DD:87:86:97:F1:32:99:7B:1F:49:FE:EB:B9:58:30:13
            X509v3 Authority Key Identifier:
                keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:17:e9:1d:14:54:11:f8:a6:c6:5f:3c:eb:a5:81:1b:b9:31:
         79:df:e8:40:e7:db:9c:bc:67:ab:f1:9d:13:c6:a1:8d:8a:6d:
         6a:c5:7c:a8:46:fa:1a:eb:ae:a5:0f:c7:8e:c9:57:a3:84:21:
         0c:79:fd:a6:d2:1b:70:d7:79:e7:1e:f6:91:d4:9d:b4:99:c5:
         05:51:36:8f:cf:aa:71:d0:c4:c4:35:cd:ee:14:67:ad:20:2b:
         a0:a1:34:1a:c1:d7:b1:a6:76:7b:77:88:7c:2f:07:30:64:8a:
         7b:0e:a0:48:d2:7c:31:88:74:94:ef:ce:9d:1f:b3:c7:a5:12:
         4c:06:3c:2d:2d:77:b8:75:07:ea:a4:3f:f6:f2:25:dd:24:f2:
         f3:bd:99:a4:29:d9:25:75:ce:17:ac:57:fd:61:e8:b7:f8:18:
         cb:15:c9:de:32:c2:45:ff:4f:3b:9b:b9:6d:e9:6e:94:72:f5:
         18:67:b9:7f:3e:b0:66:b3:6a:59:11:9b:53:d8:01:c8:f6:51:
         ff:6d:fc:2f:2e:c0:9b:b3:40:fb:6c:1b:37:f0:c9:0e:cc:a5:
         81:63:e5:3e:c9:ca:f0:85:1e:8b:f6:6d:42:fa:d7:6a:d2:45:
         7c:cf:4a:ae:fc:eb:ec:98:09:fc:98:d6:52:79:b9:ab:15:dd:
         74:25:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:38:43 2025 by rpki-client