Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File:                     E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier:          MjiaT8Iddf8hLKpdBIY3lskax7z9HBaEhRoY6CmDW9c=
Subject key identifier:   6F:5E:48:C3:26:B3:CF:23:34:13:B9:A7:C1:1B:EB:BF:B9:68:F7:0C
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer:       /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial:       01964CA24B6772F2468EFF3ABC3E023DCA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number:          047B
Signing time:             Sat 19 Apr 2025 06:00:26 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:26 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:26 +0000
Files and hashes:         1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: 56rMgAiHkmNfrSXhno8s2kWlixlPI5nzAQBYk4sFVnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:4b:67:72:f2:46:8e:ff:3a:bc:3e:02:3d:ca:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
        Validity
            Not Before: Apr 19 06:00:26 2025 GMT
            Not After : Apr 20 06:00:26 2025 GMT
        Subject: CN=6f5e48c326b3cf233413b9a7c11bebbfb968f70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:db:06:89:33:ca:7d:e7:54:b6:80:a9:f3:97:
                    df:59:79:67:d7:b8:98:0c:fd:67:e8:53:0f:fc:02:
                    0f:fe:ac:12:05:c7:57:b4:34:1c:3f:d3:c4:92:52:
                    c8:19:05:5b:80:04:52:5c:51:f1:2f:05:ff:7f:71:
                    85:9c:8d:d5:7b:a9:37:c5:8d:b6:27:c4:87:ec:85:
                    0f:02:e9:0b:6c:77:b2:e2:b8:e4:28:dc:01:0e:28:
                    a2:3f:76:cc:e3:37:1c:a0:03:ea:63:44:a6:4f:cc:
                    35:e3:35:7e:1e:d0:3e:78:84:b6:cb:de:8b:50:f0:
                    6f:c5:0d:8e:a3:de:d0:3b:e0:e4:50:f3:1d:5c:2c:
                    58:d5:61:e1:84:1d:ed:fc:37:03:73:27:38:b9:b7:
                    d9:d0:6e:3b:16:3a:70:7e:64:e3:c2:9e:67:2e:19:
                    7d:98:92:bf:4b:f3:4d:c8:65:0a:3c:ec:5d:94:dc:
                    55:4e:7e:97:69:4d:cd:8f:02:d4:ff:08:55:1a:e9:
                    3b:62:97:0f:11:82:55:7e:47:41:82:58:39:77:ab:
                    f4:2d:db:6d:37:43:7e:16:e2:dd:68:d7:37:71:3c:
                    86:70:2a:09:a9:c1:86:51:98:69:cb:17:8e:b0:6f:
                    76:ac:e7:89:14:55:04:7e:2d:0a:86:c3:1b:79:e8:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5E:48:C3:26:B3:CF:23:34:13:B9:A7:C1:1B:EB:BF:B9:68:F7:0C
            X509v3 Authority Key Identifier:
                keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:67:d6:8a:4a:19:af:00:bc:13:5d:b7:7f:7b:df:42:85:
         6c:42:e4:8d:1e:b6:9f:bf:7d:68:0c:1d:96:4c:e6:cf:0e:70:
         e7:85:77:df:a5:41:79:a7:1d:7d:80:b3:a0:c0:6b:b1:a7:ab:
         78:97:8b:27:56:d3:7b:66:e6:99:44:fd:76:b0:1a:b1:d1:a6:
         0b:45:04:71:0b:62:df:b7:ea:fb:18:4b:9b:91:31:35:03:17:
         df:6f:e8:7d:05:74:93:4a:ee:b8:40:88:0e:26:3f:4e:0b:53:
         b3:4b:fc:23:1e:1f:f6:9e:e4:78:60:ee:e4:8c:0f:43:98:2d:
         b1:af:67:cf:05:62:29:8c:c4:5b:0e:8b:f2:12:00:38:f5:df:
         fc:31:cd:87:14:66:03:f8:20:69:c1:ec:d7:a6:5b:89:c3:a2:
         48:24:80:79:19:5e:5f:d2:40:2b:1e:d9:1b:25:0a:9e:e9:45:
         dc:e7:8e:9e:86:aa:0b:c5:99:20:c1:38:2d:48:4d:15:4c:88:
         2d:a4:01:79:cc:9f:46:0b:bf:f8:16:d6:9b:4c:c8:55:99:e0:
         01:88:fe:a9:12:6a:40:56:10:c7:3e:83:87:4a:c6:c8:1e:7a:
         8b:ba:06:a5:db:02:77:bc:8d:7e:6c:0a:63:f1:e3:4d:f0:36:
         5d:99:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:41:10 2025 by rpki-client