Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File:                     R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier:          gXn7cOLQgwwDDd6Rwk5i+/H3FPHnz1a8geK+G05YsfY=
Subject key identifier:   94:9C:96:DF:3E:A3:E6:09:FB:F2:EE:5B:34:B6:46:89:38:AB:EA:F3
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer:       /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial:       0196452025771CA4EAC607A9ED355E915A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number:          14F3
Signing time:             Thu 17 Apr 2025 19:00:56 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:56 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:56 +0000
Files and hashes:         1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: V5BEV73s9BGbwUwcdOELMbMMs3xtgMnhz+JpjdX5OmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:20:25:77:1c:a4:ea:c6:07:a9:ed:35:5e:91:5a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
        Validity
            Not Before: Apr 17 19:00:56 2025 GMT
            Not After : Apr 18 19:00:56 2025 GMT
        Subject: CN=949c96df3ea3e609fbf2ee5b34b6468938abeaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:71:b4:29:cf:de:4a:8d:2b:f9:03:42:07:
                    a0:83:a5:a8:88:a1:01:fe:3c:01:f4:60:c3:eb:e4:
                    ab:47:4f:03:b2:52:71:0e:1f:f1:18:83:1b:24:b1:
                    51:ff:98:d3:a1:ca:39:a1:f8:14:77:fa:b4:c1:37:
                    61:b8:ee:2b:cb:3e:f6:95:ae:3d:25:1e:a6:a3:6b:
                    f3:74:20:b3:1b:af:04:82:15:90:af:85:9f:6a:03:
                    0c:be:42:b1:a4:ff:c6:3d:fa:59:88:00:58:35:d8:
                    57:bf:f7:8c:f4:ca:8d:71:f3:76:24:46:de:4f:43:
                    bb:79:8e:24:75:99:3b:5f:49:85:d7:54:ec:cc:df:
                    54:fd:fb:f3:9d:2f:e3:35:17:30:9a:92:35:db:a7:
                    81:54:45:c0:de:84:a5:a5:1a:61:4d:69:56:fb:98:
                    e5:6f:b2:93:ff:b8:fb:be:d4:a1:92:5e:2a:47:5f:
                    63:95:e1:49:ce:27:61:d7:2e:f7:c8:9b:ea:29:05:
                    74:99:80:f1:71:29:68:f2:80:ad:a3:47:79:6b:a6:
                    fb:49:6c:c9:29:3b:3a:c3:bf:1f:f9:77:98:03:93:
                    ed:85:02:a3:3f:c6:05:a1:2d:41:06:9b:e5:ca:67:
                    44:8a:cc:cd:92:65:93:62:b7:e6:33:cf:fe:10:21:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:96:DF:3E:A3:E6:09:FB:F2:EE:5B:34:B6:46:89:38:AB:EA:F3
            X509v3 Authority Key Identifier:
                keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:96:24:11:1d:73:84:30:9f:36:96:8b:35:84:bf:4d:fb:07:
         17:9c:e4:8f:32:f8:10:14:46:7d:f2:43:25:b7:77:20:ac:cb:
         2e:d9:52:16:9b:0e:62:e7:b8:41:1a:ad:5f:e3:5e:ea:5c:af:
         c5:20:92:1c:b8:dc:58:2e:a9:5b:37:6f:e1:ab:f7:fc:ec:98:
         18:1f:73:39:fd:c5:4d:21:e6:a3:03:1d:3b:0a:e4:49:3d:21:
         69:69:84:80:f8:37:be:3b:04:c5:57:9d:a6:49:00:74:aa:08:
         e5:a2:13:6b:e7:5a:79:3f:86:53:7a:e4:b0:35:b6:40:08:9e:
         d5:db:a1:c4:4e:bd:20:5d:47:85:8c:e1:72:75:4f:a1:c9:fc:
         bc:fc:22:6d:87:d0:6b:ca:63:9d:7e:9b:0c:21:a3:e2:db:75:
         4b:1e:6f:45:40:99:c8:28:52:ed:68:3a:58:6c:a1:00:fb:f0:
         85:22:d4:e2:04:cd:6f:33:21:8c:68:04:75:b9:71:12:9d:89:
         70:17:0f:d1:6f:a5:82:9e:07:fe:13:78:a3:f5:99:ac:96:36:
         62:9f:57:16:9d:c5:ff:22:0f:e0:e7:01:5f:eb:58:ed:48:91:
         01:12:ab:58:5e:f2:71:d6:89:33:4d:88:87:21:0f:33:85:50:
         66:d6:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:53 2025 by rpki-client