Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File:                     e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier:          fyjBpPmEXizGPIk5JZ1f1usQ+sPok/kkuBUyX82x7UQ=
Subject key identifier:   31:3A:1D:93:6A:8B:57:09:0B:58:DC:3D:67:5F:FB:90:C4:26:65:49
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer:       /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial:       01965EDFDEE45DF6E6666736B7782400E5A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number:          0905
Signing time:             Tue 22 Apr 2025 19:00:51 +0000
Manifest this update:     Tue 22 Apr 2025 19:00:51 +0000
Manifest next update:     Wed 23 Apr 2025 19:00:51 +0000
Files and hashes:         1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: 1WWfenXF8giX67NRODo6BjT1VgQkK2oVoia2Vd0MkHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5e:df:de:e4:5d:f6:e6:66:67:36:b7:78:24:00:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
        Validity
            Not Before: Apr 22 19:00:51 2025 GMT
            Not After : Apr 23 19:00:51 2025 GMT
        Subject: CN=313a1d936a8b57090b58dc3d675ffb90c4266549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:6b:13:48:ce:92:b1:d2:cf:c6:aa:d4:16:
                    41:0b:64:20:8e:cc:e1:0a:41:8f:51:5c:b5:a0:2e:
                    df:77:43:27:a0:ce:b4:19:f7:76:ea:5f:9c:17:08:
                    b0:1a:05:d7:87:c5:c9:94:c6:1a:4b:d8:fa:e0:50:
                    8f:e6:77:a3:74:0e:32:c7:22:47:98:83:13:42:b8:
                    19:1c:15:25:c4:f5:cd:a0:05:91:f6:4f:a7:c4:26:
                    b7:c8:7f:7a:1a:53:3f:64:44:75:22:8d:4c:85:e1:
                    a2:1f:64:c2:f2:e0:4c:03:9e:f8:63:ee:d8:00:1e:
                    91:8d:1e:27:ff:7c:60:fc:d6:63:c3:c5:29:31:50:
                    5d:1e:5d:b2:4a:82:c6:05:8e:14:01:78:e0:1d:29:
                    81:e6:a5:e3:dd:08:6f:1b:b4:5d:24:73:5e:21:a8:
                    56:07:02:80:7d:bd:18:e5:ed:b3:31:e0:af:e5:41:
                    e5:13:05:4a:e1:ff:f1:1a:ea:5f:74:8f:7e:b8:1d:
                    81:13:2f:f4:fb:40:45:fb:c4:09:1e:1c:05:79:3d:
                    8d:39:d4:b5:98:6c:06:b9:24:68:b5:61:e6:d4:2b:
                    0c:24:9c:dd:6d:af:c6:0e:67:ba:5e:b8:1a:71:a9:
                    d5:02:9b:9b:d2:93:7b:6e:d0:a6:73:cc:9e:06:87:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:1D:93:6A:8B:57:09:0B:58:DC:3D:67:5F:FB:90:C4:26:65:49
            X509v3 Authority Key Identifier:
                keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:85:e5:39:f9:44:32:2d:ba:f1:51:d4:99:d6:f2:25:b3:d2:
         0b:5d:17:e2:71:13:c7:7a:67:7c:cd:90:0d:05:1e:8f:38:e9:
         51:8c:1c:95:ff:42:c4:17:5b:76:7b:b6:6f:fd:37:38:5b:73:
         fb:5e:a8:8f:48:f8:ce:98:55:0d:af:73:d5:98:b7:7a:7c:b4:
         66:ed:e8:2e:46:20:0d:03:5d:c3:06:83:24:5a:33:58:14:bd:
         c2:78:ac:0c:75:3f:e9:f8:ea:28:fa:63:2f:aa:d8:10:20:96:
         fb:20:c3:f9:da:af:35:e7:ee:e1:c4:b1:11:f0:1d:6c:1a:e6:
         28:a1:bf:4b:89:bb:74:90:7c:be:86:d8:44:93:15:2f:18:51:
         91:6e:09:eb:2f:9f:61:b4:4e:30:4d:cc:8f:c2:e7:31:b7:fe:
         dd:1d:7f:21:d1:09:dd:9c:e1:78:95:b6:a2:99:91:ae:eb:d6:
         2f:94:7b:ea:4c:1c:96:c1:18:38:03:62:e7:bf:36:8c:90:e9:
         1a:4c:00:18:78:b9:84:6a:ec:e7:8e:e4:81:6c:c5:20:08:ac:
         01:e1:18:1c:2b:e4:ba:f5:95:71:83:24:74:ce:1e:36:fc:3b:
         80:08:ca:7e:87:49:d6:71:82:93:b8:75:3b:a2:ba:76:13:a7:
         e5:cd:a4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:43:28 2025 by rpki-client