Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File:                     C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier:          kze3ZePT9NDSnZZT5kOm2TNGv4/KjmxxAdutcLpIOms=
Subject key identifier:   93:FE:B6:97:84:4D:83:80:13:DC:FC:DF:07:B2:F4:B3:B0:ED:09:04
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer:       /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial:       01964632AEE2C9583AEDC9FA4D56568149B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number:          14F4
Signing time:             Fri 18 Apr 2025 00:00:48 +0000
Manifest this update:     Fri 18 Apr 2025 00:00:48 +0000
Manifest next update:     Sat 19 Apr 2025 00:00:48 +0000
Files and hashes:         1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: 4wYRBnrOcbkpsGWDtjEeISbV1B2oAhyKLW0siLuRDzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:32:ae:e2:c9:58:3a:ed:c9:fa:4d:56:56:81:49:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
        Validity
            Not Before: Apr 18 00:00:48 2025 GMT
            Not After : Apr 19 00:00:48 2025 GMT
        Subject: CN=93feb697844d838013dcfcdf07b2f4b3b0ed0904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:e9:e2:6a:69:54:56:ac:8d:6a:66:1a:50:
                    63:2a:f2:c6:08:a4:b6:7e:28:3d:11:68:92:72:62:
                    dc:c6:2c:1f:71:20:9f:ac:05:de:a8:41:70:22:62:
                    01:83:48:32:2a:6a:c3:5f:96:93:19:be:ee:dc:66:
                    96:b0:b7:e2:a4:47:da:cd:8b:6a:e5:b6:99:9c:ff:
                    6a:d8:31:23:56:9f:72:fb:0b:6e:61:be:95:7c:33:
                    ff:ca:2d:7e:87:bf:c7:d9:ff:4b:ff:6c:a3:85:01:
                    e2:8d:9b:51:61:bf:42:c8:1f:13:f0:a5:bb:c4:96:
                    8b:a4:04:70:7f:14:c2:5d:cc:bd:c1:bf:04:5b:ec:
                    a0:9e:60:92:78:3d:20:6a:70:6e:31:06:4c:00:f0:
                    a3:f8:19:fa:ab:c0:10:fc:a6:c3:ec:88:a1:0f:34:
                    1d:2b:36:43:45:7d:88:c5:8f:93:f0:58:5a:ef:c4:
                    3e:74:56:6b:42:e1:b5:53:00:fc:3f:c5:9e:16:3e:
                    08:69:dc:c9:59:e3:cd:ab:e4:fc:32:9f:04:1c:5d:
                    b0:02:96:50:e1:32:20:32:dc:5c:8f:4a:39:f8:52:
                    09:80:28:17:76:c7:81:5d:9f:46:33:d9:e4:ce:26:
                    59:d4:30:3f:3e:a5:f0:db:26:5e:40:da:cc:ee:03:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FE:B6:97:84:4D:83:80:13:DC:FC:DF:07:B2:F4:B3:B0:ED:09:04
            X509v3 Authority Key Identifier:
                keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ab:00:2c:bd:30:3f:98:8c:9d:e4:9d:81:39:d4:a8:2b:a9:
         c5:8f:59:51:63:c3:75:af:71:0c:ce:f2:2c:9c:8d:8d:7f:81:
         7e:fc:68:66:67:d9:2c:6e:02:8f:18:1c:74:63:79:a4:e0:64:
         a5:93:c0:3d:32:ae:06:05:3d:a8:49:cc:25:64:53:d9:55:78:
         45:0e:98:bb:30:4d:e7:61:10:0f:5f:37:42:0c:d0:db:3a:82:
         36:30:7e:39:8d:fd:c3:71:e1:d3:c9:b4:ff:96:3c:08:5d:a3:
         41:96:af:5c:ef:4e:b2:7b:18:fb:06:ba:53:34:08:49:a6:0b:
         a5:d8:4a:2b:b5:83:db:26:43:9f:04:c2:d0:48:5f:7a:e2:a6:
         24:a6:94:39:64:46:51:b6:be:a4:87:05:c0:93:b8:24:3c:d2:
         84:6d:2e:73:08:ad:a9:0e:15:21:92:7f:36:da:1a:2c:2b:2c:
         81:29:08:4c:b3:22:96:e5:31:65:9f:ac:8d:9d:f3:4f:b0:92:
         3c:df:b5:19:df:ea:d2:71:eb:89:d7:47:d6:a2:32:46:06:e1:
         f9:d1:41:66:6b:2d:92:2e:58:6d:b0:6a:ae:50:85:cc:5d:c4:
         0d:76:92:1a:d1:80:0d:da:e8:fe:54:a6:31:b9:29:1c:a2:c3:
         1d:99:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:11:51 2025 by rpki-client