Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File:                     nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier:          tBBGwEpZ7IzGvME9uANVXqyAzofArwPDueLRsMtBiNo=
Subject key identifier:   AA:FD:A9:36:D2:ED:E0:85:E2:41:A6:57:C1:7A:E1:8F:56:FD:82:E1
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer:       /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial:       01962C05EF6456009C6E87184244B871C166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number:          04CF
Signing time:             Sat 12 Apr 2025 22:01:48 +0000
Manifest this update:     Sat 12 Apr 2025 22:01:48 +0000
Manifest next update:     Sun 13 Apr 2025 22:01:48 +0000
Files and hashes:         1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: GYrg9Rhq2H1RI0x49LkEYEPUpTFFxJVc6/2z+gaD/U4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:05:ef:64:56:00:9c:6e:87:18:42:44:b8:71:c1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
        Validity
            Not Before: Apr 12 22:01:48 2025 GMT
            Not After : Apr 13 22:01:48 2025 GMT
        Subject: CN=aafda936d2ede085e241a657c17ae18f56fd82e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:c1:f9:a2:09:07:76:cb:5d:2d:06:b6:56:
                    71:ab:91:73:22:f2:c2:e5:fc:b8:c4:88:33:fc:08:
                    b8:12:f6:ff:e1:2b:fd:ee:fd:45:ee:6f:f7:8b:62:
                    63:02:67:f0:86:06:f2:e4:7e:d4:dc:d5:f3:a2:76:
                    6c:c2:23:ac:5b:71:81:26:80:3f:c2:9a:62:6b:a8:
                    cf:12:f0:2c:ff:3a:51:38:15:4f:6d:c1:25:c3:a5:
                    9f:e7:77:64:52:44:7b:76:5a:fc:f3:41:d0:26:38:
                    cc:8a:8c:ef:10:16:b0:79:fd:eb:35:23:bd:e3:1e:
                    39:4a:70:8e:a5:97:b4:24:a9:7a:1a:73:a2:87:bc:
                    04:78:b5:19:1d:2b:6d:e8:68:8d:2c:3c:48:3b:a9:
                    89:d4:0e:6d:2d:31:8a:a0:67:cf:c5:97:72:6a:e3:
                    9e:b1:7b:6e:c1:83:4d:3d:a8:ba:c5:91:f6:2a:9d:
                    18:ce:61:65:77:16:5b:f2:01:69:06:e0:c0:c9:24:
                    63:38:5d:ae:d6:91:54:f3:8d:0c:0c:45:66:e3:e1:
                    fa:bc:04:40:e5:db:5a:8f:27:14:d5:c9:9e:cd:89:
                    3e:f1:9b:c4:26:67:fe:5d:e4:0b:84:23:18:4e:47:
                    b2:5b:0e:60:da:fd:95:52:b6:dd:21:9b:d1:1f:c5:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:A9:36:D2:ED:E0:85:E2:41:A6:57:C1:7A:E1:8F:56:FD:82:E1
            X509v3 Authority Key Identifier:
                keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7c:dd:dc:bf:4f:28:24:36:08:93:23:0f:54:09:52:1c:98:
         45:b8:e9:a1:4f:ab:3a:9d:10:2c:25:7a:9f:34:65:ab:54:18:
         8c:54:90:61:2b:2d:28:66:e3:f0:37:63:af:22:67:cb:ea:54:
         62:80:7f:97:55:c4:8a:02:b0:6c:dc:3f:3c:95:f7:51:22:31:
         f9:c8:56:31:7b:c3:12:d5:88:8e:e4:1c:41:cb:f0:58:5a:27:
         f3:06:f1:1f:1a:4d:b3:05:29:e2:f4:b1:8b:7d:cf:8f:d3:07:
         45:e7:8f:b3:c3:21:8b:9f:2c:0a:fc:34:b3:f2:29:b9:59:6c:
         33:87:f6:fa:ce:23:f1:62:73:5c:86:24:fc:a8:85:67:0f:89:
         a3:a1:f0:8e:10:dd:39:a8:2d:a7:f6:a6:93:56:e2:21:65:0d:
         42:84:d4:11:2f:6c:f7:3f:66:c8:10:83:fa:ff:11:df:41:ef:
         33:b7:7c:be:09:11:ed:c7:0f:56:54:0e:11:2a:1d:d8:e4:b6:
         84:8d:4a:96:85:b4:94:60:c9:0f:28:da:6c:92:0e:d0:64:21:
         ee:b9:d9:a7:60:10:bf:7d:f6:de:63:c8:cf:be:76:83:f1:4e:
         f2:fa:d5:25:71:05:8c:ee:8c:23:81:eb:68:1c:c3:29:57:a4:
         00:78:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:41:50 2025 by rpki-client