Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
File:                     n34J7YuBilTMw-tCb2elWhOKuH0.mft (raw, json)
Hash identifier:          J/2Jr+nzVO3Be2yEP+YyuTDylRE1i9tbsQBVHuGvDD8=
Subject key identifier:   EB:32:4E:E8:83:99:4B:28:D2:0A:D6:8A:CA:C4:ED:46:3D:9D:E9:DF
Authority key identifier: 9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
Certificate issuer:       /CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Certificate serial:       019647B3E58301F02CC19AB28C4CF883387E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
Manifest number:          0903
Signing time:             Fri 18 Apr 2025 07:01:34 +0000
Manifest this update:     Fri 18 Apr 2025 07:01:34 +0000
Manifest next update:     Sat 19 Apr 2025 07:01:34 +0000
Files and hashes:         1: n34J7YuBilTMw-tCb2elWhOKuH0.crl (hash: QWWDy0yMN+h7epf3vQL7PK2IkANyfe3KQt6pDQCzpU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:b3:e5:83:01:f0:2c:c1:9a:b2:8c:4c:f8:83:38:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
        Validity
            Not Before: Apr 18 07:01:34 2025 GMT
            Not After : Apr 19 07:01:34 2025 GMT
        Subject: CN=eb324ee883994b28d20ad68acac4ed463d9de9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:f6:51:2b:08:53:b3:7c:5f:69:81:63:ea:
                    3e:ed:9d:18:3c:6b:6f:1d:d9:49:a3:19:24:e7:94:
                    c2:d1:3a:d8:fc:0d:0b:f8:25:9f:8e:84:e0:56:f8:
                    b5:7d:34:b9:c6:83:57:c4:15:87:d4:67:7a:4c:98:
                    30:f0:a3:07:e7:bb:71:86:e9:19:c4:55:0b:ec:61:
                    48:00:18:31:29:b5:96:d8:4d:ac:92:47:85:cb:16:
                    91:c4:ad:e7:3d:9f:8d:95:f4:75:9f:fa:ac:e8:dc:
                    6d:92:99:f9:73:f9:94:07:48:c1:e9:ae:07:58:0c:
                    0c:69:cd:22:e2:9b:09:1b:74:d8:86:d8:43:6a:7d:
                    66:17:e2:5e:69:cf:e8:b6:d2:00:74:70:33:b6:51:
                    58:7c:bb:31:6e:c3:86:ef:5d:d6:30:e1:4c:b5:c1:
                    6c:4b:a7:df:e8:7c:58:f9:db:91:f1:2c:e1:2c:06:
                    a4:b2:b0:0d:c4:b8:83:d3:40:42:b3:e4:b3:56:2c:
                    98:52:16:78:dd:6a:4e:2f:2e:9c:6b:3c:ff:a0:f5:
                    b1:3f:a2:8f:aa:ca:40:fd:28:69:76:ee:f0:c0:9b:
                    1b:34:1c:f4:dc:41:d6:12:08:15:95:b0:dd:e2:0f:
                    58:16:0e:15:f8:e7:98:d9:15:a2:2a:2f:0d:c5:2c:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:32:4E:E8:83:99:4B:28:D2:0A:D6:8A:CA:C4:ED:46:3D:9D:E9:DF
            X509v3 Authority Key Identifier:
                keyid:9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:10:cc:ba:b2:73:84:a0:44:61:d2:28:4b:94:c8:bc:2d:
         8e:7e:2d:01:f6:ff:3b:19:69:43:8d:25:ca:4d:5b:81:a3:df:
         1a:3f:2e:f2:16:ef:9a:89:27:ff:ef:2f:29:10:3a:3d:de:73:
         d8:4c:86:ad:bb:f7:28:3e:04:07:29:f7:fb:00:70:e2:6f:f7:
         e6:b3:32:de:c3:28:28:52:33:c8:77:ff:4e:ae:33:3c:51:29:
         65:11:99:01:8c:cc:46:ed:b7:a1:1c:74:a1:93:09:d6:a8:60:
         5b:47:c8:0f:64:ce:c9:0d:cb:74:41:16:cc:d7:67:cc:ff:72:
         f4:7d:95:b6:1a:7e:b2:d6:71:82:a4:76:b7:41:1e:db:20:5a:
         17:1e:69:94:a5:b7:f7:f8:f9:b4:38:ef:14:3b:00:dd:59:43:
         93:83:5a:aa:19:26:df:8c:11:bd:e8:7f:76:e5:29:e7:d4:29:
         7d:9b:c7:06:81:e5:20:b0:f4:44:66:92:de:4e:cc:28:80:38:
         c7:94:67:7a:17:c5:f3:6c:cf:9e:dc:69:17:17:33:35:2a:3d:
         80:ca:c8:64:b7:2c:88:27:15:40:57:24:13:b6:45:ee:16:1f:
         f5:20:d1:fc:85:eb:f4:91:05:65:a1:7b:22:e1:2a:3e:0b:8f:
         bd:a3:bc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:39:44 2025 by rpki-client