Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File:                     R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier:          DbWOBKY8LhQ6yw7b4eFYI0MGrypk22J3pLDU3EpcqRw=
Subject key identifier:   1D:34:34:50:D3:93:11:EE:90:FB:F8:37:4E:56:AF:2D:38:8D:63:5B
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer:       /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial:       01964E234208FADADEAE7AD9E9E37AE33BB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number:          11F1
Signing time:             Sat 19 Apr 2025 13:00:55 +0000
Manifest this update:     Sat 19 Apr 2025 13:00:55 +0000
Manifest next update:     Sun 20 Apr 2025 13:00:55 +0000
Files and hashes:         1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: UJ7PbBpOHHEPkOvHSd6pK0fOmSyeui8zb9vMGpe68zQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:23:42:08:fa:da:de:ae:7a:d9:e9:e3:7a:e3:3b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
        Validity
            Not Before: Apr 19 13:00:55 2025 GMT
            Not After : Apr 20 13:00:55 2025 GMT
        Subject: CN=1d343450d39311ee90fbf8374e56af2d388d635b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:d7:4f:ed:f4:8e:35:e2:3e:5f:76:af:c2:
                    7c:f2:d4:dc:28:d6:cd:42:52:c1:80:18:ec:6e:40:
                    82:c5:8e:49:d9:1a:7b:85:45:44:09:59:3f:39:31:
                    4a:a3:21:87:3d:08:cb:6c:c2:d9:2b:57:f7:1b:e6:
                    fd:3f:84:4b:07:2b:fa:99:5c:5c:64:36:40:55:b1:
                    79:f7:c8:58:9e:64:7f:0b:56:bb:24:f2:c7:52:51:
                    26:f7:e2:18:b5:17:73:c7:79:cc:5c:66:ce:5c:51:
                    36:f2:dd:89:00:c0:eb:42:59:58:66:0a:ae:d3:49:
                    b3:87:77:51:64:e2:17:52:90:5d:89:62:33:0e:31:
                    b8:c8:66:b2:98:a7:f2:d3:50:ca:a4:57:00:30:5b:
                    ea:2a:0d:de:92:80:5c:0b:ef:28:18:76:eb:1e:f7:
                    12:6e:cf:58:56:69:8e:c0:80:02:b9:bc:32:ed:e9:
                    98:86:96:ce:42:d2:9f:26:8c:f2:54:1a:7e:ac:bd:
                    6f:37:e7:4e:6f:cf:3f:0c:3b:ca:24:06:17:3e:9e:
                    57:54:3a:77:34:95:06:38:4d:f3:25:0e:4a:31:01:
                    d7:ae:14:38:c5:02:6d:c9:7b:96:21:3d:54:17:90:
                    4f:96:3e:ed:0d:80:94:f2:be:ec:71:b2:7c:86:21:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:34:34:50:D3:93:11:EE:90:FB:F8:37:4E:56:AF:2D:38:8D:63:5B
            X509v3 Authority Key Identifier:
                keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:45:14:70:e4:12:7a:38:b3:09:da:db:d9:a3:64:d2:1a:19:
         35:5d:65:f0:f1:b5:4a:c0:d1:70:98:b6:25:b2:a5:03:14:1f:
         82:72:ab:25:fd:48:90:41:a4:42:d1:45:8c:6f:d3:67:d9:74:
         89:3e:d0:46:c3:ed:f9:8e:3e:5e:13:82:0d:fa:11:e3:7e:17:
         74:23:ac:d6:9c:78:6d:8b:61:5f:2a:34:67:94:58:11:50:48:
         23:5f:b5:44:b8:eb:b8:ff:c6:14:3d:15:e8:f6:55:fc:1f:92:
         37:58:e2:8d:37:3f:9e:51:ee:65:6d:97:31:05:c2:55:39:0f:
         49:a9:0c:ed:3a:04:46:2d:84:b5:bd:65:bf:bc:ef:0d:9a:27:
         08:ba:f4:2f:1a:a1:56:9a:a2:6f:fe:a7:1f:2f:9e:ea:26:0d:
         52:2f:8b:8b:a8:40:bf:4e:32:14:fc:ab:21:07:54:ba:d1:8c:
         94:d6:42:32:e7:e6:4c:c4:03:4e:74:1c:ec:d1:1f:fa:be:84:
         6a:e5:c9:ee:70:bb:7b:7c:17:43:10:d6:36:b3:7e:fa:e2:79:
         85:9b:7b:c8:79:08:a7:59:06:47:fe:d0:1a:7e:de:ed:1a:f9:
         69:d4:ce:75:44:5a:0b:15:76:d6:0a:2b:f1:a0:49:62:dd:65:
         37:74:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:09:00 2025 by rpki-client