Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File:                     r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier:          pnfwu3dKgECgLL8vHW1XIy/udRMV6cUxKos1kM77Dmk=
Subject key identifier:   C9:B9:82:68:6B:11:04:17:6E:A8:08:1B:B0:7F:F5:3D:91:EA:8E:22
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer:       /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial:       019610571CD4D0FD1BCD148EF0957CAA2B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number:          0BBF
Signing time:             Mon 07 Apr 2025 13:01:06 +0000
Manifest this update:     Mon 07 Apr 2025 13:01:06 +0000
Manifest next update:     Tue 08 Apr 2025 13:01:06 +0000
Files and hashes:         1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: +am1hWRUlYCLzDcEn32BPYICkKlC7MqpChEVgXoIEyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:57:1c:d4:d0:fd:1b:cd:14:8e:f0:95:7c:aa:2b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
        Validity
            Not Before: Apr  7 13:01:06 2025 GMT
            Not After : Apr  8 13:01:06 2025 GMT
        Subject: CN=c9b982686b1104176ea8081bb07ff53d91ea8e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:31:48:31:7a:bd:cb:e4:c1:fe:14:70:85:
                    7a:37:98:04:19:55:a0:a8:a0:11:03:51:43:ba:f2:
                    f6:e8:fe:10:3f:bc:14:96:a7:61:42:80:f5:c2:31:
                    d1:66:a8:d5:05:04:62:42:70:e5:fc:24:11:a5:fb:
                    44:ff:83:39:83:59:87:95:1b:23:49:89:81:0c:5f:
                    51:66:6a:f5:61:c5:ca:0b:dd:f1:ce:cc:21:fa:e3:
                    28:22:d5:c9:b0:5d:61:a8:98:02:94:19:42:37:ec:
                    2a:50:62:ba:30:ad:3e:ec:bd:46:af:b6:de:79:50:
                    aa:8d:2e:b9:91:17:b5:46:79:18:dd:1b:f1:32:af:
                    e9:b6:ca:21:67:b6:61:3c:88:19:43:e6:a3:22:82:
                    90:c8:95:04:73:1d:fa:7d:d9:3c:71:99:f4:02:b0:
                    a7:ae:27:8d:70:fd:3f:cc:54:78:16:88:b9:f1:3b:
                    eb:7c:b1:47:03:29:58:47:0e:11:3c:4d:a1:2b:f5:
                    19:72:53:bd:d1:7f:34:0c:af:07:63:e4:bd:0c:bd:
                    7c:63:6f:7a:93:ab:9f:33:6d:ce:96:53:06:8f:6c:
                    3d:8f:66:20:a5:fa:3a:93:5c:e1:5e:f5:59:e7:8e:
                    aa:ac:ce:fb:4c:bc:8f:fa:fb:69:b2:82:c0:31:b3:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B9:82:68:6B:11:04:17:6E:A8:08:1B:B0:7F:F5:3D:91:EA:8E:22
            X509v3 Authority Key Identifier:
                keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:79:ab:d4:bf:c3:b7:a5:ac:1f:78:81:b8:a1:bb:37:e6:47:
         da:15:4a:30:e6:ba:61:00:ec:bb:4d:85:d9:eb:ba:aa:9f:e7:
         ba:ff:2b:5a:a0:80:ca:19:21:aa:33:e5:73:b3:a8:c8:f1:c7:
         16:ce:23:2d:85:87:c5:25:c9:8d:ba:73:ba:25:48:43:4e:fc:
         51:4c:e0:50:d3:06:38:a7:e9:d3:6a:3c:fd:2d:9c:db:c1:1e:
         0d:0e:f7:85:67:ef:69:60:8e:b4:bc:88:dd:42:d5:46:42:63:
         43:44:b6:d6:08:f0:b6:a3:24:06:c1:44:62:47:14:33:90:51:
         a8:53:ab:5b:47:2b:9a:e3:20:3a:b6:97:cd:0d:9f:d2:a7:34:
         68:d6:cf:ee:84:7e:fe:02:9c:c4:5a:61:15:ad:77:dc:fc:88:
         d2:25:bf:7f:c4:7c:61:87:a6:03:8b:3f:c4:32:b8:3e:56:fd:
         e4:db:ca:f3:6c:a1:e8:e0:3f:97:78:fa:4f:3c:fe:03:84:ec:
         0d:de:3d:40:fd:9e:24:ce:4b:3b:89:c7:d9:7e:e8:d8:25:f2:
         3e:57:f2:01:35:9e:d8:76:26:d1:ce:fa:2a:75:27:a8:d3:6c:
         ea:43:7f:a7:de:97:25:11:7e:69:17:29:99:fd:2f:f3:5c:5a:
         8a:81:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:10 2025 by rpki-client