Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File:                     Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier:          /N3LEfyP3wloWWRNt/OZI2YZtN4Tk5jmIBGp0evKbBc=
Subject key identifier:   E9:FE:1A:F3:D6:21:FE:25:DF:44:CA:A6:40:0E:95:DD:D6:BB:9D:96
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer:       /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial:       01964D1063F3D2012CFDECF32924246FF780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number:          0366
Signing time:             Sat 19 Apr 2025 08:00:41 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:41 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:41 +0000
Files and hashes:         1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: ySRG70OeVw1B0foG3D4ZyUUri7RRvbVJtyStSiRl8R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:63:f3:d2:01:2c:fd:ec:f3:29:24:24:6f:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
        Validity
            Not Before: Apr 19 08:00:41 2025 GMT
            Not After : Apr 20 08:00:41 2025 GMT
        Subject: CN=e9fe1af3d621fe25df44caa6400e95ddd6bb9d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:95:b1:9c:76:1c:ae:db:e0:dc:c1:38:94:
                    25:73:da:9c:e6:35:7e:3c:e1:0a:96:0a:98:0b:1e:
                    b3:d6:40:41:5c:24:2c:27:19:ff:6a:65:10:1b:b8:
                    3e:13:e0:9d:2c:c1:36:80:81:ba:f6:7a:8b:53:f1:
                    d9:a7:25:13:00:dd:4c:90:1d:a0:aa:e9:d5:75:2e:
                    9b:fb:68:4c:87:c8:61:a5:b6:14:08:b7:9a:e7:07:
                    bb:d7:61:f6:c4:56:70:ee:25:c0:ea:6b:40:9a:ca:
                    10:27:d8:50:3a:66:c0:0e:09:34:d3:27:48:bd:60:
                    82:51:73:12:d3:fb:98:8e:5b:d9:26:dc:0b:9d:87:
                    f4:74:95:90:a2:4f:1a:d6:ce:5f:73:94:70:78:38:
                    4b:28:17:c1:8c:a5:2c:09:cf:2f:e4:cd:b1:77:ec:
                    80:ba:b3:ee:c3:f2:8a:3b:a5:2c:14:30:df:f3:28:
                    8e:91:7f:c3:da:8c:5e:4d:f2:8d:85:1f:24:d0:3c:
                    7d:d3:b6:72:6f:3a:24:05:5c:b5:f8:4d:b2:13:0a:
                    f7:54:f5:68:60:3d:56:86:94:12:7d:c6:eb:83:8e:
                    2a:81:30:98:82:f0:35:d8:87:98:01:c0:d3:cc:33:
                    d7:cd:e8:b2:4d:43:3c:7f:1c:23:50:a4:8f:a9:68:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:1A:F3:D6:21:FE:25:DF:44:CA:A6:40:0E:95:DD:D6:BB:9D:96
            X509v3 Authority Key Identifier:
                keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:82:70:bc:79:00:17:9f:b4:27:0f:09:b4:91:64:33:64:b1:
         27:e6:6a:5c:60:4f:bd:e2:2b:b8:16:10:6b:c9:c9:f6:41:df:
         fb:a8:71:93:60:7f:1b:b8:cc:11:8d:44:b0:43:52:b2:6d:6d:
         49:11:4f:07:70:69:ff:f0:46:17:88:a9:e2:0c:d0:71:26:02:
         14:61:3e:f7:2d:ae:9a:c0:60:e9:b6:8a:ee:29:27:6f:af:b6:
         d8:90:1a:8b:84:a8:92:62:52:43:b9:29:75:aa:6f:be:43:20:
         f4:6a:4e:76:c8:37:22:86:ff:70:15:ba:bc:59:59:9a:f3:9e:
         79:5e:ed:20:6f:35:27:35:f4:8a:b1:88:50:db:2c:0e:9d:7f:
         c4:a1:31:07:f0:24:c1:97:22:13:0f:42:77:16:83:9e:69:9c:
         dc:42:27:57:04:5c:f3:ca:d6:5a:88:0c:2f:47:b1:91:43:fd:
         96:ba:df:63:27:ff:a2:f4:38:d8:8c:26:79:04:d4:d3:83:6f:
         d9:0a:bf:99:0a:9f:63:21:85:55:f1:45:b9:e6:34:9b:74:8f:
         20:23:47:82:5f:91:32:87:be:df:8c:6f:65:e3:c2:c9:37:bc:
         44:40:80:71:47:4b:c2:ed:c8:bd:e3:96:80:1e:c3:e9:b6:0e:
         5a:06:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:16 2025 by rpki-client