Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
File:                     t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json)
Hash identifier:          lcySCQK/mC+f2PQXnbOlsmPsIvozuFflhG4H2Mg5v6g=
Subject key identifier:   02:8E:E5:D6:93:2F:D1:5F:AF:6A:CB:40:A9:EE:E5:72:66:A7:FC:B4
Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
Certificate issuer:       /CN=b76cbf5927c476905feda34e1140148bf805d9b0
Certificate serial:       01962CAA3AA3D5D7DBF15197F61ED9DE7CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 01:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 01:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 01:01:15 +0000
Files and hashes:         1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: dhMXsbQtJKU9yUVzSo099fSqp3wwevtt2PCTgOkJylc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:aa:3a:a3:d5:d7:db:f1:51:97:f6:1e:d9:de:7c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0
        Validity
            Not Before: Apr 13 01:01:15 2025 GMT
            Not After : Apr 14 01:01:15 2025 GMT
        Subject: CN=028ee5d6932fd15faf6acb40a9eee57266a7fcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:a9:00:a9:cf:ca:5c:9b:4d:01:c2:7a:81:
                    26:8e:c3:c8:d4:19:b9:ce:63:ee:cc:43:99:6b:f0:
                    0f:bf:d6:95:a7:09:79:06:26:d7:2c:37:1c:64:19:
                    20:0c:6e:fb:11:cf:fd:7c:ba:ec:45:93:38:4a:62:
                    4a:c3:fb:2a:24:72:d0:c2:b4:6d:e4:78:0c:e8:10:
                    85:c8:67:f4:5a:63:b0:c2:8f:65:1e:e3:bc:e8:f2:
                    86:22:e0:37:0c:26:a3:25:f3:a4:fe:9f:4a:4f:48:
                    12:c4:56:37:94:72:e5:26:a5:f9:66:49:4e:39:75:
                    66:c3:9a:c1:be:45:da:ff:65:7c:d5:cb:44:57:2b:
                    c4:61:47:51:1a:ed:51:af:25:27:3c:74:ad:a4:7b:
                    d2:31:a3:38:0a:e1:b7:41:d2:d4:97:48:05:fd:e6:
                    6b:4f:c1:10:f5:fa:90:d3:56:8c:33:c7:ff:ae:a3:
                    c9:7b:f9:f9:96:00:97:56:3c:47:64:ff:dc:6d:2d:
                    aa:c9:ee:7c:c1:48:03:08:70:f2:5e:ec:fe:ce:b0:
                    48:26:c0:cc:8c:57:0d:5f:57:bd:cf:af:5e:da:9e:
                    09:8b:1c:c2:dd:b8:01:11:ce:88:bf:1d:45:7f:10:
                    2f:04:35:8c:0e:5f:c2:83:93:d6:50:f5:e5:0f:ba:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8E:E5:D6:93:2F:D1:5F:AF:6A:CB:40:A9:EE:E5:72:66:A7:FC:B4
            X509v3 Authority Key Identifier:
                keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:05:56:b9:8b:47:2f:51:ce:bd:2e:42:0d:67:c2:de:97:
         39:fd:8d:f6:aa:27:db:5a:06:38:2f:6c:ae:54:15:27:d1:f6:
         42:0d:28:28:42:e1:e2:a6:a3:9e:3a:22:21:5c:aa:49:cf:2e:
         f5:b6:a3:de:a2:04:55:b8:9a:86:4a:ff:ce:57:3b:89:fd:16:
         91:4a:7e:5e:4c:0e:f5:b2:d7:12:6e:30:75:e7:63:3c:91:59:
         fc:87:22:37:50:d0:9a:7e:a6:6c:88:9c:3e:a8:28:33:85:36:
         2a:73:67:84:03:0c:2c:3a:c9:de:3c:75:65:e1:c9:ac:cc:6f:
         4e:bf:ed:12:31:5c:e7:b3:0b:35:88:86:6f:72:1d:f0:dd:9e:
         90:34:58:11:86:e2:2c:ff:c8:85:42:cd:dc:ac:bc:bc:79:08:
         a9:06:d0:8b:f0:69:27:de:f3:8c:ab:6c:d1:9c:b9:e8:cf:10:
         aa:de:80:40:ca:cc:a1:0b:b3:75:f0:e0:57:fd:ef:b6:5a:bb:
         bc:ae:8c:29:dd:c3:34:d9:58:1e:a8:47:cd:86:87:e8:d1:0e:
         75:e1:67:b9:2c:9a:dd:a5:98:de:45:5c:d2:c6:7d:f4:d2:14:
         4d:d8:3f:37:d8:67:ed:76:34:30:cc:af:f2:ad:2d:47:b0:24:
         3c:db:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:00:02 2025 by rpki-client