Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
File:                     c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json)
Hash identifier:          Zt14+YzZ6/pYSlAf1pdLsZ6V6llK7bC5ecMEvf/sDeA=
Subject key identifier:   CB:F9:68:69:06:65:56:54:E4:1E:A8:C5:A4:05:14:7F:0E:58:24:5C
Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
Certificate issuer:       /CN=73460461f9c49eb917c1911580ba0e4432c12557
Certificate serial:       0195903D9FB432A57833DB9E36460C6E1546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
Manifest number:          0536
Signing time:             Thu 13 Mar 2025 16:01:52 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:52 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:52 +0000
Files and hashes:         1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: vPa2mcMRXeBxDIrxc+0QDKPsFoQpeD4hJPMhI/VF1vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:9f:b4:32:a5:78:33:db:9e:36:46:0c:6e:15:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557
        Validity
            Not Before: Mar 13 16:01:52 2025 GMT
            Not After : Mar 14 16:01:52 2025 GMT
        Subject: CN=cbf9686906655654e41ea8c5a405147f0e58245c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:e7:1c:b6:6c:f1:25:17:fd:57:93:91:9e:
                    26:27:62:bf:75:a6:a0:7b:dd:8b:33:80:d5:0c:d8:
                    b0:f4:76:8b:28:fe:c3:41:4c:53:37:eb:08:e8:96:
                    4c:a6:5b:c3:a2:84:e9:8b:dd:3b:be:99:2f:c0:1a:
                    17:ce:69:8f:f9:2c:e9:03:f5:d0:58:6d:9e:be:e1:
                    51:f8:3b:45:10:b4:48:b1:56:db:58:85:45:5e:78:
                    df:6a:a7:5b:94:02:e6:71:31:e6:4a:dd:15:0f:8a:
                    a3:21:80:c6:2a:46:b6:41:f4:06:a0:a2:cd:b9:eb:
                    69:64:9d:64:d8:0b:31:f3:d2:ee:25:87:75:0b:56:
                    62:5b:50:2f:d9:71:2b:81:b4:a2:d7:cb:6e:24:cd:
                    b8:5d:0c:83:fb:f9:e6:ef:59:ae:d9:4a:bb:fb:15:
                    d7:f8:8b:8e:9d:09:22:3c:e5:1b:9f:76:52:97:1b:
                    dc:ee:35:c1:d2:a1:b9:f5:d7:54:2f:a3:e8:5d:11:
                    ed:03:d2:13:d3:bd:79:38:60:78:f3:cd:22:ad:c8:
                    88:c6:ca:44:77:e8:88:e7:eb:cf:f5:10:67:ad:22:
                    15:9e:4e:f8:a1:e2:81:50:22:32:2f:80:4c:fd:90:
                    36:1e:79:b7:46:23:a4:6f:d0:d2:b5:a6:81:33:d4:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:68:69:06:65:56:54:E4:1E:A8:C5:A4:05:14:7F:0E:58:24:5C
            X509v3 Authority Key Identifier:
                keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b9:84:4d:a5:84:87:68:45:49:ab:d9:21:c2:01:32:01:c7:
         08:3d:80:67:d1:9d:64:4d:29:d2:11:4c:35:ee:9a:4e:f0:9b:
         96:a7:5e:6f:1b:4a:a7:ac:56:50:ac:79:7d:be:a5:86:82:36:
         27:b4:d3:6a:c7:04:85:33:fe:df:9c:06:80:26:c2:ec:69:f7:
         ab:78:67:bb:dc:d3:9c:8d:64:fd:ba:ad:2f:51:c9:48:c1:70:
         e9:2e:76:a7:52:f1:2d:82:27:5c:1f:ba:14:8d:85:e4:35:e1:
         4b:73:fa:2d:56:93:b8:44:cb:5a:c4:88:8a:c8:af:b3:5b:b8:
         44:e2:e0:a4:5a:21:77:aa:56:d5:2a:c5:07:a9:c7:95:44:72:
         56:bf:0c:52:51:62:4e:f7:76:7d:71:ce:65:97:b6:1c:d1:27:
         54:c2:c4:13:2a:d5:f4:50:31:51:0c:d7:a7:ed:77:2b:9b:95:
         db:55:ea:4c:ad:8c:de:66:4b:2a:60:64:33:d7:dc:e1:d0:b3:
         f4:72:b9:4f:d3:87:06:05:4f:72:02:51:28:91:a7:b3:fe:b6:
         82:84:c1:af:b6:22:77:c0:55:d0:a2:c2:f2:98:a6:32:48:79:
         db:59:1e:d7:49:fe:e3:64:81:9b:5a:32:c6:98:66:d7:13:48:
         5c:1b:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:35 2025 by rpki-client