Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft
File:                     ft5NBeOAZYGxt49yG1uAzEkCvZI.mft (raw, json)
Hash identifier:          WkJyzrVE+pbyWs9UXR97Q3adtj4d/EaX8dHzJfMW5lY=
Subject key identifier:   B4:BC:F1:69:22:50:CF:67:15:C2:57:60:10:F7:B3:73:CC:FF:C8:9B
Authority key identifier: 7E:DE:4D:05:E3:80:65:81:B1:B7:8F:72:1B:5B:80:CC:49:02:BD:92
Certificate issuer:       /CN=7ede4d05e3806581b1b78f721b5b80cc4902bd92
Certificate serial:       01957910B88D89A27E3244835A03CFD0D0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ft5NBeOAZYGxt49yG1uAzEkCvZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft
Manifest number:          0422
Signing time:             Sun 09 Mar 2025 04:01:33 +0000
Manifest this update:     Sun 09 Mar 2025 04:01:33 +0000
Manifest next update:     Mon 10 Mar 2025 04:01:33 +0000
Files and hashes:         1: ft5NBeOAZYGxt49yG1uAzEkCvZI.crl (hash: /q8PeOekwniFr8mh8RsyRHyajPMWXwwZUspXsmXNaNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ft5NBeOAZYGxt49yG1uAzEkCvZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Mar 2025 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:79:10:b8:8d:89:a2:7e:32:44:83:5a:03:cf:d0:d0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede4d05e3806581b1b78f721b5b80cc4902bd92
        Validity
            Not Before: Mar  9 04:01:33 2025 GMT
            Not After : Mar 10 04:01:33 2025 GMT
        Subject: CN=b4bcf1692250cf6715c2576010f7b373ccffc89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:48:61:9e:a6:e5:45:60:cd:9a:40:81:56:
                    02:0e:e0:df:21:2e:05:6c:30:4c:4f:16:4b:f1:89:
                    97:6d:cc:8a:97:19:d9:eb:87:c9:b9:ff:6d:5a:2f:
                    30:84:57:10:d5:00:a1:01:2d:bb:92:07:d0:f3:ba:
                    27:2e:2e:7d:82:28:fa:f7:17:04:3e:e4:1b:e6:c7:
                    0f:62:ba:dc:be:d0:e9:6b:66:ba:49:18:94:6d:e1:
                    e0:0c:36:eb:c4:55:fc:3c:7c:14:fa:c1:92:89:a2:
                    7a:30:42:50:10:00:44:42:95:17:f8:23:c8:dc:e5:
                    f7:1c:3a:52:15:18:19:5d:da:23:f4:f8:1a:52:20:
                    1b:06:87:5e:93:1b:4b:23:ec:ef:0b:63:06:a9:61:
                    f9:89:00:f3:6d:80:09:ae:9d:fb:47:8a:e9:cf:f2:
                    f0:80:22:71:39:c4:b1:2e:a5:c1:43:eb:6d:6b:c3:
                    1e:3a:06:45:b2:82:ab:fa:ee:2c:33:ba:22:9c:7e:
                    6d:c8:88:15:f8:68:ab:4b:29:bd:f7:84:e3:1d:94:
                    b0:5c:f8:03:75:9d:9f:af:42:d0:b4:76:d5:5a:28:
                    21:c0:61:75:6a:c3:62:1b:7a:a8:58:62:98:ef:14:
                    12:a8:f5:13:01:34:72:72:ad:37:c8:e3:43:83:61:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BC:F1:69:22:50:CF:67:15:C2:57:60:10:F7:B3:73:CC:FF:C8:9B
            X509v3 Authority Key Identifier:
                keyid:7E:DE:4D:05:E3:80:65:81:B1:B7:8F:72:1B:5B:80:CC:49:02:BD:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft5NBeOAZYGxt49yG1uAzEkCvZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:87:3e:05:cd:07:e2:3a:60:52:9b:0b:fa:63:c0:37:25:51:
         e0:20:60:13:d9:a0:1b:5e:43:c4:d1:8a:8e:a6:5a:b0:f1:5f:
         d2:5f:58:be:33:f9:61:7b:2c:e0:57:90:6e:1f:21:cb:7e:1a:
         8b:e7:3f:7e:aa:3b:e4:fc:ba:e0:66:17:f4:54:4c:5d:44:70:
         59:53:19:b6:a8:57:24:e9:c7:b4:39:8e:74:a6:de:0c:30:f3:
         83:6c:e3:f6:f2:6f:e8:28:a9:a4:c1:45:e4:54:46:04:90:38:
         07:81:0c:ba:e7:16:c6:f8:e7:29:56:e4:ba:f7:7f:21:c0:ca:
         7d:d9:ce:ad:72:54:18:59:9f:63:1c:73:f1:8e:68:7b:70:a0:
         73:93:86:c1:13:03:58:0c:28:04:85:7c:ea:48:73:36:b2:68:
         02:52:5e:9e:20:c1:cd:36:e3:bc:42:ee:10:09:6f:1e:c1:d7:
         55:24:67:e7:55:82:06:c6:81:23:06:51:2a:52:05:c3:be:49:
         93:27:49:13:78:58:d8:45:3d:24:2b:59:58:6e:31:a8:e6:34:
         be:cd:37:1b:af:29:eb:05:5c:e2:6a:d0:49:f6:4a:02:02:c6:
         35:0d:c1:2a:f0:d4:ac:5b:68:15:57:e0:eb:12:d9:c9:94:9d:
         e6:a0:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 07:16:55 2025 by rpki-client