Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File:                     pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier:          r92DtS2IU3d8WsUOka9pWAH05afFCSduK9lQqdM6PR8=
Subject key identifier:   76:86:F9:7B:68:B5:B5:29:76:15:DE:67:31:1A:00:15:EC:3E:EE:90
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer:       /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial:       01963F545CF7D08B41C0DBE6733BA846754C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number:          049A
Signing time:             Wed 16 Apr 2025 16:00:15 +0000
Manifest this update:     Wed 16 Apr 2025 16:00:15 +0000
Manifest next update:     Thu 17 Apr 2025 16:00:15 +0000
Files and hashes:         1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: PJCb6pQQ7IyLi92ANMtgCM2LXgrbj/Hrg7JmAuj0Hus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:54:5c:f7:d0:8b:41:c0:db:e6:73:3b:a8:46:75:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
        Validity
            Not Before: Apr 16 16:00:15 2025 GMT
            Not After : Apr 17 16:00:15 2025 GMT
        Subject: CN=7686f97b68b5b5297615de67311a0015ec3eee90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:1e:ee:3c:93:2e:7d:95:98:38:9f:9e:37:
                    28:e7:e7:ed:13:7d:65:76:75:8b:a4:ea:4b:ef:05:
                    d0:f6:8b:6a:16:ea:d4:95:33:fd:cc:7b:9d:77:c8:
                    8e:f7:5a:5c:18:c1:8c:3f:5b:d7:bb:db:6e:76:5b:
                    f1:ec:10:de:4e:7a:0a:ea:ff:bb:5a:bc:8e:93:72:
                    33:6d:72:2c:64:68:be:3f:08:2b:13:2e:92:58:cd:
                    0c:b5:b9:5f:ef:7d:a4:47:d2:0e:74:95:ef:f6:be:
                    4e:8c:ea:4a:39:62:2e:43:4e:e2:5a:f0:02:6a:d9:
                    1c:c4:44:76:ac:32:85:75:b8:c2:ed:71:6f:da:70:
                    d5:30:46:15:a7:0e:14:09:7f:eb:11:08:c8:05:26:
                    27:c1:c5:47:f1:c0:02:8b:83:ed:8f:15:1c:2c:13:
                    5d:4d:dd:24:71:df:20:31:49:15:f2:5f:88:20:d9:
                    5e:47:0e:cd:28:e8:3e:f3:bb:b1:9a:28:0b:2c:ef:
                    41:36:c1:0b:25:b0:84:fa:4f:2d:30:38:79:bb:10:
                    9a:8a:80:b6:e8:ff:4a:a7:b3:73:20:4f:72:15:00:
                    f9:9b:78:f1:68:e8:c9:aa:92:08:b1:66:f5:e5:9a:
                    b7:b1:44:d4:68:da:50:4e:db:76:84:14:3b:e2:bb:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:86:F9:7B:68:B5:B5:29:76:15:DE:67:31:1A:00:15:EC:3E:EE:90
            X509v3 Authority Key Identifier:
                keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:18:07:d2:13:71:95:80:7c:b7:7e:1e:1a:7d:23:e3:29:
         92:cc:b4:9e:2c:ae:9b:97:4a:d5:ed:51:4a:98:ea:41:de:eb:
         e1:88:81:90:df:ae:99:7f:70:32:e1:a0:42:32:f0:97:78:4f:
         67:52:c9:57:c4:65:88:71:ca:da:bf:1d:08:5d:ff:f4:3e:c7:
         d3:71:0d:02:22:d1:89:2d:90:c7:9a:b7:8e:c4:22:5a:2c:e2:
         33:ca:d2:95:b3:c2:c6:38:4f:ec:be:31:84:ae:9b:58:2f:4b:
         6b:7c:3b:9e:f8:7d:9a:f9:63:4f:39:15:bf:2f:1a:16:11:90:
         b0:c0:87:a0:0c:e6:e2:c3:59:40:9d:53:76:72:11:55:e1:a6:
         be:13:a0:71:78:ba:f0:38:4e:61:67:77:aa:b7:ef:90:6a:90:
         7c:8f:26:27:f6:96:24:53:f1:bd:a3:e8:42:c3:1b:bb:97:e1:
         78:83:ae:14:35:05:ce:3b:3c:94:5e:10:db:72:20:0b:d0:35:
         f5:44:65:59:e3:dc:4a:b7:bb:98:28:99:14:57:7e:eb:31:65:
         c2:a3:0e:59:20:09:f5:15:28:07:db:ae:48:ec:a1:a4:1f:4c:
         69:21:55:52:8c:e6:11:af:4c:22:e9:7c:ec:d8:04:50:20:f3:
         46:01:4a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:10:33 2025 by rpki-client