Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File:                     plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier:          S4mVc9c+dw6P/gU4BwdcbSzh+1EmYkiGYaRemfxfVtM=
Subject key identifier:   E7:5B:79:28:C2:74:9C:67:3E:D3:F2:71:45:B2:4F:4A:3C:2F:05:01
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer:       /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial:       019659148A1BAB3D0B4275D29541274CFC3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number:          09D7
Signing time:             Mon 21 Apr 2025 16:00:40 +0000
Manifest this update:     Mon 21 Apr 2025 16:00:40 +0000
Manifest next update:     Tue 22 Apr 2025 16:00:40 +0000
Files and hashes:         1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: glOEbFkuEiNyX51ujz1s+IDnLdDOZzosvDaigABJweg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 13:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:14:8a:1b:ab:3d:0b:42:75:d2:95:41:27:4c:fc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
        Validity
            Not Before: Apr 21 16:00:40 2025 GMT
            Not After : Apr 22 16:00:40 2025 GMT
        Subject: CN=e75b7928c2749c673ed3f27145b24f4a3c2f0501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:81:86:7a:c9:7f:4f:04:f9:f1:5b:1a:09:
                    dc:53:0d:b6:44:b2:e9:bf:95:04:ac:d5:66:77:d1:
                    61:ea:70:dd:c6:71:1b:f1:d4:78:1c:75:f8:85:56:
                    b2:67:ff:89:a5:58:0a:ae:2d:85:70:3f:57:eb:9a:
                    9a:03:f0:a9:2c:5d:e8:ec:70:84:ad:31:bd:fd:e9:
                    3b:ac:cc:d2:55:7c:b9:b3:2f:ab:44:e3:9e:04:fb:
                    eb:e4:34:c1:15:39:c5:42:6d:66:eb:9b:4d:c0:93:
                    ff:54:20:de:7a:c2:b4:01:1c:6e:a7:bf:58:3d:91:
                    ac:58:98:12:93:e3:71:f3:0b:32:2e:42:c4:7f:53:
                    09:82:d3:a3:ac:7c:37:44:af:e5:67:d8:59:a7:45:
                    ef:34:fb:6a:58:a7:2c:06:72:2b:e5:d9:3b:94:1c:
                    83:a9:c9:a3:7e:a0:0d:ad:c1:75:c4:d5:b3:26:75:
                    1b:68:77:a5:2e:77:ef:cd:0d:41:85:f7:d7:8f:8b:
                    67:7a:e3:6b:52:8e:18:f7:7c:77:26:88:08:a9:0a:
                    a7:ce:ac:4d:b4:f6:56:52:1f:3d:78:9e:82:80:67:
                    9e:a2:ac:41:9d:83:9b:61:a8:70:96:0f:fc:8c:90:
                    d2:2e:7b:16:80:9a:db:b7:c3:8e:77:74:58:c4:8a:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5B:79:28:C2:74:9C:67:3E:D3:F2:71:45:B2:4F:4A:3C:2F:05:01
            X509v3 Authority Key Identifier:
                keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d4:e3:98:5a:61:78:33:63:28:73:6b:21:cf:88:e7:f1:e6:
         40:1c:39:c9:5a:b0:e0:61:9f:62:59:c8:4e:24:a7:ff:3f:82:
         ab:e8:8c:d6:b5:1e:91:1b:e8:4c:b3:ef:64:80:26:1d:57:71:
         b2:90:17:45:87:ea:e7:1d:e4:31:11:08:b7:41:6b:9b:6c:6b:
         75:d1:3b:b8:4d:67:d5:13:97:26:58:2c:9a:10:f1:7b:12:e7:
         63:06:94:e7:55:56:99:4d:4e:d2:28:f3:2f:03:0e:d3:ec:f0:
         4c:fb:33:e3:99:10:7e:cd:1b:27:15:d5:76:04:7d:63:e1:06:
         73:9c:1c:5f:6e:d1:f4:52:71:d0:3d:0e:15:0a:85:08:83:1e:
         37:33:86:af:de:54:d6:9c:0a:2a:ec:c5:b6:ac:3e:9c:a2:3a:
         fb:79:4c:16:41:04:3a:bc:da:88:fc:d5:f3:29:f7:91:ae:af:
         d6:0c:00:d4:b0:a3:ac:76:5b:0d:72:16:3e:71:66:30:4b:a8:
         14:fc:51:02:26:be:17:08:36:4f:09:ce:c1:93:50:82:89:72:
         70:ba:b5:62:f0:e9:53:69:b9:35:6a:b2:3f:6c:af:38:00:c3:
         de:ef:61:65:a5:96:2d:26:1a:a8:96:9f:79:c5:3d:ef:bf:db:
         70:bf:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:56 2025 by rpki-client