Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File:                     SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier:          TZ9NCUP+roi/IquuYwlYfNfrSBjKThEh5s4LDTn9H90=
Subject key identifier:   7C:4C:48:7D:63:4A:2C:33:35:B9:E9:EC:53:36:FD:9A:4C:FB:EB:F5
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer:       /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial:       0194C3F5D4C714F0167CAF807C4708C18DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number:          0B0E
Signing time:             Sun 02 Feb 2025 00:00:55 +0000
Manifest this update:     Sun 02 Feb 2025 00:00:55 +0000
Manifest next update:     Mon 03 Feb 2025 00:00:55 +0000
Files and hashes:         1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: MgGznDv7tpmGOZhtIutZ1bcqFvfdHYyrN2DLmiWZikA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f5:d4:c7:14:f0:16:7c:af:80:7c:47:08:c1:8d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
        Validity
            Not Before: Feb  2 00:00:55 2025 GMT
            Not After : Feb  3 00:00:55 2025 GMT
        Subject: CN=7c4c487d634a2c3335b9e9ec5336fd9a4cfbebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:09:42:31:5c:f9:89:47:1b:5b:47:00:01:
                    86:4c:fd:56:7b:b5:4b:05:65:8c:21:ac:65:49:15:
                    d4:9e:88:5c:e2:9c:e6:1f:87:8d:e3:f3:2c:f6:92:
                    9d:ed:a9:07:be:c2:0b:71:b6:83:9a:0b:16:cf:5c:
                    b1:e3:b8:6e:97:b9:34:25:66:e3:13:d4:c4:e5:99:
                    e7:1a:d0:5e:13:8e:e4:d7:79:1d:8c:0c:fa:39:83:
                    b1:d2:e5:2f:34:1c:0b:ef:6f:3c:95:1d:d6:3b:17:
                    b1:9a:49:76:b0:44:2a:65:33:0a:f4:f7:41:07:88:
                    0d:be:da:35:6d:a6:ef:fa:bd:1f:18:8b:25:dd:c6:
                    c2:8a:56:f9:ce:5c:42:a6:32:43:72:78:44:a6:f9:
                    18:17:a9:d4:31:ae:28:d4:da:1c:83:4e:74:0a:16:
                    8f:c4:cf:7c:90:57:df:5f:f3:4f:42:4d:6c:0f:7b:
                    22:30:a6:33:df:7a:4f:37:6f:1a:cc:c5:02:8f:86:
                    9f:00:30:37:68:69:76:4a:0e:47:00:33:84:31:e1:
                    4d:8b:6a:e7:11:5d:72:7b:b2:6e:0e:4b:48:0d:c2:
                    c1:c6:ca:6b:5f:87:1f:a8:90:52:11:49:7c:20:ee:
                    d4:08:92:e4:6e:41:2a:26:b7:a9:ef:57:67:1e:bc:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:48:7D:63:4A:2C:33:35:B9:E9:EC:53:36:FD:9A:4C:FB:EB:F5
            X509v3 Authority Key Identifier:
                keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:da:98:70:b8:e9:4e:57:b5:fc:04:0d:87:6e:eb:48:68:ee:
         59:8d:17:68:ce:14:b2:b7:93:9e:17:60:ff:a5:41:a9:7a:85:
         2a:b3:4e:33:2b:98:45:34:53:a0:31:7f:bb:fe:ef:e9:8a:7f:
         61:26:f1:92:9e:98:3c:4e:f0:7f:82:ec:8d:e0:ef:31:eb:dc:
         73:54:b3:10:36:74:84:99:28:37:86:cd:d0:2a:53:11:75:7c:
         47:d6:aa:bf:67:09:0e:f2:b8:5e:cd:23:ad:d6:80:c2:df:06:
         b4:f1:3e:69:98:a1:ee:fb:0b:5b:93:d3:4a:f0:b9:f0:2c:32:
         71:4e:f8:e7:c1:e2:a5:4c:ff:13:0c:1c:66:8b:72:05:c2:7a:
         fd:30:36:be:3f:b1:2f:10:e1:1b:56:80:20:c9:66:bc:f0:45:
         06:1d:34:6e:fd:9d:21:a7:96:a0:bf:7e:1b:dc:31:a7:c8:0b:
         42:fd:c6:19:0e:7c:75:84:0c:ea:d8:37:5d:09:90:02:78:6c:
         90:ee:ae:09:4a:af:41:57:6f:a2:ca:d0:2f:f3:8c:39:f0:fe:
         ae:4a:a4:85:48:e9:11:95:80:4c:0a:c9:96:ff:6b:44:72:ce:
         68:10:76:60:d7:d3:77:e9:e0:30:f7:c6:0a:5d:f5:9e:32:9a:
         e4:35:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:27 2025 by rpki-client