Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
File:                     9j_pwTQEHOvaVoufkI4q7zirf3U.mft (raw, json)
Hash identifier:          u3HsFSOrJVEinNJmhTrT/9yTDMESiqm6Jgu85/iGTHQ=
Subject key identifier:   C1:EA:AC:97:5E:31:3E:BD:D6:7A:81:7B:C0:5E:6D:DE:61:9C:7A:BF
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Certificate issuer:       /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial:       019649A14A737635ABFC41CD2CF66CC1D32B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
Manifest number:          0B4C
Signing time:             Fri 18 Apr 2025 16:00:29 +0000
Manifest this update:     Fri 18 Apr 2025 16:00:29 +0000
Manifest next update:     Sat 19 Apr 2025 16:00:29 +0000
Files and hashes:         1: 9j_pwTQEHOvaVoufkI4q7zirf3U.crl (hash: xiDVvdkW1THUW5jRvjNatfXSzBQ8wB37fn6y5bzabtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:4a:73:76:35:ab:fc:41:cd:2c:f6:6c:c1:d3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
        Validity
            Not Before: Apr 18 16:00:29 2025 GMT
            Not After : Apr 19 16:00:29 2025 GMT
        Subject: CN=c1eaac975e313ebdd67a817bc05e6dde619c7abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:74:a2:a8:a7:8e:e3:58:02:65:c8:7a:14:
                    3a:87:a6:8b:c7:95:28:cb:66:25:ad:1f:a2:2f:00:
                    55:4d:dc:f9:ce:fe:12:2a:44:12:2a:c5:08:eb:c6:
                    e9:bd:ab:e1:18:a1:db:74:4c:b1:e5:73:dd:8e:96:
                    e6:f1:33:11:be:47:5d:ed:73:dc:af:98:33:28:b1:
                    50:43:11:34:1e:16:6e:e6:ad:94:dd:a7:6b:bb:c3:
                    c3:f2:e9:89:ad:7e:33:95:1d:bd:4a:67:4b:c4:82:
                    0b:21:33:ba:e6:1f:0a:fd:92:98:47:e7:49:8b:fe:
                    a7:c8:58:bf:58:5c:26:c2:01:a1:f0:24:2f:60:f3:
                    30:a5:46:3f:65:30:f1:42:41:55:47:31:e8:83:22:
                    b1:55:d4:2d:5c:d0:dc:11:ad:23:cb:ed:e0:6b:03:
                    7f:f7:5e:ea:db:b1:b7:ea:1b:8f:e7:8f:93:57:aa:
                    36:66:b3:89:76:e5:8f:19:3e:ac:81:be:b2:9d:93:
                    00:f9:c5:dd:ab:37:c1:30:f6:de:6b:77:e2:da:b1:
                    0a:93:6a:fa:3d:11:05:bd:b4:e8:32:0b:3d:b6:d0:
                    0f:cd:a0:6d:8d:6b:ec:91:26:6c:a3:91:15:c4:b8:
                    17:d7:ac:30:8c:63:b1:ba:82:7b:0c:85:99:31:91:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:AC:97:5E:31:3E:BD:D6:7A:81:7B:C0:5E:6D:DE:61:9C:7A:BF
            X509v3 Authority Key Identifier:
                keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2e:e1:94:c4:d2:5b:c4:dd:b6:fb:b8:1c:f4:0f:5a:77:94:
         0d:9f:63:7e:56:a1:69:42:64:ed:a2:81:6b:5a:b5:36:e0:8f:
         3c:75:e7:15:09:ce:8b:5a:de:4e:af:03:c9:33:d3:ff:a7:1d:
         28:d1:66:ec:63:f2:b2:da:ee:64:0e:4d:10:ef:18:1d:ed:5b:
         2d:9f:63:65:1a:92:ff:7b:64:6b:9d:f6:02:dc:8e:51:35:cc:
         5c:ec:be:b7:cb:da:e4:0e:8f:85:9a:4c:cf:a3:36:bf:f2:88:
         fc:03:e3:c7:d3:26:8f:da:e0:ea:4a:cf:42:cf:e1:73:66:0b:
         7e:6c:60:2f:f5:ff:3b:8d:14:03:a9:05:51:b9:92:46:82:3c:
         44:b1:df:12:65:42:14:72:b6:6a:fb:9c:6e:22:a3:87:96:07:
         57:ee:10:2d:ff:fc:8b:94:40:e3:09:21:e6:fb:92:2d:58:17:
         2c:c8:b8:ee:a7:aa:53:14:d2:2e:80:78:77:31:93:35:62:fc:
         58:c7:d5:05:2f:f7:bd:99:fd:95:3e:9f:31:10:88:12:ce:db:
         47:4e:55:e4:78:3c:70:bf:2b:27:f0:da:10:49:4a:76:42:dd:
         77:04:06:6e:4b:ce:17:a3:d0:91:b5:b0:4d:59:76:36:9d:f1:
         94:df:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:03:33 2025 by rpki-client