Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
File:                     G_mzHCCQb4foYHjbRYHl8e5Tt68.mft (raw, json)
Hash identifier:          6wux6ZTy/CTXF2QRslmKmYEEZ1+/KS2aa/qiB4sqI94=
Subject key identifier:   74:4B:BC:CD:54:B4:58:50:EE:80:E2:8A:64:90:08:25:88:E4:96:07
Authority key identifier: 1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF
Certificate issuer:       /CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
Certificate serial:       019510C7CAB2C381A2B5E7D1A74C64C56B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
Manifest number:          091A
Signing time:             Sun 16 Feb 2025 22:01:23 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:23 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:23 +0000
Files and hashes:         1: G_mzHCCQb4foYHjbRYHl8e5Tt68.crl (hash: 9Zuu03NsoMj15sIC1+4tSYNAwPM/1/7Vfa0b4acQIKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:ca:b2:c3:81:a2:b5:e7:d1:a7:4c:64:c5:6b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
        Validity
            Not Before: Feb 16 22:01:23 2025 GMT
            Not After : Feb 17 22:01:23 2025 GMT
        Subject: CN=744bbccd54b45850ee80e28a6490082588e49607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:96:b3:bd:ec:75:10:85:bc:03:a7:45:03:
                    12:fe:19:29:e3:5b:6e:59:23:39:ba:95:f0:bd:91:
                    ad:99:7c:8d:a2:14:82:4d:af:42:d6:8e:cf:6d:85:
                    68:5c:25:ac:e7:73:93:e5:11:18:f4:fe:38:c4:32:
                    0e:50:c4:96:7d:b0:7a:91:80:fc:ec:5f:e3:35:82:
                    8c:00:9b:0c:5e:70:b6:cd:ea:03:3e:9a:b4:fc:be:
                    6b:eb:55:e3:ec:21:d8:7f:4a:ac:2f:0c:03:b4:26:
                    50:16:51:20:80:6e:99:3b:f6:97:7f:a0:21:83:28:
                    e7:c4:5f:38:60:e4:e3:19:26:0f:a7:db:dc:ee:05:
                    d9:b3:0c:dd:4e:56:b9:d9:34:98:0d:01:b1:64:68:
                    78:8c:d3:8b:2e:8c:78:c4:68:04:ab:34:c3:44:56:
                    ac:a4:36:25:8e:a6:38:b2:2d:bf:95:24:16:19:96:
                    4a:37:40:22:69:83:12:ce:36:01:14:9c:2c:c4:37:
                    a4:60:b7:b5:21:5d:b8:64:62:6d:89:91:bf:84:f5:
                    5f:27:4e:c9:1c:b5:17:cc:b2:cd:ab:e0:8e:f6:3f:
                    67:7c:cd:27:e1:e0:d7:67:5c:cf:97:76:1a:a8:a5:
                    03:50:22:c6:41:0a:84:7c:be:d8:a7:aa:45:02:d2:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:BC:CD:54:B4:58:50:EE:80:E2:8A:64:90:08:25:88:E4:96:07
            X509v3 Authority Key Identifier:
                keyid:1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:96:9f:68:9c:2b:85:00:82:08:c3:a9:fa:03:ff:45:bd:a5:
         e9:9a:44:10:49:e2:83:2d:44:72:17:b8:de:f9:68:4b:01:39:
         36:df:77:91:85:92:97:49:7e:f5:6c:75:1d:3f:87:76:ac:c9:
         be:ce:3f:1a:d1:7b:27:01:9d:6e:6c:e6:35:f9:65:f1:32:4e:
         cf:a8:fe:11:de:d4:5b:4b:e2:07:05:08:2f:db:90:c9:92:d4:
         f7:ce:6a:c2:17:ee:24:b5:5d:c4:5a:2c:f7:6b:2d:de:2f:d5:
         4a:72:71:77:bc:55:62:cc:a1:24:96:dc:c1:e6:00:b5:0d:68:
         05:9f:8c:5b:24:ca:16:36:e2:02:b3:71:db:99:1e:94:ef:9d:
         e9:ea:bc:af:57:fb:2f:6d:b0:c0:ef:8c:52:fe:bf:b9:c7:44:
         ed:9f:0c:fb:a2:32:44:20:64:38:1e:b5:c3:1c:1b:5e:bb:f7:
         2d:3a:e0:7f:2d:dd:40:99:76:8e:b7:7a:8e:79:36:7d:2c:d4:
         d0:44:b1:a9:d9:ef:3e:ff:31:66:fa:8c:a7:5f:99:87:a5:4e:
         a2:e1:30:c9:86:78:13:43:8f:36:2e:ea:34:30:d3:23:a3:2d:
         ec:9f:0b:b6:99:bd:30:b3:67:b1:4e:d9:3e:80:d1:3a:a8:0d:
         86:f6:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:30 2025 by rpki-client