Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File:                     STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier:          i3qkEk7gKS9KQQGu7g8bcuppgpVR1NJu9M61IZwFvng=
Subject key identifier:   AA:B7:14:92:86:2E:9B:ED:94:20:3C:6B:CA:80:D2:32:3C:66:9B:92
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer:       /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial:       019761A7916D6FDD44B8EDCFA6BCAD4693C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number:          044B
Signing time:             Thu 12 Jun 2025 01:01:01 +0000
Manifest this update:     Thu 12 Jun 2025 01:01:01 +0000
Manifest next update:     Fri 13 Jun 2025 01:01:01 +0000
Files and hashes:         1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: Eui14QnHvp8Ds/CkiWbKlOnx0qVnBc0mAWr0LPXjf7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:a7:91:6d:6f:dd:44:b8:ed:cf:a6:bc:ad:46:93:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
        Validity
            Not Before: Jun 12 01:01:01 2025 GMT
            Not After : Jun 13 01:01:01 2025 GMT
        Subject: CN=aab71492862e9bed94203c6bca80d2323c669b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:60:d0:a7:35:cb:05:cc:a8:9c:fa:1b:d8:
                    58:d5:2a:e3:f8:a8:6c:e9:ae:34:ec:55:87:a2:45:
                    d9:af:05:8e:f2:5c:02:b6:84:9a:eb:0f:ab:16:bc:
                    20:e3:3e:1d:4d:f8:9c:4e:e3:ad:e1:19:64:f1:44:
                    d8:e5:1b:3f:3c:db:42:77:b9:b4:e9:5f:0f:03:7e:
                    27:ff:8d:47:6b:48:a6:74:f2:69:72:d2:b9:0d:15:
                    84:90:4d:21:b5:69:64:54:03:62:e7:a6:52:d7:f0:
                    c3:f5:53:aa:72:ea:2a:b5:ea:47:b4:bd:2e:66:21:
                    d7:8d:d9:58:7a:91:0a:fd:8b:23:ea:a9:09:30:1d:
                    db:11:c7:7e:ef:8e:b3:c0:dd:c6:08:a3:6e:5a:c1:
                    c9:74:fb:8d:d8:f3:7b:01:02:93:4f:b6:66:0f:69:
                    07:47:36:9d:d5:09:43:fb:e9:d7:95:6b:5d:c6:a5:
                    c0:d5:35:fb:1e:30:a0:ac:00:58:22:40:bb:1e:89:
                    b2:1e:da:b0:cf:22:cd:f4:fe:6e:8f:ed:94:ae:1d:
                    4a:56:aa:8f:d5:14:99:5b:df:c5:c3:e4:4a:42:b1:
                    b5:5e:04:0b:62:c2:2a:7f:06:10:8c:bd:57:8c:49:
                    69:c3:11:ec:63:b6:a9:b0:c2:ec:e2:e4:21:11:95:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B7:14:92:86:2E:9B:ED:94:20:3C:6B:CA:80:D2:32:3C:66:9B:92
            X509v3 Authority Key Identifier:
                keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:98:9e:f4:ef:8d:7d:6e:38:5a:3f:b9:46:30:f4:5a:61:65:
         51:4c:88:fe:0b:0b:61:d3:88:b8:fc:aa:6d:8d:96:68:45:f8:
         60:f8:94:9b:6d:29:fe:80:1b:c9:83:7f:2a:d6:c8:55:66:d2:
         7f:2a:18:2a:ec:48:1d:00:23:17:e4:75:98:d2:ae:00:d2:16:
         50:9d:9d:38:bf:ef:29:52:3b:3a:2e:e9:75:89:d6:55:0f:de:
         4a:c7:db:40:21:35:56:a1:8b:57:6f:bf:a2:7f:89:45:e9:5b:
         05:e5:dd:8a:d6:57:c6:0a:52:fe:4e:66:07:38:8e:97:29:4b:
         43:b2:3c:68:a3:68:6d:bd:35:01:f0:57:51:1b:6d:76:66:5c:
         aa:bb:6b:5b:80:ad:25:26:dd:98:64:06:f0:fb:8b:5d:39:fe:
         8e:be:79:7e:6e:4a:26:72:d3:8d:6f:14:99:2b:8c:39:15:bc:
         38:fd:d7:1c:8e:3b:f8:7f:38:10:18:65:e1:f9:ae:6b:a9:85:
         01:92:cf:6a:2b:20:e7:95:97:58:ef:1d:ed:05:3c:3f:4f:01:
         8c:02:52:47:13:15:43:42:51:26:42:30:d8:63:f6:0c:a8:e5:
         7a:20:17:ec:ce:08:88:79:26:44:4e:ba:06:e3:a8:e8:5e:1e:
         7c:66:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:18:01 2025 by rpki-client