Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
File:                     R4SxW2vT-4f1J58Ym584GvyRmXE.mft (raw, json)
Hash identifier:          5sajYlYTphk6LTscy0WeAEud9Lb1SSyUTf+DOlXaTqE=
Subject key identifier:   AF:92:33:9B:AB:FE:D8:50:AF:71:4B:66:09:38:BC:E4:65:32:9E:24
Authority key identifier: 47:84:B1:5B:6B:D3:FB:87:F5:27:9F:18:9B:9F:38:1A:FC:91:99:71
Certificate issuer:       /CN=4784b15b6bd3fb87f5279f189b9f381afc919971
Certificate serial:       01958C6046594E392C2CC61A8D3CDF670ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R4SxW2vT-4f1J58Ym584GvyRmXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
Manifest number:          0A4E
Signing time:             Wed 12 Mar 2025 22:01:14 +0000
Manifest this update:     Wed 12 Mar 2025 22:01:14 +0000
Manifest next update:     Thu 13 Mar 2025 22:01:14 +0000
Files and hashes:         1: R4SxW2vT-4f1J58Ym584GvyRmXE.crl (hash: YGZYGhaZkaDTv+kkjSl88dMy6mE9RhKuchiPfYvNm1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R4SxW2vT-4f1J58Ym584GvyRmXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:60:46:59:4e:39:2c:2c:c6:1a:8d:3c:df:67:0e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4784b15b6bd3fb87f5279f189b9f381afc919971
        Validity
            Not Before: Mar 12 22:01:14 2025 GMT
            Not After : Mar 13 22:01:14 2025 GMT
        Subject: CN=af92339babfed850af714b660938bce465329e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:f0:78:42:d8:c5:21:da:3a:62:bf:f2:01:
                    3d:06:d6:cd:ad:0b:a0:00:df:85:3b:1e:89:31:14:
                    f5:f4:51:67:37:a6:ba:cc:e0:79:67:f4:1d:67:ff:
                    f1:6b:ef:0d:78:62:a9:bb:ae:01:31:73:c5:b8:0a:
                    dd:ed:35:64:1b:c8:5f:05:2e:86:45:07:fa:ca:9d:
                    3f:1d:a8:0a:7d:c6:7f:02:f6:12:a1:df:23:b4:f4:
                    96:e0:35:7e:48:9d:fa:63:ff:65:92:8c:09:6a:97:
                    f3:cc:13:49:02:20:26:a0:6c:54:6f:c0:53:a8:31:
                    3c:08:55:2b:8f:2c:1a:8e:89:8c:f4:61:93:1b:2e:
                    06:82:f9:3b:08:36:21:1b:39:fc:4a:52:73:fe:45:
                    3d:fa:3d:33:fd:b3:2a:e8:36:d5:30:8d:e0:ae:e1:
                    55:4f:c6:2a:99:51:6b:ad:38:95:3d:5b:78:2d:23:
                    49:79:4a:04:a8:d4:29:fe:5a:9f:ff:69:5a:46:c4:
                    b4:8e:49:81:83:b6:2f:b5:c4:a0:80:3e:b0:2e:50:
                    2e:d3:75:9b:37:bb:4e:3a:83:1f:0c:a1:15:78:33:
                    1c:cd:27:c2:f8:ba:b2:7e:29:f8:0a:a7:81:54:72:
                    92:d9:be:67:f9:92:57:6a:a8:ce:47:a9:ab:65:da:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:92:33:9B:AB:FE:D8:50:AF:71:4B:66:09:38:BC:E4:65:32:9E:24
            X509v3 Authority Key Identifier:
                keyid:47:84:B1:5B:6B:D3:FB:87:F5:27:9F:18:9B:9F:38:1A:FC:91:99:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4SxW2vT-4f1J58Ym584GvyRmXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8a:b0:70:88:17:5a:86:5d:4f:9b:cd:70:7e:cc:e2:ea:f5:
         33:68:15:6d:50:74:49:ec:c2:60:e7:8f:df:34:8d:b9:56:e8:
         60:a4:33:ed:fb:62:59:8b:92:b0:b4:71:42:cc:7f:e8:c9:41:
         9a:b4:de:aa:be:52:9b:0d:1f:5d:80:e5:06:bb:d8:4f:ff:4a:
         0a:1d:c7:59:98:6b:53:15:4b:9e:b7:c8:37:63:7f:68:b9:73:
         f2:37:54:03:9e:5d:d2:75:73:d4:fd:c6:17:ec:24:3a:97:63:
         41:e0:65:df:23:94:0d:b8:cc:91:e9:f4:b1:9d:c1:86:9b:5d:
         3d:95:68:76:2c:a4:8b:4a:6b:2d:b7:cf:40:53:0f:a2:67:61:
         e0:36:d8:e0:6d:1c:74:3c:ba:2d:82:c0:76:c3:43:b5:05:5e:
         c5:02:58:bc:89:22:5e:ff:ae:df:e7:fb:92:71:68:cf:cc:75:
         63:04:45:44:0e:d8:85:6c:95:da:d9:69:4a:e9:3e:a7:87:75:
         7e:e2:f9:5d:f3:5a:fb:82:a3:c5:0e:c6:bd:10:b0:fd:f2:0e:
         87:d9:87:73:9c:3f:88:61:92:40:09:96:4f:65:4e:38:b5:45:
         ff:7f:7e:a6:61:77:52:7b:13:bc:48:74:3b:7f:e0:9d:9f:05:
         3b:70:03:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:52 2025 by rpki-client