Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File:                     9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier:          iEBLqdUumGjsSeypPiAB1yt3gcoTpHqaZLLhCBgpBsA=
Subject key identifier:   5C:43:FB:B2:22:21:26:60:03:07:2F:4D:5A:75:AA:4E:5A:BB:C7:4F
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer:       /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial:       019649A236098B929B341FB27C9A6EB1F70C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number:          082A
Signing time:             Fri 18 Apr 2025 16:01:29 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:29 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:29 +0000
Files and hashes:         1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: Evp8MaIJrdggYqTahCGbWTIMOOGdWEr9XtK0p/wgYwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a2:36:09:8b:92:9b:34:1f:b2:7c:9a:6e:b1:f7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
        Validity
            Not Before: Apr 18 16:01:29 2025 GMT
            Not After : Apr 19 16:01:29 2025 GMT
        Subject: CN=5c43fbb22221266003072f4d5a75aa4e5abbc74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ff:9e:0e:e5:db:1a:f6:c3:3e:cb:0e:5a:f5:
                    1b:1f:5f:f4:7d:7b:e8:b5:56:aa:a5:ad:28:58:21:
                    7f:90:60:18:6c:17:f2:7a:60:21:80:b2:61:8b:ff:
                    1a:c2:3b:9f:34:dd:b4:4d:9c:10:c9:22:bd:55:eb:
                    f5:1e:f7:67:37:b0:ac:c3:18:40:00:16:56:a4:6c:
                    ff:a2:1e:9d:0b:43:f7:b0:8c:16:eb:5b:b6:ff:6a:
                    78:ff:21:b3:65:cb:80:26:50:52:f7:03:dd:d3:03:
                    4e:f8:78:5d:b2:51:7b:a7:e2:c1:a4:e2:78:79:5a:
                    c9:bf:85:32:e5:a8:be:6f:25:fa:19:31:fa:bf:90:
                    27:7c:33:cd:b3:3b:32:87:f4:77:2b:fa:ab:b9:72:
                    39:41:0d:2d:48:42:99:2a:09:32:83:bc:ef:3f:18:
                    cd:68:57:54:f5:f7:84:48:cf:6c:d8:25:21:ab:f8:
                    c3:2a:87:2b:67:0d:7b:fb:8a:fc:bd:66:29:c8:d4:
                    c3:0a:d4:65:83:71:41:52:63:fe:90:ce:d7:b4:fa:
                    23:a6:da:e4:82:35:55:83:35:cc:da:f0:52:4b:05:
                    e3:05:df:2d:40:d7:d3:c0:3d:52:86:5f:71:e6:07:
                    75:10:31:0a:0e:b1:69:15:fa:be:da:ef:cd:8e:82:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:43:FB:B2:22:21:26:60:03:07:2F:4D:5A:75:AA:4E:5A:BB:C7:4F
            X509v3 Authority Key Identifier:
                keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:35:36:27:16:e2:57:1d:74:a1:16:58:b4:27:02:1d:a7:15:
         90:37:16:8f:7a:c3:6b:32:c1:56:cb:2a:6a:6c:b3:a8:73:dd:
         c5:1c:bb:62:43:e6:67:91:da:05:a8:51:80:15:62:69:23:a5:
         e4:4f:be:ba:96:83:61:11:5a:ed:69:8f:5c:1f:d6:7f:84:47:
         e8:6d:28:01:d9:32:3b:54:5e:53:4d:0b:6d:e0:bc:1e:34:0a:
         7a:cc:28:ed:a4:a7:ed:4b:28:f4:2c:ea:a2:62:93:be:fc:24:
         05:7a:ba:74:25:84:d1:fc:d3:92:57:a1:ed:50:f0:13:39:e2:
         be:1f:b7:21:f4:eb:bc:69:02:a5:1a:3b:aa:d1:56:87:e5:84:
         29:d1:33:9b:83:05:5b:18:d6:37:74:3b:0a:fc:44:a6:89:a1:
         50:05:d8:2f:6a:99:c4:84:07:8c:be:a4:f5:9f:73:52:7b:27:
         bf:a1:4e:df:41:4a:cd:8e:0a:fb:a9:24:db:1d:5b:71:92:95:
         65:62:ea:7a:b2:bc:01:17:e9:be:6a:11:e5:b2:28:08:5a:44:
         b7:58:f7:5f:cc:b7:17:35:f1:e4:a0:2d:81:01:fc:b9:16:02:
         82:0e:6b:cd:22:c4:93:09:18:15:26:7a:5f:93:06:6e:5f:84:
         7f:28:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:13:10 2025 by rpki-client