Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
File:                     i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json)
Hash identifier:          O8xCVWFgpuZ59fSvT6/NDjG9M63RfT70Ro5wrAY5SPA=
Subject key identifier:   F4:9F:AC:F5:07:F7:AA:5D:94:80:18:F8:04:ED:E5:60:CB:4B:41:92
Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
Certificate issuer:       /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Certificate serial:       0196586FE638DEF175B853B6EE70F1384B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
Manifest number:          F5
Signing time:             Mon 21 Apr 2025 13:00:50 +0000
Manifest this update:     Mon 21 Apr 2025 13:00:50 +0000
Manifest next update:     Tue 22 Apr 2025 13:00:50 +0000
Files and hashes:         1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: iHgt7zhC89TbAlx3px6quilsR+GHqeeAfGS5A03wuSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:6f:e6:38:de:f1:75:b8:53:b6:ee:70:f1:38:4b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
        Validity
            Not Before: Apr 21 13:00:50 2025 GMT
            Not After : Apr 22 13:00:50 2025 GMT
        Subject: CN=f49facf507f7aa5d948018f804ede560cb4b4192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:46:70:8c:09:9c:58:68:be:4a:4d:be:ad:
                    5c:ca:c2:2d:40:6e:60:e1:fd:58:eb:bf:1a:fe:6c:
                    68:50:a1:92:59:97:51:85:f2:bd:ec:75:c5:d2:23:
                    2c:90:7f:60:f5:5e:c1:ef:62:49:1d:70:b4:41:34:
                    8f:03:6a:d9:ca:aa:f6:be:07:77:43:d5:bd:92:49:
                    0b:4c:26:91:18:2b:6a:44:56:40:2b:9e:47:2c:ce:
                    75:10:d8:71:16:ff:db:db:13:df:d1:bc:e2:7b:da:
                    05:28:76:58:7d:44:72:fb:77:cd:ae:bb:b3:6b:84:
                    6d:f5:c5:8b:1b:ed:c4:fb:ee:cf:96:2d:d9:55:69:
                    cf:00:0a:51:3c:52:3b:b1:c5:0d:d8:df:f0:be:93:
                    f6:39:95:ef:c5:24:46:f5:98:94:89:be:c4:33:1c:
                    18:6d:22:37:34:29:ef:26:76:02:87:d9:d6:c4:44:
                    16:33:c7:11:87:18:43:8a:e2:40:38:ee:5b:06:f0:
                    83:9a:1a:57:90:5f:ad:d1:2c:f8:bc:84:68:6d:78:
                    22:18:81:0e:18:07:a0:59:65:ab:46:a1:7a:cf:47:
                    ac:06:47:84:25:1c:5c:16:55:7e:ef:55:9f:36:ac:
                    3b:d1:9c:ad:67:3e:a9:0c:31:97:a5:98:08:8b:40:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9F:AC:F5:07:F7:AA:5D:94:80:18:F8:04:ED:E5:60:CB:4B:41:92
            X509v3 Authority Key Identifier:
                keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a7:94:25:40:7f:7c:33:ce:88:55:4b:36:0e:8c:c3:fd:2d:
         95:7b:7a:a9:58:9a:3e:c6:96:3d:7e:49:94:52:f1:76:82:25:
         c3:1a:2e:a4:7d:88:2b:41:4a:52:5f:be:48:cf:2d:8e:ba:83:
         82:f7:f6:66:9f:a9:c0:b6:e9:03:2b:f4:ca:87:69:c8:d7:de:
         57:4a:98:77:46:11:e3:d9:53:db:24:99:a2:1a:c8:de:5a:c2:
         f4:88:34:ed:2e:08:6f:e7:c2:43:77:81:98:c1:02:f0:c4:05:
         c0:21:28:4b:d6:18:48:89:54:ad:16:85:6f:d5:ff:d1:be:8d:
         c7:05:99:a1:50:77:cf:14:80:83:5c:3d:6d:57:bb:b2:fc:54:
         4b:f9:bf:e1:5f:49:2c:53:e0:ed:fd:36:fd:85:4b:b0:b9:85:
         dc:2a:83:35:65:76:ea:68:41:ae:6d:45:07:98:09:70:74:c1:
         e0:44:35:05:c2:70:be:a1:ab:55:e7:9e:8e:5d:c6:a6:d2:30:
         64:88:9e:b7:9a:59:8e:11:61:cf:a5:e2:14:3b:3c:89:de:e1:
         f5:59:da:91:35:18:2a:d2:c1:c0:3d:2f:b1:c1:97:fa:a6:ec:
         85:a4:fc:da:ca:e9:03:e7:53:85:ea:a2:fa:be:52:14:bd:6c:
         ce:b9:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:32:32 2025 by rpki-client