Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File:                     vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier:          lDGP+hMQAaFx9Wvvk4mI3tYtOzD2J43nf+lhns+1Hvg=
Subject key identifier:   03:BC:D7:E4:DF:F9:18:89:08:AD:4A:20:93:CD:F7:29:39:C5:BF:83
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer:       /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial:       01964F6C365EB191F78094F27AD48D875AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number:          047A
Signing time:             Sat 19 Apr 2025 19:00:13 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:13 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:13 +0000
Files and hashes:         1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: jKLVmsu3+Xe/Lp0VNNPqFi1FtRFKkpTtVwziUOEXJzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:36:5e:b1:91:f7:80:94:f2:7a:d4:8d:87:5a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
        Validity
            Not Before: Apr 19 19:00:13 2025 GMT
            Not After : Apr 20 19:00:13 2025 GMT
        Subject: CN=03bcd7e4dff9188908ad4a2093cdf72939c5bf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:11:14:cd:3a:e1:c8:c9:7d:84:34:85:e7:
                    ae:7e:80:2b:48:ca:4e:15:6a:62:8d:73:f0:a3:0e:
                    d3:69:8e:20:0a:25:f2:d3:1c:b5:39:10:03:2c:63:
                    01:25:75:00:60:d5:67:eb:55:ad:bf:fc:d2:22:30:
                    b7:71:ee:76:60:73:20:48:3d:b1:36:d2:99:0d:b7:
                    e0:9a:bb:72:36:53:aa:13:08:30:9c:3d:e0:ca:50:
                    46:2b:07:6c:ca:a9:22:51:c1:73:55:2b:06:b4:32:
                    16:a7:98:ed:22:62:9c:28:c8:a1:0f:84:f1:86:e1:
                    e1:17:1e:fc:2b:44:78:b9:40:00:a9:01:d1:f9:31:
                    dd:49:54:b8:f2:41:72:96:8a:24:2d:61:8a:e1:2e:
                    14:f6:af:dd:9b:00:14:fa:0f:d2:d1:01:68:97:5e:
                    1f:c5:b0:19:69:91:ef:a4:32:c4:54:44:b2:bb:d3:
                    98:98:1b:cc:89:41:75:c6:49:7c:79:f0:fa:88:b1:
                    a2:76:14:31:1a:77:64:33:cc:58:5e:d2:f5:de:27:
                    82:c5:6c:65:a1:3b:88:63:13:ae:1a:96:5c:02:dd:
                    77:8f:bb:48:83:a8:b8:ed:f3:36:70:9b:9b:ef:c9:
                    23:1f:7e:44:82:0c:6b:8f:6b:90:69:12:4a:55:f1:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BC:D7:E4:DF:F9:18:89:08:AD:4A:20:93:CD:F7:29:39:C5:BF:83
            X509v3 Authority Key Identifier:
                keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e2:27:87:8b:3e:de:ae:b6:40:23:d9:c3:3d:cb:b7:cd:ac:
         76:2b:cf:38:2a:d7:5c:74:7f:15:87:b8:d1:c7:b8:26:51:c4:
         35:15:83:f8:4a:75:c0:fb:6a:7c:9f:3c:3d:8b:e7:13:32:20:
         d3:87:16:a4:e0:51:54:23:29:8b:d7:98:3b:6e:64:82:6c:16:
         28:a3:63:9e:9c:9f:6d:69:90:3c:03:ab:73:96:be:62:52:a1:
         3e:08:ce:bd:90:f3:b6:d0:eb:bd:ac:bd:c9:6f:c7:8e:10:0e:
         df:3b:0a:c7:84:55:0c:aa:5c:3e:e8:0b:b5:e8:2e:63:5d:de:
         79:9a:98:ed:82:9e:64:90:ff:f5:ca:a3:bb:fe:2d:92:f7:5a:
         37:a8:f5:83:f9:2f:10:56:84:54:5f:25:85:70:66:7b:f4:85:
         e7:f4:84:99:cb:f4:15:58:82:b0:44:78:d6:25:66:c3:0d:a8:
         be:33:3f:b2:ec:60:5e:8e:18:d9:78:96:4b:11:45:20:39:18:
         f9:ec:5e:55:e6:e5:7c:23:8d:71:86:06:3d:c8:0a:db:da:8f:
         db:f3:48:01:64:c0:75:28:de:62:99:50:38:ed:c1:c0:6a:97:
         d3:11:12:9a:de:88:85:9a:75:28:4a:05:17:37:ad:b7:13:35:
         97:d7:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:28 2025 by rpki-client