Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
File:                     e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json)
Hash identifier:          xz7o7kYuv0vnrY6yDR/9ZFDUzEI/wL1TcxZfxEwCig4=
Subject key identifier:   E7:46:3E:51:3C:77:00:96:0A:33:EE:68:4A:19:EB:58:32:E9:68:31
Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
Certificate issuer:       /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Certificate serial:       01962ABCD0A4A55AC69DBC10F9027EF60F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
Manifest number:          049F
Signing time:             Sat 12 Apr 2025 16:02:19 +0000
Manifest this update:     Sat 12 Apr 2025 16:02:19 +0000
Manifest next update:     Sun 13 Apr 2025 16:02:19 +0000
Files and hashes:         1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: N9iW9BoBfgcoNp96RccvjpxvVfMcbiehqtVLsI/fzdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:bc:d0:a4:a5:5a:c6:9d:bc:10:f9:02:7e:f6:0f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
        Validity
            Not Before: Apr 12 16:02:19 2025 GMT
            Not After : Apr 13 16:02:19 2025 GMT
        Subject: CN=e7463e513c7700960a33ee684a19eb5832e96831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:9d:7d:6c:a1:d3:b0:c8:55:66:d9:cd:82:
                    24:12:7f:16:0c:4c:0e:94:72:8f:af:ad:05:c5:1e:
                    6d:37:1c:88:4c:fb:53:15:41:8e:73:f2:76:f3:2b:
                    23:ab:26:89:7a:90:ff:55:e7:8e:ba:8d:7a:3f:4c:
                    f1:b9:80:69:5f:c8:3e:59:18:f4:2c:41:e8:b0:91:
                    90:cd:9b:d8:a7:ea:70:79:fe:bd:24:ad:00:5a:ca:
                    46:ae:ee:50:f8:88:cc:1b:e3:49:9d:3a:e5:dc:6e:
                    ae:ba:dc:82:fd:28:7b:6a:64:55:ba:65:4b:72:04:
                    f3:a0:65:c2:09:50:4c:10:00:8f:5d:b3:a6:10:9e:
                    f6:11:98:6d:e7:16:4b:5d:af:8d:e6:75:c7:e0:40:
                    90:c0:f8:c6:54:3f:2d:bb:f4:a0:67:fc:7e:ca:2a:
                    eb:32:2b:e8:74:3a:cc:9f:29:1a:a4:92:9d:dd:e8:
                    26:75:36:a1:47:91:ac:33:5b:ef:52:6a:00:13:ec:
                    f0:e3:6f:05:e2:64:8a:17:6d:71:85:15:d1:b6:db:
                    8e:32:76:83:85:00:1f:d9:bf:4c:b2:ea:3b:97:f8:
                    e2:eb:8e:8d:06:cf:8c:a8:2e:47:5d:94:73:82:d1:
                    7f:a3:87:21:65:fa:9e:dc:bd:9c:ec:ae:5b:4c:a8:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:3E:51:3C:77:00:96:0A:33:EE:68:4A:19:EB:58:32:E9:68:31
            X509v3 Authority Key Identifier:
                keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:39:86:6a:4b:b3:57:ca:3e:61:96:ac:3d:14:43:e7:c3:40:
         c9:fa:f6:09:33:96:2a:ce:78:d0:38:76:64:b7:69:8b:9c:86:
         57:f6:fd:5c:55:5f:78:ff:59:05:20:75:eb:80:96:2f:61:73:
         0d:3a:f7:4d:d9:10:d3:90:4b:79:24:ba:99:95:a0:6d:39:d6:
         e1:3a:63:29:5f:ba:ba:35:be:6b:4a:39:6a:c6:fb:f3:b3:94:
         8b:33:27:9e:e3:0d:ab:7b:2d:43:4b:0d:db:98:b2:45:97:28:
         5b:43:6d:7e:3a:81:3c:32:85:9d:db:b3:34:26:e8:07:2d:21:
         d5:01:b5:b0:3c:5a:ad:dd:3c:58:6f:b4:a4:5a:9c:ad:c4:4d:
         05:2f:09:c4:4a:a0:70:12:5f:ae:29:9b:5b:1c:04:22:81:e7:
         d4:bf:7d:4d:db:a6:10:4c:70:f5:99:de:9c:17:08:be:0d:ef:
         d2:e7:d9:11:ff:f7:50:5d:cd:3d:82:67:39:b9:5d:29:23:77:
         36:07:4d:c4:cb:cf:bc:5a:1b:f5:27:30:41:c1:40:de:0d:a0:
         68:6b:ff:45:40:77:60:e3:9f:1a:80:6b:05:b3:4b:ef:cd:c3:
         95:c7:20:0c:cf:b5:f1:6d:54:f3:0a:a0:f4:c8:3f:9e:1a:2c:
         9b:2b:90:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:39:14 2025 by rpki-client