Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
File:                     Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft (raw, json)
Hash identifier:          l6gvdn94fSrPHhBbZDnm64GH/uGnu0ztOaUqQvtS6I8=
Subject key identifier:   11:DB:76:86:84:F3:34:E3:A8:A8:78:6A:0B:30:1B:AB:60:46:5A:B7
Authority key identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
Certificate issuer:       /CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Certificate serial:       01964CA2407DD40292CBB44ED744B836837B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
Manifest number:          0250
Signing time:             Sat 19 Apr 2025 06:00:23 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:23 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:23 +0000
Files and hashes:         1: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl (hash: jYwaOrPiS6yeP9w0c8teN/tHRXtZZDeSSKjnJ456Ok0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:40:7d:d4:02:92:cb:b4:4e:d7:44:b8:36:83:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
        Validity
            Not Before: Apr 19 06:00:23 2025 GMT
            Not After : Apr 20 06:00:23 2025 GMT
        Subject: CN=11db768684f334e3a8a8786a0b301bab60465ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:d9:a9:c4:a2:11:21:5c:75:0e:dd:51:c8:
                    1b:b6:c2:02:25:df:99:1e:8a:42:ad:65:c5:00:f9:
                    c1:23:f5:2e:3f:31:bf:10:76:1d:e1:9f:3f:b9:dc:
                    e5:4f:50:7a:36:e1:56:49:44:4a:28:15:18:5d:d3:
                    fc:28:71:88:84:c8:1e:d3:e8:29:00:37:38:ef:a7:
                    39:91:bd:50:88:3f:48:48:08:4f:08:20:c9:8f:46:
                    f6:ec:2d:ee:87:75:c2:b5:96:f2:45:25:81:6d:d2:
                    d9:82:c0:df:a9:b2:b3:cd:07:2e:cd:1b:2e:ab:69:
                    9c:19:89:fe:ac:e0:59:33:e9:74:94:07:01:5c:f4:
                    90:1b:ec:a9:a9:a8:ea:a2:77:f0:f4:7a:ba:f9:36:
                    73:ca:0f:24:f6:26:69:34:65:fc:bd:80:bd:ca:c1:
                    97:5e:33:a4:42:f6:e1:5c:be:7d:f4:27:8b:11:49:
                    57:47:11:02:f1:30:41:4f:a6:46:8d:06:05:bb:a9:
                    ca:1f:cd:38:d0:45:eb:8a:1f:0c:d3:9b:14:5d:dd:
                    91:3a:f0:fa:9c:75:37:3e:98:38:ea:bd:ae:58:63:
                    dd:96:a1:59:1c:d5:de:82:a8:3c:68:bf:7a:2a:3c:
                    2c:3d:5e:3b:c8:77:98:8e:0f:8a:ff:37:08:6a:39:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DB:76:86:84:F3:34:E3:A8:A8:78:6A:0B:30:1B:AB:60:46:5A:B7
            X509v3 Authority Key Identifier:
                keyid:39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:4d:7a:f1:e0:3d:27:b0:4d:af:10:62:f9:24:f9:cf:bb:
         3b:5f:8c:64:84:87:03:ff:29:98:50:38:b8:e0:b0:28:64:42:
         c2:6c:23:b9:ec:44:5e:8f:dc:53:5f:bf:23:cc:26:e1:10:a5:
         5f:16:6e:ed:3f:fb:7c:2d:88:a8:b6:35:81:36:9e:66:fa:b8:
         93:f0:37:cb:21:38:14:ed:79:a0:a2:14:a4:81:f7:25:23:79:
         3b:af:81:4d:5f:be:5f:e1:b1:a1:b2:c6:20:32:6e:7a:87:cd:
         2d:a4:73:05:35:aa:b9:be:5d:96:e4:1e:c0:09:e0:b9:23:29:
         d3:a8:a7:a3:7a:d1:e1:0c:8c:a3:41:9b:5a:05:85:af:25:27:
         aa:09:58:25:ab:3d:80:8a:dc:95:fc:aa:7f:f4:23:8b:59:d8:
         ae:f7:fc:1a:e3:0e:c6:89:66:4d:e3:09:18:02:d2:33:2d:55:
         f9:6e:23:7d:a3:95:d0:b1:95:26:2f:53:f6:07:d6:c0:4b:c3:
         83:b7:3b:8b:fb:41:84:a8:c1:7f:44:b8:5d:c3:7a:26:35:55:
         09:fb:43:5e:60:d2:65:35:42:20:0f:93:c5:80:20:46:e0:99:
         e8:cf:eb:27:05:65:d4:bf:ad:af:7b:89:80:68:e9:50:9a:24:
         2f:c9:c8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:33:55 2025 by rpki-client