Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          qTmhEdW3Fz3onMK20/dv/uaf6K6cMZJ6FeSuGYygtPc=
Subject key identifier:   CD:25:0F:34:BB:3D:F8:9C:95:B4:58:CD:08:20:05:BF:74:0A:E2:94
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       0196AA30E625E66CC0516132A2FC3FB72A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0D41
Signing time:             Wed 07 May 2025 10:00:53 +0000
Manifest this update:     Wed 07 May 2025 10:00:53 +0000
Manifest next update:     Thu 08 May 2025 10:00:53 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: 3wl6fTnqvbr+uWlWUvEjvAI6dIzckGpr9u+jLmBTZMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:30:e6:25:e6:6c:c0:51:61:32:a2:fc:3f:b7:2a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: May  7 10:00:53 2025 GMT
            Not After : May  8 10:00:53 2025 GMT
        Subject: CN=cd250f34bb3df89c95b458cd082005bf740ae294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:c7:3d:b6:c2:8e:19:cb:16:8f:db:57:08:
                    a4:96:f9:68:fe:3d:68:a2:af:dc:f5:17:11:56:5e:
                    4e:4a:38:18:88:9d:74:3b:da:50:9c:cb:b7:62:1c:
                    11:24:c6:12:b6:1f:b0:d1:07:00:d1:6b:5a:a0:ef:
                    64:e1:43:32:da:4e:39:b5:f2:5e:04:41:53:3a:1e:
                    64:3a:68:33:0a:de:0e:79:a4:4a:4d:64:31:c5:f1:
                    63:0e:23:f5:1d:62:4a:9c:44:8d:d7:26:46:35:8d:
                    af:23:fa:c9:b2:b2:0b:1a:bb:22:e9:c0:0f:ed:99:
                    ee:3c:9a:10:d5:7a:ab:30:62:22:07:d0:ac:a1:2b:
                    ed:d9:c1:d7:db:c6:d9:43:e2:90:7d:a5:d1:cb:8e:
                    68:03:cd:a9:2e:17:3c:4e:ff:15:d8:4d:4c:84:6a:
                    91:64:29:fe:be:a6:69:75:e8:cf:2c:c3:e6:e9:f4:
                    3c:7b:cb:72:4f:9b:23:49:6f:ba:d9:91:b1:7f:6a:
                    74:c7:11:db:fc:5b:fc:80:a1:b7:a6:0e:bb:4c:4d:
                    da:b3:c5:1a:24:c8:57:a3:30:77:9f:72:56:ee:f6:
                    21:f2:85:d3:35:e6:d5:c6:c9:72:e5:e3:48:13:17:
                    6c:d9:b9:78:8a:6f:5d:0b:2e:e9:54:24:d0:bf:29:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:25:0F:34:BB:3D:F8:9C:95:B4:58:CD:08:20:05:BF:74:0A:E2:94
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:57:60:e9:55:0e:06:1a:d6:32:f4:a5:de:33:6a:6a:8e:92:
         07:2c:02:fb:ac:5f:2e:e0:5e:3d:d0:c9:5b:65:fc:b7:cf:f7:
         7e:26:77:39:9c:1a:a2:1b:6a:9e:5d:c2:6e:38:17:05:cd:46:
         4d:d0:77:72:dd:46:25:57:f3:b7:64:1d:d3:28:61:22:cc:2a:
         49:82:64:c6:5e:de:16:55:b4:d2:f8:1c:1b:e9:e5:12:cb:0f:
         8e:e6:1b:d0:af:8b:47:95:07:7e:50:ba:66:2f:dc:87:ac:0b:
         b8:40:a6:53:0d:b6:ac:1c:de:66:68:84:a5:22:a0:eb:6c:af:
         d4:84:69:64:9a:1a:8c:6c:66:32:8a:b2:55:4d:94:83:ce:73:
         23:7e:f5:eb:f1:fa:4e:d3:24:88:3d:ae:d1:0f:62:d2:89:88:
         5f:b1:05:ec:86:1e:e8:0c:74:38:ee:da:87:2e:b9:24:0e:5a:
         f0:59:66:ec:58:a8:22:0c:19:e0:bc:c9:17:cf:79:94:bf:10:
         e0:6e:e6:20:83:5b:d8:ff:6f:74:68:a5:52:6b:21:b6:a0:bc:
         be:2a:af:6d:80:af:22:9a:17:c2:30:69:cf:f0:3e:72:9a:8d:
         64:60:9d:22:b6:88:9b:88:cc:bc:ea:5f:5e:d9:e9:3a:e7:af:
         ae:64:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:04:11 2025 by rpki-client