Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File:                     griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier:          UNOEEKe+EDSdlC36pOvQPq5VJWyshHWpoBC/97NDf58=
Subject key identifier:   90:93:F9:C8:94:97:FB:FF:20:4D:E8:17:3A:B3:05:6A:CD:85:17:DA
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer:       /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial:       01967679E01D65C51254B58221AFE6315764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number:          048C
Signing time:             Sun 27 Apr 2025 09:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:20 +0000
Files and hashes:         1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: xZHkD/sUO7DuBnEtrrYDiTWUtxRo31hp0FEHkpKOg4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:79:e0:1d:65:c5:12:54:b5:82:21:af:e6:31:57:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
        Validity
            Not Before: Apr 27 09:00:20 2025 GMT
            Not After : Apr 28 09:00:20 2025 GMT
        Subject: CN=9093f9c89497fbff204de8173ab3056acd8517da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:d8:49:dd:5b:26:4a:58:d7:dc:6a:94:4e:
                    1e:de:f2:17:b5:96:9d:fb:3e:30:45:e6:b2:65:c0:
                    24:0f:e1:d4:cf:a1:ce:f0:dc:95:5d:0f:5a:d1:39:
                    38:49:b7:d4:6c:50:84:fb:7f:f6:7e:37:06:47:94:
                    95:d2:bb:61:6a:ff:0b:c9:ce:6a:fc:6b:06:5e:d5:
                    f4:6c:44:dd:34:e1:6e:5e:45:fd:de:2f:bb:89:19:
                    0e:ce:9b:c9:60:ed:63:53:1a:dd:02:9d:d9:b8:fd:
                    10:7a:a2:c2:b3:4b:20:0e:72:79:a2:c5:81:12:9c:
                    32:7d:2d:3b:c6:f4:7e:44:64:02:c6:9a:23:a9:18:
                    10:45:21:b4:ad:70:5c:a0:91:7b:3a:df:40:f0:36:
                    52:cc:c3:cb:45:ab:0c:da:26:ba:a7:1f:a7:86:4c:
                    22:0f:96:a1:3e:96:bd:50:b2:83:7a:8c:48:a5:18:
                    e5:41:88:2e:eb:3e:46:2c:9a:b8:a5:58:07:c7:1a:
                    b6:81:c6:26:36:f1:bb:64:e3:2b:83:1a:d8:62:c3:
                    3b:3e:18:cc:84:f0:b6:70:65:4e:ab:88:67:0c:90:
                    3a:36:fb:24:b0:06:5e:6a:2b:74:f8:71:53:91:90:
                    0c:83:bb:7f:a7:00:62:0e:fe:46:6a:1b:af:dd:a1:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:93:F9:C8:94:97:FB:FF:20:4D:E8:17:3A:B3:05:6A:CD:85:17:DA
            X509v3 Authority Key Identifier:
                keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:72:b2:d8:d3:cd:ce:61:72:bb:f1:8a:92:48:97:36:32:95:
         a1:f9:66:35:77:13:7a:86:aa:d5:8f:c8:be:96:a3:0c:af:77:
         d4:73:55:a7:e2:cf:ae:58:27:24:c2:c1:0b:27:01:76:d5:47:
         87:1a:9d:52:4d:08:28:83:f3:1f:9f:6e:05:77:cb:62:99:ac:
         eb:a5:61:2f:c0:48:7a:bc:58:5a:96:ac:7f:26:79:1e:18:ca:
         01:f6:65:fe:a1:60:95:3b:42:42:8e:f7:50:6c:9d:dd:34:66:
         74:2a:68:32:1c:29:b7:42:34:dd:5f:26:ba:75:1b:66:c1:97:
         44:e1:91:5c:27:99:13:fe:20:ae:3e:ab:30:b6:ad:61:f9:4e:
         76:d6:e1:7a:54:60:32:5b:a0:34:7e:8f:44:85:d6:39:ef:09:
         2c:49:28:17:bb:1c:a0:38:0a:8b:07:41:4a:3e:ea:5d:8c:7d:
         f1:77:f0:1c:90:15:8b:a8:de:d6:0f:d2:47:a4:75:d0:60:6d:
         68:00:61:0b:49:5d:a8:9a:0e:48:7b:55:46:64:5e:06:9f:31:
         d9:5d:ae:60:28:81:2b:3b:5c:6c:6e:30:29:d8:bc:c0:37:ae:
         8c:1a:7b:29:8e:e9:f1:c7:7c:d8:6a:a5:e6:13:9a:9d:4c:92:
         67:10:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:46:17 2025 by rpki-client