Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
File:                     mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft (raw, json)
Hash identifier:          bgXNMvO/dkaNS1CAn1rd8ubaJ9280MJqGSyLzoMOD3o=
Subject key identifier:   D6:BE:B3:40:9E:19:A0:32:28:0D:EA:8C:4A:EE:37:81:6E:47:E4:9F
Authority key identifier: 99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4
Certificate issuer:       /CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
Certificate serial:       0196741EC8A1FFA957200DD461562A518742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
Manifest number:          0839
Signing time:             Sat 26 Apr 2025 22:01:36 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:36 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:36 +0000
Files and hashes:         1: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl (hash: HuF2ntMubLIVaXg9C5i14kBrD/5tHGpMDHVFsamROx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:c8:a1:ff:a9:57:20:0d:d4:61:56:2a:51:87:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
        Validity
            Not Before: Apr 26 22:01:36 2025 GMT
            Not After : Apr 27 22:01:36 2025 GMT
        Subject: CN=d6beb3409e19a032280dea8c4aee37816e47e49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:be:50:36:a4:61:7a:88:fb:4b:61:c2:e9:
                    3f:e3:c2:a3:c4:64:6a:d3:9f:5d:2d:36:f8:03:90:
                    14:f8:20:31:70:d2:b2:a1:1d:ea:ff:d2:b8:d2:0e:
                    5e:dd:c1:b0:d4:47:9b:47:90:27:b1:2b:1d:3c:5f:
                    2d:29:8a:83:39:35:f3:f5:fe:12:38:8e:56:1f:4f:
                    3a:f5:a6:4e:42:ab:58:5e:55:12:94:5f:6c:12:9c:
                    f9:a1:33:9d:4f:7b:39:98:9c:35:96:5f:be:a9:c2:
                    16:c2:4c:8b:c6:48:9a:36:8f:34:71:a6:2a:e8:7f:
                    b9:11:e4:4b:81:72:7e:75:61:9a:d3:e6:90:67:bd:
                    cb:8a:7b:82:a3:9f:d3:41:52:3b:9c:d3:be:3d:7f:
                    08:d6:3d:ab:e4:c4:87:0f:c5:99:d6:f2:d2:3a:fe:
                    f2:3e:85:0c:37:1e:2c:ea:64:76:b1:93:5b:53:c8:
                    03:29:81:91:84:2b:94:9b:ac:55:9c:66:97:46:7b:
                    01:c9:7d:b8:a6:b4:b6:be:6c:e4:44:c2:09:fc:0e:
                    be:e6:b8:45:c3:5c:97:64:1c:0a:6e:22:77:b5:98:
                    c5:b7:d4:31:92:35:cf:5c:29:51:87:9d:34:64:22:
                    ac:69:e5:ce:c2:38:ff:b6:4a:26:cd:fe:b1:be:2a:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BE:B3:40:9E:19:A0:32:28:0D:EA:8C:4A:EE:37:81:6E:47:E4:9F
            X509v3 Authority Key Identifier:
                keyid:99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:58:72:77:0d:9b:70:10:00:8a:92:76:e7:6a:74:c1:17:da:
         a8:1c:aa:e7:eb:06:36:31:6b:4f:b6:e3:08:7d:8f:37:7a:21:
         84:eb:e3:d8:ed:07:21:f6:39:93:9f:36:6e:df:6e:b0:ed:d2:
         0c:13:1a:ac:65:b8:05:74:b1:2f:54:5b:f8:68:fa:6a:3e:8b:
         ab:37:6e:38:04:b4:c3:af:32:cf:c7:3e:2e:cd:20:ef:64:cf:
         57:60:dd:78:8c:76:cd:76:6f:0b:53:b3:10:57:57:de:2f:b8:
         36:26:b5:09:bd:39:b1:4e:ec:6c:0c:73:74:82:ec:42:6b:a4:
         e7:45:ee:f9:6e:eb:e0:16:14:87:83:a4:0d:ad:e0:7b:81:44:
         14:75:79:86:4b:e2:d8:57:c6:31:66:66:fd:e2:e3:88:f2:68:
         47:b8:bf:1d:0e:5b:25:4e:c8:bd:82:98:0e:e3:72:ca:f4:fb:
         d7:c7:ff:b5:f3:23:f9:d8:e5:33:8e:5e:b0:d8:c5:f0:8b:cd:
         0a:fc:dc:5a:57:c3:6c:dd:aa:fe:6d:78:af:c6:39:22:40:09:
         aa:ac:46:07:94:aa:b5:3c:57:d6:41:68:3d:e4:bf:5a:f8:71:
         5d:c6:25:aa:ae:07:52:9d:1f:0a:c7:32:2b:4c:e3:b5:d0:48:
         c7:00:00:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:33 2025 by rpki-client