Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File:                     fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier:          pd1GkXjLmJP+Lo4urSdcbIl0Y6g6QM2J/61pcvZBXI8=
Subject key identifier:   9F:E9:0F:45:48:4A:7E:FA:9D:29:93:C6:D4:99:2A:35:CB:77:7E:37
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer:       /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial:       01968AA634CA48F07B97A81C7DA2B2995845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number:          070F
Signing time:             Thu 01 May 2025 07:01:10 +0000
Manifest this update:     Thu 01 May 2025 07:01:10 +0000
Manifest next update:     Fri 02 May 2025 07:01:10 +0000
Files and hashes:         1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: 0WOLAS/EuyqokGNB5JigC55p/p60o+6/+iOSdUnweqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:a6:34:ca:48:f0:7b:97:a8:1c:7d:a2:b2:99:58:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
        Validity
            Not Before: May  1 07:01:10 2025 GMT
            Not After : May  2 07:01:10 2025 GMT
        Subject: CN=9fe90f45484a7efa9d2993c6d4992a35cb777e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f1:41:1c:49:3d:7e:71:bb:64:9e:8b:e1:cc:
                    59:cf:85:5b:25:8f:72:8d:5d:d6:19:2d:39:a1:98:
                    5f:55:78:08:8d:51:33:ea:e9:6e:d6:ff:79:af:fd:
                    7f:5e:b6:0a:34:3d:23:7a:b7:77:2a:29:f8:33:75:
                    67:6d:03:00:b7:2c:94:62:f4:41:c9:d5:b7:de:06:
                    c0:b9:0a:7f:c2:fa:13:bd:a5:6c:f5:0e:bc:e5:b8:
                    75:ca:53:4e:a5:99:75:ea:29:20:9f:35:b5:2f:d1:
                    3f:47:aa:12:3a:38:b5:aa:5b:bf:18:b8:1d:c0:27:
                    cc:9f:ee:c3:ef:e4:6a:a4:95:7a:6b:3e:51:53:5e:
                    12:b5:75:9f:79:ca:96:05:00:85:bf:a0:26:4f:17:
                    cb:77:ce:95:70:ca:d5:1e:0d:be:17:61:b2:7a:68:
                    44:86:81:c1:77:a1:db:6f:17:05:d3:3d:e2:6a:37:
                    2d:ad:21:4b:e4:a3:d4:6b:b5:e2:ed:1a:ff:d9:4c:
                    5f:75:a3:04:0e:0b:9a:8b:38:f0:d4:01:3c:b9:3c:
                    e8:cb:b3:0b:7d:8a:28:1f:0c:85:d8:b2:2d:e2:c6:
                    86:c2:d5:e9:42:c1:01:98:14:24:d8:a7:55:3a:d1:
                    0c:2b:7b:58:40:33:c4:1e:9c:88:b4:88:6e:1d:83:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E9:0F:45:48:4A:7E:FA:9D:29:93:C6:D4:99:2A:35:CB:77:7E:37
            X509v3 Authority Key Identifier:
                keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:6e:4e:8c:a7:cb:54:bd:99:47:2e:47:38:68:df:05:ee:15:
         7e:87:cd:60:23:ec:1f:15:17:93:33:22:49:16:7a:af:e5:98:
         90:eb:63:19:c1:85:bd:61:f4:3d:ba:84:69:2f:3b:b5:22:dd:
         0a:77:09:75:8a:26:4c:9a:b3:25:b2:1b:e6:48:a3:23:0c:51:
         33:a2:bd:a7:18:f1:65:46:bb:2f:94:ca:1e:e8:25:a8:bf:b3:
         8b:75:fd:59:6f:5d:61:49:7e:51:96:b4:43:14:a7:36:80:2c:
         b1:c8:74:58:76:1a:dd:6f:5a:44:13:65:aa:ad:25:9b:cc:d3:
         79:f0:e2:90:ee:aa:e2:16:55:d9:09:5f:f4:c3:45:43:2b:ea:
         22:8c:c3:58:37:a4:95:9d:09:1f:fb:78:12:60:50:3e:16:6d:
         dd:d6:66:40:92:96:60:26:69:22:6c:9e:2e:1c:bd:5d:28:5f:
         43:51:79:37:2a:b6:27:a5:b9:e2:cb:50:e4:82:b8:fa:57:0b:
         09:52:75:1c:75:1b:ef:2f:3b:c3:4a:16:47:df:a1:76:1f:31:
         f1:c7:a5:4c:c5:6c:a2:90:9e:75:84:72:74:b8:a7:8a:92:fc:
         a0:94:dc:0d:cd:5d:8e:51:9c:bf:38:84:52:10:90:70:dd:9a:
         ff:05:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:40 2025 by rpki-client