Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File:                     c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier:          SdyLQhpKYJTkYaL5qSka1TnumSVvMcg8MfiXSAaKQK8=
Subject key identifier:   AD:19:DB:BC:2B:36:D7:7A:32:2C:C2:0B:37:3E:05:BE:14:46:92:34
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer:       /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial:       0196A653A89EB28CCA1D65CE325F6C455E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number:          1524
Signing time:             Tue 06 May 2025 16:00:22 +0000
Manifest this update:     Tue 06 May 2025 16:00:22 +0000
Manifest next update:     Wed 07 May 2025 16:00:22 +0000
Files and hashes:         1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: 3yZZ3kDAZMJC5M9Pvs8oG+mwjIcgpVnh2P4U3A3YDJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:53:a8:9e:b2:8c:ca:1d:65:ce:32:5f:6c:45:5e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
        Validity
            Not Before: May  6 16:00:22 2025 GMT
            Not After : May  7 16:00:22 2025 GMT
        Subject: CN=ad19dbbc2b36d77a322cc20b373e05be14469234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:ac:cd:e1:36:70:54:69:27:3d:48:c0:4a:
                    b8:fc:85:4d:b9:4f:0f:79:18:a2:86:bb:57:87:28:
                    95:d6:47:14:86:26:92:14:c7:e8:65:6c:b0:c0:0a:
                    b6:81:1d:bb:11:ed:04:c1:d9:17:5d:b0:0a:a6:65:
                    d3:c9:f1:fc:3d:63:90:6a:ee:0a:7c:1d:24:70:be:
                    f0:da:57:f4:04:78:83:01:ff:75:c8:f7:bb:85:cd:
                    7a:01:c1:ba:ad:6e:3c:34:56:6b:d9:3c:94:30:d1:
                    6a:cb:bf:cf:fa:97:a2:06:b6:69:e1:12:18:c4:9f:
                    fd:c5:d8:0b:94:1e:ed:7b:a9:a9:d1:28:d1:2e:c8:
                    38:2b:fd:7d:be:4e:5b:0b:53:4f:df:aa:3f:35:4e:
                    25:af:a7:26:3d:91:fd:dc:ba:d7:7f:78:96:de:94:
                    2d:19:c9:3f:71:7c:25:0a:ac:db:4e:4e:5b:8c:6e:
                    30:5b:46:a6:97:d2:53:fa:41:95:d5:9f:cc:ae:eb:
                    da:12:eb:b9:f4:2e:e6:88:4f:cf:10:ef:22:33:f1:
                    41:7f:1d:a3:b8:34:2b:ba:45:c9:07:b4:d4:0e:de:
                    6c:be:60:98:6e:c7:66:05:38:94:45:59:50:e3:4f:
                    40:cc:03:3a:eb:30:ac:94:74:09:33:74:ae:2b:ba:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:DB:BC:2B:36:D7:7A:32:2C:C2:0B:37:3E:05:BE:14:46:92:34
            X509v3 Authority Key Identifier:
                keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:a7:5e:c1:ab:b4:28:f4:17:38:ac:8f:9c:f4:14:12:c5:
         5d:fa:8e:d0:96:e0:8c:11:62:f4:d0:09:d4:46:0d:65:2e:21:
         37:84:21:0a:f3:1b:a5:fb:98:6c:0d:f7:6d:86:1f:5b:57:63:
         76:c8:48:31:cb:22:39:c0:bd:21:e0:bc:8e:97:2f:5b:a1:75:
         30:90:04:39:27:13:56:c7:d4:42:f4:ff:5a:ec:57:fe:45:5b:
         52:e4:3a:53:bd:16:f7:d6:f2:f8:0f:81:36:0f:dc:30:a0:02:
         17:0d:ff:f8:cc:d4:22:3f:83:e1:21:c2:ce:55:18:ee:0e:62:
         42:48:24:b2:50:9d:4f:15:7a:15:32:d8:c0:42:f8:b9:57:e1:
         85:74:04:4b:bc:5c:98:0f:b3:6f:26:1c:f1:d9:2e:2e:ac:47:
         91:0a:c7:0e:3e:b3:98:1c:0b:77:d2:8e:56:64:5c:53:db:33:
         77:5a:8a:b4:3e:61:d6:36:b9:cb:a6:7a:c0:ee:0c:4d:96:a8:
         70:c7:6b:be:95:20:ef:b4:86:15:fe:2f:51:4d:a5:55:e3:cf:
         bf:1b:b7:ac:91:2f:2c:75:b4:a2:d6:cd:61:6a:6f:07:5f:c3:
         6f:e8:81:2f:ee:a9:d5:1c:2b:ef:ed:cd:53:71:01:60:7b:d3:
         73:5e:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:09:53 2025 by rpki-client