Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          vR+uKWNs/eEV3vrut/j7g+EiMnXNjm5LymZziLqrnCM=
Subject key identifier:   F3:8F:62:E2:91:79:14:94:E6:E7:A2:71:FA:9C:BD:C8:1D:57:A4:A5
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       0196881295F59D0BCE44AE7B7DCAD2B5728B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          0474
Signing time:             Wed 30 Apr 2025 19:00:41 +0000
Manifest this update:     Wed 30 Apr 2025 19:00:41 +0000
Manifest next update:     Thu 01 May 2025 19:00:41 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: t6lT/bk7aHj/SzfmTKcHHtwfxOE7MGLtfe6o2w2ij6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:12:95:f5:9d:0b:ce:44:ae:7b:7d:ca:d2:b5:72:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Apr 30 19:00:41 2025 GMT
            Not After : May  1 19:00:41 2025 GMT
        Subject: CN=f38f62e291791494e6e7a271fa9cbdc81d57a4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:34:e2:ee:c6:14:4b:b2:90:56:da:86:55:
                    0b:98:97:88:b1:11:84:c4:d3:10:e9:14:31:a6:7b:
                    94:fb:54:39:82:51:c5:c6:30:8c:fc:81:ba:bd:8b:
                    48:c9:81:93:1e:08:e4:de:92:14:0e:f6:b2:25:ef:
                    b7:11:91:fe:95:7e:33:20:4f:80:c5:a5:2d:ff:80:
                    72:24:c0:c8:c6:b1:93:4b:ce:05:18:7d:1d:f6:4c:
                    4c:9a:f0:34:f2:b0:0d:3a:98:15:f6:91:b0:74:eb:
                    da:89:e4:e8:5b:e0:e3:05:aa:a3:33:03:f2:33:8c:
                    b1:13:e4:fb:06:53:a3:5e:34:2a:84:dd:8d:ff:13:
                    64:ed:1f:34:eb:1e:6a:3f:d3:76:f5:0e:b8:27:50:
                    95:7c:1d:25:9d:0b:dd:ba:35:28:4b:29:00:1e:22:
                    22:bb:f2:3e:ed:e2:c1:23:a0:09:3c:54:aa:86:03:
                    60:53:b3:9d:dc:25:0d:01:0a:6b:ee:e3:d9:93:4e:
                    e2:11:6a:8b:35:56:2d:8b:bb:01:d6:f4:c8:37:f3:
                    31:b0:e3:8e:63:02:bd:ee:97:49:16:4a:30:a5:45:
                    7a:c7:f0:99:27:45:c4:5c:fe:ab:60:5e:e1:b9:6f:
                    e3:aa:4e:fb:6d:ff:22:af:a7:77:88:0a:96:45:4d:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8F:62:E2:91:79:14:94:E6:E7:A2:71:FA:9C:BD:C8:1D:57:A4:A5
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b8:22:5f:ef:28:95:22:c1:34:35:51:23:9b:2e:92:3a:8b:
         a5:50:eb:0d:6b:a0:f9:32:cb:f0:b2:f6:47:42:9c:b5:a0:34:
         25:f1:c6:4f:50:88:49:c3:f3:f9:38:41:0f:34:56:65:3c:a2:
         5e:58:1c:74:79:14:d1:74:99:09:ae:9b:09:d4:7b:82:f0:61:
         03:37:f5:b9:04:07:e7:7a:20:22:d0:b0:7d:8d:10:17:7e:c6:
         6a:e3:4e:03:2a:dc:80:8a:80:2d:d6:ee:f9:fb:d9:29:a1:96:
         a3:20:8a:46:81:28:1e:41:57:66:bb:88:81:3e:e1:cb:af:56:
         84:a3:2a:de:e8:f3:9a:6c:81:0e:50:99:9e:1c:63:bc:15:b8:
         ac:05:e3:78:c6:00:41:69:e6:23:e6:fb:03:1d:31:70:f8:af:
         5f:ea:35:7c:d6:17:47:66:b7:27:b9:15:4e:a8:fd:5c:74:97:
         ba:3b:78:4b:b8:c8:91:56:3c:bd:ea:6c:34:ae:62:22:8b:a1:
         c9:06:0f:8e:18:6a:0a:1f:e4:ed:fc:e7:6f:7f:2b:a0:cc:35:
         4c:f0:53:26:4c:20:74:53:9b:33:70:76:4d:d1:b2:06:7c:46:
         f6:b4:82:d1:0a:e4:c2:ae:17:5a:f8:2b:d2:1d:67:9d:0e:ae:
         35:f1:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:43:30 2025 by rpki-client