Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File:                     9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier:          WSgYfJS+YfsJd/uBxAGN/67G2UpzbQZLIbXaRvG5tsM=
Subject key identifier:   E7:B5:50:64:19:15:2F:68:4C:5A:8C:34:1C:44:A1:FF:37:94:02:FA
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer:       /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial:       01969183A167380C8542CC01A5E4C2D7D948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number:          128A
Signing time:             Fri 02 May 2025 15:00:44 +0000
Manifest this update:     Fri 02 May 2025 15:00:44 +0000
Manifest next update:     Sat 03 May 2025 15:00:44 +0000
Files and hashes:         1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: 3ugWrv9I7dfkGS1Vl0ljI96ui57NBx9QTxM87kcmoYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:83:a1:67:38:0c:85:42:cc:01:a5:e4:c2:d7:d9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
        Validity
            Not Before: May  2 15:00:44 2025 GMT
            Not After : May  3 15:00:44 2025 GMT
        Subject: CN=e7b5506419152f684c5a8c341c44a1ff379402fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:3b:16:5c:7f:b5:1a:eb:7c:e4:46:7d:60:
                    c1:5f:67:64:6a:d5:02:64:e3:ed:4c:35:32:a8:25:
                    e2:8f:52:e7:18:46:c4:8e:fd:ed:7f:bc:e7:7e:0a:
                    f6:c1:92:41:1a:c9:5e:9b:31:be:80:47:f7:51:3d:
                    75:3f:62:1b:97:16:bf:aa:33:44:16:d5:46:78:90:
                    ca:1c:ca:09:37:e9:73:ca:a7:30:2d:f9:6f:51:d6:
                    14:86:02:63:96:3b:65:c0:49:3c:ef:a1:1e:2f:6a:
                    b5:7d:8c:8f:56:b6:d4:25:4b:53:80:3c:14:14:c7:
                    d8:78:bd:8f:dc:0a:8d:10:27:35:5d:26:25:72:81:
                    28:3e:34:cd:4a:66:fc:23:fd:dd:cd:9a:bd:ec:d2:
                    77:3d:11:77:0a:cd:8f:21:b5:86:92:59:88:8a:32:
                    29:bb:0c:91:47:9a:ae:dd:8e:d5:38:13:c8:b3:9e:
                    88:45:b3:18:96:5a:f7:ef:94:1f:ef:08:6d:7e:e4:
                    03:92:1b:75:dd:9a:ee:d7:c5:4c:00:14:3f:33:36:
                    a3:01:6f:be:80:2d:17:ca:e1:bb:fc:9a:ed:4f:17:
                    65:af:4d:81:45:56:85:68:49:d2:df:7a:fc:13:c6:
                    80:ce:44:01:3d:71:5d:0b:14:c5:9e:c9:e8:c3:50:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B5:50:64:19:15:2F:68:4C:5A:8C:34:1C:44:A1:FF:37:94:02:FA
            X509v3 Authority Key Identifier:
                keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:45:c8:84:2b:f5:20:71:2b:d9:c1:55:81:5b:f0:8b:b6:6a:
         93:c7:0e:fa:2e:06:3c:d7:c6:af:d2:f8:94:b3:fb:9d:28:ca:
         aa:95:d4:89:d3:d8:d0:68:da:f5:b1:09:52:35:86:e3:7b:4c:
         76:df:80:40:ba:46:57:3f:95:0a:01:01:9c:b8:05:aa:ba:e0:
         d5:82:88:1a:95:2a:68:f3:ed:d5:0b:8e:5a:a1:e3:bd:c4:03:
         1d:0c:cd:ec:cf:2f:e1:66:81:e5:bf:f3:f7:4e:0d:87:66:92:
         e6:3b:74:3a:04:99:cb:e0:ea:5d:2e:87:34:d3:7b:33:e6:b6:
         67:cd:3a:cf:41:b0:74:2c:3a:5f:2f:5a:ed:29:fb:d3:fa:0f:
         cf:a8:39:b2:34:d3:bd:e2:9e:87:64:44:cd:ec:57:a0:0f:a7:
         3d:43:e0:32:fa:1e:ac:09:1f:c6:51:8e:8b:78:da:9b:d2:2a:
         8c:73:7d:73:dc:6a:c3:4c:5c:b9:2a:58:5d:83:6e:57:8a:30:
         08:75:28:bd:56:51:5e:fb:ca:ca:f6:b4:68:50:4c:97:11:5e:
         76:f2:a6:c7:79:73:b2:b6:29:fd:aa:14:71:ea:6b:74:f1:82:
         86:86:5b:e5:e4:70:d4:82:2b:2b:c6:24:5c:8d:3f:2d:c6:9d:
         f0:18:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:28:45 2025 by rpki-client