Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
File:                     Iwz5e62CJ98tajnFT2OCEIFQ9og.mft (raw, json)
Hash identifier:          +F8+SoFEZr2lRXEW1nTJUFasADH+tTfvQFW8XwkAWCw=
Subject key identifier:   FE:F8:2D:B0:AE:59:57:73:76:5A:39:33:12:9D:2A:79:9B:01:81:6B
Authority key identifier: 23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
Certificate issuer:       /CN=230cf97bad8227df2d6a39c54f6382108150f688
Certificate serial:       01968B4B715B33026733F49EBF041B488C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
Manifest number:          1439
Signing time:             Thu 01 May 2025 10:01:39 +0000
Manifest this update:     Thu 01 May 2025 10:01:39 +0000
Manifest next update:     Fri 02 May 2025 10:01:39 +0000
Files and hashes:         1: Iwz5e62CJ98tajnFT2OCEIFQ9og.crl (hash: k05SZYm9w1dsR1kC0E8aYqFmtUOPGQpdbv/Vh4+wG2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 10:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:4b:71:5b:33:02:67:33:f4:9e:bf:04:1b:48:8c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230cf97bad8227df2d6a39c54f6382108150f688
        Validity
            Not Before: May  1 10:01:39 2025 GMT
            Not After : May  2 10:01:39 2025 GMT
        Subject: CN=fef82db0ae595773765a3933129d2a799b01816b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:c3:8a:a4:8c:41:44:53:83:ac:33:17:d1:
                    dc:9c:cf:c9:9d:20:73:14:57:5c:2b:c8:1b:94:3a:
                    16:b4:de:d9:c7:6e:3b:bc:1d:4d:a6:6e:af:e7:c4:
                    2a:d2:1a:3e:f8:1e:b6:c6:f5:01:e1:ec:66:d3:00:
                    4a:58:ef:e9:e9:f6:13:1d:8c:e7:1f:b2:1b:e1:67:
                    8a:3f:18:00:5d:b1:09:09:29:b3:d0:a3:b0:69:6c:
                    09:d2:0d:eb:e6:d3:54:ee:d2:a8:fe:7e:39:ff:b1:
                    65:aa:a1:d0:82:e2:f4:ac:d3:1d:8d:2c:c0:74:1e:
                    e1:cd:49:37:92:5c:c7:69:6d:12:b2:1a:28:94:de:
                    ef:e9:af:43:ee:b4:d6:2b:b7:db:fa:5f:77:3c:e8:
                    47:c2:07:7d:a9:41:9b:b7:08:1c:be:d9:cd:ac:9d:
                    57:0d:60:60:f8:f4:da:df:ad:38:ba:71:cd:fa:c4:
                    af:8a:a3:c3:8f:63:fb:cd:99:1a:31:f7:9f:31:f7:
                    5b:d2:0e:eb:a5:09:77:b3:4c:1e:44:44:15:2d:35:
                    3b:ad:d0:7e:fc:d5:f5:0c:57:27:c1:c1:c5:ff:a6:
                    b2:4c:88:f7:23:72:42:ed:f3:d8:37:8f:45:c3:bb:
                    26:1e:17:8a:ed:05:f4:d9:2a:07:59:32:70:7d:c2:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F8:2D:B0:AE:59:57:73:76:5A:39:33:12:9D:2A:79:9B:01:81:6B
            X509v3 Authority Key Identifier:
                keyid:23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d5:75:a2:30:d3:ae:f9:0c:77:7a:b1:53:68:f4:5b:46:17:
         fe:f1:9f:92:ed:3b:ab:59:70:63:b5:f9:4b:07:06:80:5d:ad:
         12:23:49:0f:f2:5b:cd:3f:53:7f:c1:98:30:9d:a5:07:89:8c:
         82:e1:76:00:98:57:ce:b1:3e:d4:f5:a3:53:af:c7:55:59:f7:
         72:06:a8:a0:87:47:11:70:3a:c8:a3:a6:d1:3c:c0:6d:a0:2c:
         15:b3:40:50:99:ad:b4:7e:7c:6f:03:f9:93:f0:7b:44:f4:87:
         16:46:d4:9f:cc:e2:35:af:d3:7d:ba:37:b8:e8:0d:bf:35:a8:
         73:ce:0c:53:f8:c2:85:69:4b:9f:a3:db:e2:e8:1a:2d:ef:35:
         0b:cd:8d:64:eb:d3:e6:ef:2c:89:f3:aa:28:be:9a:30:47:4e:
         ca:e6:9e:17:24:3f:4f:97:b9:87:31:4e:2c:d4:2b:c6:fe:c0:
         5a:be:cd:9f:96:55:d9:83:bd:a5:72:cc:d2:0b:18:a9:46:e6:
         a6:7a:9c:e1:70:ab:f9:53:1b:ce:39:36:06:48:11:3d:9d:c3:
         34:1d:f2:7a:10:43:f6:6c:c4:75:31:66:e5:01:3d:97:ed:88:
         9d:0e:ec:a3:1f:65:9b:79:c5:06:de:89:1c:67:37:47:72:5d:
         cc:38:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:05 2025 by rpki-client