Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File:                     pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier:          eRydz1d6uqmDBrDwII24Z/WZ49kyY+3Aan1PaquJ6eU=
Subject key identifier:   79:D5:EA:C3:AF:44:AC:50:02:4E:23:61:9E:8A:B3:B7:AB:2C:87:10
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer:       /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial:       01967943F9BE105C4A57B00E0BD245E48C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number:          04B5
Signing time:             Sun 27 Apr 2025 22:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 22:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 22:00:20 +0000
Files and hashes:         1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: IFVc++//WLJxaVPDlgHLnddQ0IsUGgGGiuiQWU4L8mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:43:f9:be:10:5c:4a:57:b0:0e:0b:d2:45:e4:8c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
        Validity
            Not Before: Apr 27 22:00:20 2025 GMT
            Not After : Apr 28 22:00:20 2025 GMT
        Subject: CN=79d5eac3af44ac50024e23619e8ab3b7ab2c8710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:4a:35:6e:bd:30:81:42:84:09:42:1c:04:
                    78:dd:a3:e6:07:da:3d:69:38:b9:ff:86:0b:5d:59:
                    d4:b0:b3:46:7b:3c:78:01:be:ab:37:4b:e4:ac:61:
                    5f:20:1d:11:69:fd:6c:b9:cb:44:65:75:4d:7a:9a:
                    50:66:86:8e:d2:56:3b:4c:c9:17:6e:e9:3b:4a:b0:
                    8d:82:6a:f3:51:e8:b7:73:09:a6:da:e4:13:2a:e7:
                    57:2f:bc:f7:c3:f9:2e:27:55:83:f8:68:ef:9e:f4:
                    eb:1e:4f:23:b0:69:7d:a5:cc:51:bb:78:26:16:1a:
                    54:f4:60:a0:e4:5f:0c:ef:9d:48:8f:12:b6:b9:5a:
                    67:09:fa:af:18:08:eb:84:2a:05:1a:16:78:ac:60:
                    dc:b0:4c:53:15:fa:be:ed:d2:81:1d:e3:6e:53:2b:
                    f0:9f:f1:8d:28:02:81:a4:50:7e:91:53:7b:d8:48:
                    b6:46:45:86:16:c5:45:69:e5:3b:42:53:e5:ef:62:
                    36:a8:65:16:07:69:ba:63:cb:a0:1a:54:06:21:74:
                    62:39:76:20:4a:23:48:d0:66:29:5a:92:f4:44:ab:
                    6a:1c:ae:40:fe:68:a7:49:de:93:53:a8:0d:76:35:
                    28:4b:4a:6e:3a:35:cf:14:1c:ce:ed:0b:43:6c:25:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:EA:C3:AF:44:AC:50:02:4E:23:61:9E:8A:B3:B7:AB:2C:87:10
            X509v3 Authority Key Identifier:
                keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:10:e5:7b:0a:7e:ea:80:8c:0e:14:83:b8:be:3c:64:ec:d7:
         7e:3e:84:df:b8:75:03:fe:27:c5:cb:ee:f2:f8:44:9a:5f:47:
         69:fc:78:3d:3c:a8:96:42:bf:ad:b7:e3:0d:32:92:a0:66:25:
         5d:7c:28:bd:20:fa:bf:86:12:ff:f4:df:d7:06:94:05:56:a4:
         36:bf:85:6b:81:e0:3e:5e:93:6c:3c:68:65:61:11:cd:2a:41:
         4c:eb:57:26:26:99:ec:09:3d:dc:2c:92:94:08:7a:83:2c:a7:
         4d:18:24:4f:88:a0:c3:4f:2f:f6:73:85:00:ee:57:f2:f6:04:
         24:60:87:ab:2a:55:cd:8d:c7:2f:03:0e:d7:69:eb:d5:7a:b1:
         5c:bd:93:72:84:83:5f:2c:35:f7:16:c6:b3:46:da:76:00:53:
         d1:f1:35:d6:ec:f9:b5:26:13:77:23:19:de:22:55:fe:cd:69:
         85:f3:55:70:5d:bf:f0:35:62:37:8c:01:f3:0b:cd:69:a9:75:
         82:0c:74:5e:9e:66:33:ed:c0:f4:68:e2:9f:1a:a7:d0:27:d3:
         10:64:90:a2:fb:86:30:19:95:0d:6a:4f:f8:70:b1:72:c8:80:
         8f:af:fb:a6:21:98:91:99:ad:36:5c:8b:ac:ed:72:3a:bb:db:
         78:52:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:58:13 2025 by rpki-client