Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File:                     E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier:          L/t0+13Tn9pcourjZIOvd57hcX19xe2/0TSH7IHSyws=
Subject key identifier:   7A:8B:32:DB:56:FD:6E:9E:5B:16:08:A8:1C:0C:8D:18:E7:09:92:E3
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer:       /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial:       01969416605EF3E5B25137B59133313DCC4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number:          04A0
Signing time:             Sat 03 May 2025 03:00:16 +0000
Manifest this update:     Sat 03 May 2025 03:00:16 +0000
Manifest next update:     Sun 04 May 2025 03:00:16 +0000
Files and hashes:         1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: VSL3EjGzn9pa41gUMNCfs0R9piZj0dFyJcaawIyrob8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 03:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:16:60:5e:f3:e5:b2:51:37:b5:91:33:31:3d:cc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
        Validity
            Not Before: May  3 03:00:16 2025 GMT
            Not After : May  4 03:00:16 2025 GMT
        Subject: CN=7a8b32db56fd6e9e5b1608a81c0c8d18e70992e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:30:73:92:d2:67:7d:3b:91:cb:7a:9d:7e:a8:
                    a5:01:ab:d7:6c:86:72:e5:cb:71:51:24:78:0d:27:
                    36:9f:b9:b2:2f:a8:9e:00:02:cb:e3:32:de:28:b8:
                    87:0a:f4:43:5a:cd:ba:d2:4a:82:0e:72:65:d2:8b:
                    6d:83:a3:4a:8c:6a:a7:35:bf:e1:44:a3:d6:8e:3b:
                    68:51:d3:a9:c0:5c:36:23:a0:94:f7:40:cc:f6:f4:
                    a8:71:b0:4b:31:32:99:26:dc:65:bc:09:ea:42:d8:
                    6f:f4:a2:5e:ae:45:e7:e0:98:67:e3:06:fa:10:72:
                    26:ee:73:3f:c1:3f:72:53:77:9c:ab:27:7f:73:8a:
                    96:ac:f8:5c:03:73:fd:a7:92:98:99:61:ea:19:5b:
                    43:8b:91:29:cd:c3:26:7e:ab:3c:dd:01:df:ec:c9:
                    53:62:ed:dc:af:b8:ea:c7:42:37:38:5d:5e:0e:59:
                    cc:cd:28:45:25:cc:e9:35:5e:85:07:d1:8a:87:c2:
                    d0:b8:cd:7a:4d:fa:e7:e6:f3:11:4c:49:e5:7c:86:
                    53:2f:1c:16:9f:5e:b6:ed:fc:0d:fd:8b:71:6e:f5:
                    d5:c0:3b:25:49:55:00:9f:07:c8:ed:f2:4c:3d:ef:
                    69:d7:aa:40:44:f9:a6:da:7c:a6:4b:64:c1:67:a0:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8B:32:DB:56:FD:6E:9E:5B:16:08:A8:1C:0C:8D:18:E7:09:92:E3
            X509v3 Authority Key Identifier:
                keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:0b:6e:55:a4:e4:62:6c:0c:77:d8:85:d7:a7:ca:78:11:
         75:09:09:fe:fa:36:ae:db:c0:64:ae:5b:23:bb:fe:ae:6d:ff:
         4f:5b:a4:60:5e:37:a5:79:7c:d4:ef:47:4e:12:11:c6:d4:3f:
         00:a5:d4:d1:45:01:75:68:6d:dc:1b:5a:3a:22:9f:83:cf:45:
         3a:54:da:f7:08:a3:a1:78:e1:d1:9a:04:89:36:88:71:9d:92:
         bd:1b:96:eb:af:67:f0:09:b6:ca:2d:df:09:0f:f3:70:48:fd:
         dc:ea:82:22:93:7e:92:6b:44:1a:48:10:29:ce:dd:a8:52:05:
         1f:d6:59:cf:fc:66:16:63:de:16:4d:c3:6a:7f:08:a0:29:ff:
         17:a5:df:e2:32:08:a7:8d:2e:b6:fc:e9:9d:ea:a7:64:c9:09:
         72:3d:72:4e:19:46:37:56:90:a7:83:ff:10:d2:9f:cd:03:51:
         8e:d1:6d:d0:47:28:12:f3:8f:0b:98:34:73:ba:97:5e:30:ad:
         d8:5f:5b:61:fc:4f:d4:e3:c4:22:2e:61:eb:0a:61:93:72:a4:
         60:a0:cc:53:f1:c5:85:11:14:05:68:84:d3:86:e4:a5:20:0b:
         5e:b3:e3:77:cb:21:a8:b7:91:82:33:24:72:4d:b6:aa:31:9f:
         c7:6f:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:37:56 2025 by rpki-client