Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
File:                     _s7aKggEQpcq6nJV-LM6dg7LMcs.mft (raw, json)
Hash identifier:          yJO4iumX+VH+bazN2BlSlt/ACskRpMnFB6dbtO3lldM=
Subject key identifier:   20:EC:BE:87:08:D2:D2:9D:96:4C:33:86:FB:D4:B1:B8:58:94:20:30
Authority key identifier: FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
Certificate issuer:       /CN=feceda2a080442972aea7255f8b33a760ecb31cb
Certificate serial:       019677FB24868650797FB8AF8E78DB208243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
Manifest number:          0B19
Signing time:             Sun 27 Apr 2025 16:01:09 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:09 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:09 +0000
Files and hashes:         1: _s7aKggEQpcq6nJV-LM6dg7LMcs.crl (hash: N1X6CJa21qrAKgSkkSqioYzLuGImbTvRYZBxs3ySxiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:24:86:86:50:79:7f:b8:af:8e:78:db:20:82:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feceda2a080442972aea7255f8b33a760ecb31cb
        Validity
            Not Before: Apr 27 16:01:09 2025 GMT
            Not After : Apr 28 16:01:09 2025 GMT
        Subject: CN=20ecbe8708d2d29d964c3386fbd4b1b858942030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:81:94:56:38:d8:78:bc:46:4c:71:a2:8d:
                    ef:28:36:d4:89:8d:dd:ac:09:1c:cc:07:88:c3:54:
                    a8:65:a9:b4:4c:d9:3d:92:93:80:d1:1d:9a:72:7a:
                    1d:a2:36:cf:58:f4:0b:1d:a8:4d:e0:3d:b4:f8:71:
                    e0:c4:94:89:31:20:68:b8:7f:26:98:7e:a9:3a:a5:
                    41:68:98:50:fe:91:f8:1a:07:ff:96:35:f7:39:5c:
                    6e:51:c4:5a:72:4d:41:fb:20:b0:f8:ba:91:df:1a:
                    76:28:d4:a1:4e:88:24:1a:5e:a6:99:a3:e2:a5:ef:
                    8e:a6:b3:3a:c5:3c:30:f5:11:81:bc:6f:50:56:f9:
                    4d:6a:f5:29:fa:02:bd:a5:7c:ae:33:e6:15:ec:41:
                    0c:db:c1:9d:fe:ca:9e:6c:2b:72:0e:a6:c3:45:d3:
                    cd:1e:ca:7e:ab:8a:b4:18:3f:09:88:3e:d0:7c:ab:
                    a3:36:56:6f:49:43:17:a7:8e:35:8a:5f:b1:70:b2:
                    aa:75:07:98:68:0b:1f:d8:19:4f:be:4e:22:3e:eb:
                    dc:f0:ca:74:ef:d4:2e:cf:6f:26:ff:19:77:71:2f:
                    c4:9b:99:75:98:92:59:14:09:0f:23:07:36:e9:5a:
                    8d:24:89:45:de:dc:0b:20:d7:a9:92:39:93:07:24:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EC:BE:87:08:D2:D2:9D:96:4C:33:86:FB:D4:B1:B8:58:94:20:30
            X509v3 Authority Key Identifier:
                keyid:FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:c9:ff:79:5c:4f:4f:e4:18:d4:8d:2d:ea:89:77:f6:5f:
         4f:46:3c:86:05:e3:2d:5e:f8:97:04:48:17:22:80:de:7c:12:
         f3:37:3d:3d:30:68:05:0c:a0:d3:d5:b5:68:ee:ff:de:f6:99:
         83:e7:37:b0:2f:5a:40:83:08:12:fc:e9:c1:35:f9:b8:13:ec:
         96:c2:d7:47:27:ea:3d:28:4a:7c:e1:21:9a:c1:26:85:e7:13:
         53:1f:92:00:7f:3a:a1:d9:3a:d3:20:ad:1e:c0:32:cf:32:dd:
         0e:17:66:86:c9:57:3e:34:f0:8c:ea:bb:29:e3:3e:ed:10:a0:
         0d:80:c0:45:16:6a:c5:38:3d:10:cc:5b:6b:79:85:8b:b9:2a:
         60:41:85:07:4a:f2:b2:c6:bb:b5:15:3d:13:69:3f:92:10:10:
         17:36:aa:e3:35:4d:4b:a2:6c:18:16:9a:49:ab:64:e9:00:bf:
         a6:7f:20:2c:11:66:b5:5c:ca:ba:27:c6:41:72:17:41:6f:8e:
         0b:a2:8b:0c:fe:55:84:c5:bd:de:6a:d4:67:ec:42:c5:8d:e3:
         fc:f1:7b:53:6c:0f:4a:dd:20:86:67:e4:a2:34:d0:8f:28:47:
         ae:48:35:93:0c:a2:68:6d:fd:68:28:cf:b7:6f:cf:9c:3c:e5:
         6c:4b:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:09:39 2025 by rpki-client