Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
File:                     VRy0WKT6JZKw_GZGRuJzws9HgkY.mft (raw, json)
Hash identifier:          LC244xpW6t/Ced6RBgZ7BqSmUHrbwaNHI6kD6pHImPw=
Subject key identifier:   56:59:39:21:EC:E8:D4:39:81:1C:5F:D1:6D:D5:47:29:42:3F:CA:FE
Authority key identifier: 55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46
Certificate issuer:       /CN=551cb458a4fa2592b0fc664646e273c2cf478246
Certificate serial:       0196857F150842CB4D63155BF93A83E25B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
Manifest number:          048B
Signing time:             Wed 30 Apr 2025 07:00:20 +0000
Manifest this update:     Wed 30 Apr 2025 07:00:20 +0000
Manifest next update:     Thu 01 May 2025 07:00:20 +0000
Files and hashes:         1: VRy0WKT6JZKw_GZGRuJzws9HgkY.crl (hash: B9RaO53T6ixpcu8GKHFUCc/nKVtSERxRcmSPoTWnjCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:7f:15:08:42:cb:4d:63:15:5b:f9:3a:83:e2:5b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551cb458a4fa2592b0fc664646e273c2cf478246
        Validity
            Not Before: Apr 30 07:00:20 2025 GMT
            Not After : May  1 07:00:20 2025 GMT
        Subject: CN=56593921ece8d439811c5fd16dd54729423fcafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:83:61:35:dc:8c:33:6e:77:23:25:af:c3:
                    60:86:ac:c8:e7:b9:e8:62:0a:e3:73:02:9c:a9:fd:
                    cf:cc:4a:11:46:81:55:69:7d:d4:a6:54:ef:e8:26:
                    53:8f:fb:28:7a:c7:a9:e0:83:7d:f5:dc:c5:7f:1a:
                    54:52:77:25:6f:fb:57:e7:59:92:5b:57:2b:f8:63:
                    91:82:bb:a4:8e:fd:4a:6d:94:72:22:fa:46:04:e9:
                    b7:10:ca:61:ac:f9:4c:75:6e:44:2c:b9:35:2a:23:
                    66:5b:79:02:6a:14:fd:ad:5c:f0:f9:81:51:47:71:
                    a2:eb:23:9c:95:63:e4:34:53:0c:4e:00:b1:c2:a5:
                    b7:d5:ac:7a:b7:a7:7e:a3:33:41:da:c7:b8:8f:d5:
                    31:de:93:1b:83:0b:f0:ba:01:4d:df:8c:10:c6:e4:
                    f3:db:0b:60:de:7a:08:67:27:1f:ec:e8:77:81:2f:
                    3a:c3:48:5a:35:2b:d1:9b:e7:84:b6:eb:8d:38:ad:
                    99:c3:67:aa:46:1b:04:4e:ff:19:6b:2c:8b:34:d6:
                    c4:4f:5c:c7:8a:14:56:21:b0:af:53:cf:4c:8a:14:
                    e0:9f:f3:21:91:0c:75:c6:ef:c3:cd:79:22:c3:ee:
                    6b:28:c3:07:c5:61:5e:34:cf:dc:bf:c0:51:9d:ac:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:59:39:21:EC:E8:D4:39:81:1C:5F:D1:6D:D5:47:29:42:3F:CA:FE
            X509v3 Authority Key Identifier:
                keyid:55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:66:44:3f:6f:fe:c4:e8:c4:c8:4c:6a:21:7b:0c:39:35:
         37:e2:0e:84:36:f5:3d:00:25:3a:67:b7:e6:f9:72:ae:e8:72:
         ae:74:71:be:42:b7:d2:30:ce:ee:ac:90:97:42:23:fe:b8:e3:
         f1:c4:ab:40:98:ef:26:3a:d2:1c:b3:eb:10:e5:b3:ca:33:5e:
         83:3c:46:90:0b:03:97:5c:1e:1e:3a:81:73:4c:87:4a:c5:76:
         2d:ab:04:45:74:54:0c:c2:3b:7f:d8:2c:15:2b:a6:24:f1:1d:
         0b:4b:1a:01:aa:ad:e1:b0:b3:6d:18:a8:75:7e:b3:86:55:78:
         0c:11:71:bf:52:60:73:4b:bf:a8:a1:0c:27:07:d7:39:e7:e3:
         9a:05:f3:fc:8c:35:f1:a0:ea:0e:2e:20:2e:60:df:04:93:5c:
         51:15:25:0b:dc:83:01:91:24:c1:18:ba:28:2d:eb:dc:c3:3d:
         3a:2f:95:15:39:82:bd:3a:9b:62:25:b3:de:44:b2:4c:74:2c:
         0d:01:a1:d5:0f:63:55:87:5d:d8:dc:4a:b2:94:b2:70:ef:8a:
         44:93:85:92:a1:32:d0:5a:ac:40:8c:72:be:01:8b:cf:b2:90:
         a4:a1:6f:0d:be:9f:df:cd:22:48:15:5e:3a:4d:16:32:89:9c:
         92:52:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:23:56 2025 by rpki-client