Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3bc0fe-bd80-4d26-a4b7-e29455a75033/1/atp5WPzWTsRLGZH01Xb9P6ZGoS0.mft
File:                     atp5WPzWTsRLGZH01Xb9P6ZGoS0.mft (raw, json)
Hash identifier:          KmakjABdBvI9vPQPCQ2PER0F+XENvFmD/eE7JLgP3aE=
Subject key identifier:   F7:69:D9:EF:89:6F:06:A0:5E:FF:57:06:8B:C6:00:72:1E:CD:56:C0
Authority key identifier: 6A:DA:79:58:FC:D6:4E:C4:4B:19:91:F4:D5:76:FD:3F:A6:46:A1:2D
Certificate issuer:       /CN=6ada7958fcd64ec44b1991f4d576fd3fa646a12d
Certificate serial:       01967BD83EA07EF9AC36215F4B0904AAC04D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atp5WPzWTsRLGZH01Xb9P6ZGoS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3bc0fe-bd80-4d26-a4b7-e29455a75033/1/atp5WPzWTsRLGZH01Xb9P6ZGoS0.mft
Manifest number:          09C4
Signing time:             Mon 28 Apr 2025 10:01:31 +0000
Manifest this update:     Mon 28 Apr 2025 10:01:31 +0000
Manifest next update:     Tue 29 Apr 2025 10:01:31 +0000
Files and hashes:         1: atp5WPzWTsRLGZH01Xb9P6ZGoS0.crl (hash: rR7hiWgXBFbadm3vRJZxCYZKxqN+TLpZgqMEKoAcnlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3bc0fe-bd80-4d26-a4b7-e29455a75033/1/atp5WPzWTsRLGZH01Xb9P6ZGoS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3bc0fe-bd80-4d26-a4b7-e29455a75033/1/atp5WPzWTsRLGZH01Xb9P6ZGoS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atp5WPzWTsRLGZH01Xb9P6ZGoS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:d8:3e:a0:7e:f9:ac:36:21:5f:4b:09:04:aa:c0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ada7958fcd64ec44b1991f4d576fd3fa646a12d
        Validity
            Not Before: Apr 28 10:01:31 2025 GMT
            Not After : Apr 29 10:01:31 2025 GMT
        Subject: CN=f769d9ef896f06a05eff57068bc600721ecd56c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:d5:af:99:db:b3:aa:39:d9:64:83:b8:a3:
                    57:7e:3c:34:99:ee:b6:c1:fc:51:eb:c3:b1:85:37:
                    66:60:e3:19:48:a8:0a:ce:63:d2:00:36:4c:32:da:
                    e2:81:20:4d:6e:3c:0b:40:e4:90:77:6e:fd:3e:a8:
                    6e:ff:b4:d4:61:f3:dc:d9:d6:75:42:b7:a3:f7:6e:
                    5a:bd:22:67:78:fe:0d:3e:f9:67:fd:05:24:09:e3:
                    37:29:c1:15:03:30:56:d3:32:81:53:c5:04:ad:3a:
                    22:d7:45:a0:a9:d0:84:9c:28:ac:bb:9e:b8:83:68:
                    5e:6b:49:65:2a:b9:36:43:36:34:69:45:ae:8b:b9:
                    80:1b:f7:20:03:23:95:f7:13:c1:7a:21:ef:92:bc:
                    ce:a8:79:31:9e:bb:82:77:33:84:49:d7:0d:e8:72:
                    80:57:2d:18:88:63:7d:07:6d:ad:f3:9a:bb:45:7f:
                    ce:34:80:8c:60:6d:20:4d:56:4e:e3:c4:1f:8c:97:
                    35:7f:4f:4a:b5:18:e1:2e:4f:fd:ec:7d:cd:a6:b1:
                    30:30:26:66:02:37:85:b4:4c:77:5e:24:00:c8:83:
                    70:8e:6f:f8:d2:37:49:d9:4c:d0:2a:fa:bf:2c:d0:
                    17:89:2d:3c:00:ad:08:f4:ec:86:b0:b9:b0:dd:22:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:69:D9:EF:89:6F:06:A0:5E:FF:57:06:8B:C6:00:72:1E:CD:56:C0
            X509v3 Authority Key Identifier:
                keyid:6A:DA:79:58:FC:D6:4E:C4:4B:19:91:F4:D5:76:FD:3F:A6:46:A1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atp5WPzWTsRLGZH01Xb9P6ZGoS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3bc0fe-bd80-4d26-a4b7-e29455a75033/1/atp5WPzWTsRLGZH01Xb9P6ZGoS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3bc0fe-bd80-4d26-a4b7-e29455a75033/1/atp5WPzWTsRLGZH01Xb9P6ZGoS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:ad:c5:20:e3:18:43:05:12:19:d7:2f:5e:99:ca:d8:d7:
         86:e0:a2:34:64:f9:a1:58:77:fe:05:17:29:91:cf:09:42:53:
         79:44:a5:94:67:69:10:ba:74:43:cd:73:3e:36:ee:9a:60:a6:
         ac:9e:fe:eb:d2:80:09:18:39:7b:29:d0:6f:95:63:1a:90:e6:
         d4:37:89:a7:07:fe:e0:c2:f5:91:db:e1:2d:c3:0a:78:d1:78:
         1b:da:54:e0:9e:6e:98:7d:84:43:d6:4f:b3:ef:bb:6f:35:fa:
         89:e7:32:be:23:50:3c:77:42:a0:5a:cf:8e:98:ae:d9:3c:ed:
         49:ad:b9:db:57:38:a5:1d:14:82:60:85:41:34:a8:52:62:4c:
         c9:37:3b:2f:16:e3:26:e8:ba:80:89:b6:ce:57:7f:ad:7c:68:
         28:24:68:84:9e:62:0c:63:22:f3:b4:66:4f:a6:b4:51:4c:9f:
         55:6a:e9:09:34:e9:85:3a:d5:61:e9:29:36:47:97:8c:18:4d:
         a4:0b:1b:d4:37:c1:97:58:81:c5:5a:57:fe:93:7c:fd:69:1c:
         8e:48:56:f2:d2:0c:61:85:12:52:9c:33:0a:02:66:87:64:0e:
         f2:d5:d6:2a:71:f3:8a:77:4e:d9:1d:c8:ae:3d:c4:91:35:31:
         2a:1f:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:12 2025 by rpki-client