Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
File:                     k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft (raw, json)
Hash identifier:          wgZsInMzjWpHQV8k0YcxNBE7sqa/rpS3gb3KCKO6/+c=
Subject key identifier:   63:97:98:0D:98:D8:D9:EE:C2:61:92:E0:22:65:37:02:AD:A7:B9:96
Authority key identifier: 93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB
Certificate issuer:       /CN=934449923648062d79433dc86d32efe42cacb3db
Certificate serial:       01967FB43AAFD2121961E5A9788EC8F10DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
Manifest number:          1512
Signing time:             Tue 29 Apr 2025 04:00:39 +0000
Manifest this update:     Tue 29 Apr 2025 04:00:39 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:39 +0000
Files and hashes:         1: k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl (hash: IxKaa/MA+2/wwpH99evb5QmmZSo1MTAHTj+DzWg8oBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:3a:af:d2:12:19:61:e5:a9:78:8e:c8:f1:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934449923648062d79433dc86d32efe42cacb3db
        Validity
            Not Before: Apr 29 04:00:39 2025 GMT
            Not After : Apr 30 04:00:39 2025 GMT
        Subject: CN=6397980d98d8d9eec26192e022653702ada7b996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:b1:fb:19:d3:76:f4:e2:fd:9d:7e:ec:60:
                    02:bf:af:00:b5:86:e8:08:1e:19:eb:71:4e:dd:75:
                    80:d8:51:d7:11:ac:6c:f5:55:d0:6b:0e:e7:d1:ba:
                    aa:e5:9a:0e:fe:d6:1f:0b:05:33:84:f8:f2:e9:19:
                    45:ec:1c:0e:b3:a9:99:c3:a6:8b:62:b8:86:1c:85:
                    ab:3d:11:11:d6:ed:f6:f0:28:d9:7e:82:81:82:90:
                    fd:bd:b1:58:f7:8e:6c:ab:c0:98:fd:2b:49:c8:21:
                    13:fb:79:b0:b4:af:41:0b:89:b3:10:dc:e8:38:b2:
                    bc:10:9f:36:2c:ca:f2:80:b7:74:f8:65:a9:a6:bd:
                    47:4f:cc:c2:2b:9a:00:bb:85:69:30:cc:4c:9c:7b:
                    b7:e0:5b:12:b3:1a:4c:37:55:c1:30:09:22:3d:7f:
                    31:72:a4:16:81:b3:80:03:a2:e8:da:c6:ff:2f:e5:
                    e7:f2:7f:a6:cd:a6:5c:57:15:5b:c2:84:dc:c6:e7:
                    36:75:90:20:df:c5:2a:97:80:f2:94:95:ba:dc:3a:
                    dc:7c:26:ee:c6:21:81:17:95:e4:3b:70:a5:ea:42:
                    9c:1a:64:e0:66:e3:1b:0a:00:58:d1:6c:c3:fc:e5:
                    27:a1:e9:77:6c:1c:c6:f7:af:d4:a7:bf:4a:68:d0:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:97:98:0D:98:D8:D9:EE:C2:61:92:E0:22:65:37:02:AD:A7:B9:96
            X509v3 Authority Key Identifier:
                keyid:93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a7:43:b7:b8:62:90:ed:d6:01:64:b5:c5:15:ec:54:04:fd:
         84:c5:5f:1a:1a:b0:84:05:bd:5c:f6:60:c2:f8:af:b1:b5:47:
         de:ab:dc:f7:55:c8:e7:e1:42:64:81:92:16:c5:98:6b:4f:bb:
         b9:29:3d:9c:a6:b4:1a:40:ee:8f:91:3e:6d:4c:29:06:81:e3:
         19:c2:cc:7a:ce:af:4d:8a:0c:5d:3a:1a:f2:50:48:bd:0f:c3:
         00:c4:96:7b:40:1f:49:1f:0e:3d:b4:d9:22:cb:90:36:cd:85:
         92:cc:7e:1a:dc:7d:2d:b1:7e:f9:47:56:39:f2:18:ab:80:b0:
         24:78:0d:bc:cc:80:52:09:f5:66:1f:1c:f7:cf:a1:0f:16:2f:
         46:03:13:dc:5f:d9:60:fb:a4:31:f7:92:f1:a6:59:69:e4:b5:
         c9:a5:b7:30:f9:af:a5:1b:1e:14:f0:e0:4b:48:b3:f2:07:78:
         94:33:49:22:ed:5e:07:27:bf:32:12:16:fe:9d:79:96:6c:d9:
         34:ed:b8:df:69:08:e8:e4:e1:37:89:46:28:4f:66:5f:23:69:
         31:df:13:88:6a:90:09:73:bc:6a:b9:53:e2:97:b5:43:41:6a:
         0c:b8:99:96:f1:53:cf:0f:ca:bf:6d:b3:a8:30:f2:e8:9c:12:
         1c:79:ac:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:52:51 2025 by rpki-client