Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
File:                     92O3x0pHzua9mbvGKu-DalYCtTE.mft (raw, json)
Hash identifier:          OTxCaQI68Sdc5MfBKeInHXl9R/6RYSq2gDHe7hEZrKE=
Subject key identifier:   56:2F:32:7D:20:A9:7C:EF:87:C3:B6:C7:12:5D:86:DF:E6:98:1B:8F
Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
Certificate issuer:       /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Certificate serial:       019686245A0EE6B7B9CC049DB8374CBD65F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
Manifest number:          049A
Signing time:             Wed 30 Apr 2025 10:00:51 +0000
Manifest this update:     Wed 30 Apr 2025 10:00:51 +0000
Manifest next update:     Thu 01 May 2025 10:00:51 +0000
Files and hashes:         1: 92O3x0pHzua9mbvGKu-DalYCtTE.crl (hash: 8yoIlFIxKx97aS0EBKPf3FA2s8Aid4/yI6kLYyr9Tic=)
                          2: wN1wFK2nod8Oc7XWg-Kjf2cevZI.roa (hash: S+MrRK13xZ8FD9NbutVvWutfcwGFlY+gNxR94qjOH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:24:5a:0e:e6:b7:b9:cc:04:9d:b8:37:4c:bd:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
        Validity
            Not Before: Apr 30 10:00:51 2025 GMT
            Not After : May  1 10:00:51 2025 GMT
        Subject: CN=562f327d20a97cef87c3b6c7125d86dfe6981b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:fb:a2:44:f0:48:99:1d:01:75:18:14:38:
                    ff:11:ce:2e:bc:ed:00:41:0b:d1:0a:67:92:04:a5:
                    56:4d:3c:f7:c8:1f:a5:e5:7d:9e:50:c5:f2:c6:65:
                    61:fc:69:95:03:cb:bd:d6:e7:ba:2c:58:74:d1:7d:
                    22:ae:77:88:29:07:d8:de:2f:6b:d4:22:ca:49:7b:
                    59:cf:23:2c:63:17:e6:72:7f:63:9b:42:90:d2:85:
                    ba:fe:9a:ac:d0:f1:92:ba:fd:e3:3f:c1:de:ab:f3:
                    06:0c:ad:8d:43:64:71:f4:ea:bd:44:34:bb:a0:54:
                    b2:bd:85:26:f9:f1:51:ba:92:91:a2:8a:11:d6:d1:
                    d2:06:f5:43:3d:53:bf:ba:e3:24:1f:9d:a7:e0:9d:
                    5f:ba:71:46:e7:87:88:e9:92:be:bd:a2:24:96:69:
                    34:b1:2c:d3:8f:30:62:f0:57:3a:62:dc:e0:59:44:
                    b0:82:7e:86:e8:39:0c:fd:8f:c4:5c:83:91:42:40:
                    ce:d9:e0:6c:a3:7a:f8:ad:52:f0:14:31:d0:a6:88:
                    b5:36:c9:6f:3e:da:82:6c:8e:24:d9:2e:66:66:80:
                    b0:ed:cd:cb:c1:76:bb:21:e6:45:fb:5d:bd:08:4b:
                    ea:54:4b:2c:f1:4b:24:da:53:f3:06:74:1b:c1:9e:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2F:32:7D:20:A9:7C:EF:87:C3:B6:C7:12:5D:86:DF:E6:98:1B:8F
            X509v3 Authority Key Identifier:
                keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a5:55:a6:ea:6e:df:af:94:b6:bf:95:2d:a3:8a:9f:92:04:
         13:5a:2d:16:e5:1a:0b:96:f0:ea:2b:82:58:64:c3:af:0a:56:
         ae:71:88:9a:dc:93:f4:7f:25:5a:0e:7f:23:cb:5a:69:18:0e:
         a0:4d:dc:26:91:76:bf:35:3d:4e:7f:64:43:3f:bb:0a:c0:11:
         2d:e7:de:b9:2e:57:56:72:ae:0a:39:ff:c9:5c:61:10:99:57:
         df:3b:88:27:ba:d7:a5:0d:e0:b1:d7:6f:ee:0b:12:f8:22:b8:
         37:da:2d:f0:a7:44:06:91:2d:df:a2:19:02:ae:2f:1e:a0:99:
         14:e6:e9:fc:7c:9d:ee:1b:a7:78:1e:73:d0:e8:11:da:38:a2:
         72:d4:c0:30:3c:e7:75:48:a2:e9:ff:d5:0a:c5:63:bc:7f:dd:
         f6:22:70:bd:0e:64:3a:43:21:2c:7b:2a:42:43:36:f3:1a:cd:
         0e:77:52:7b:2b:11:0a:c7:52:20:ca:ed:cd:cc:f1:d7:12:69:
         c2:68:66:97:90:8f:4d:62:4f:eb:bd:9f:76:8f:db:1d:15:9f:
         ce:36:89:3d:a1:b8:02:5f:8e:6e:c1:bc:93:9a:23:77:30:2a:
         8d:de:ad:6b:f5:f7:86:7d:86:c0:17:16:be:ad:23:82:34:fc:
         f5:65:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:47:18 2025 by rpki-client