Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
File:                     n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json)
Hash identifier:          bQ6LByuEHz039YbjNZPXc7iZ84XbyphGqfv45HzznAA=
Subject key identifier:   C1:7B:07:38:DA:2E:0A:96:90:BF:0A:49:E8:1E:0F:8E:C6:D3:92:78
Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
Certificate issuer:       /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Certificate serial:       019690715ED8A9E6491CA97A65D933A120AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
Manifest number:          02B4
Signing time:             Fri 02 May 2025 10:01:11 +0000
Manifest this update:     Fri 02 May 2025 10:01:11 +0000
Manifest next update:     Sat 03 May 2025 10:01:11 +0000
Files and hashes:         1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: XIwVAsms74VbJYpQ3DHbVwhev0lKQ4ACvc+L7FKFogc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:71:5e:d8:a9:e6:49:1c:a9:7a:65:d9:33:a1:20:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
        Validity
            Not Before: May  2 10:01:11 2025 GMT
            Not After : May  3 10:01:11 2025 GMT
        Subject: CN=c17b0738da2e0a9690bf0a49e81e0f8ec6d39278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:ed:9d:b8:4f:7e:62:bd:ca:4f:3c:ef:eb:
                    4d:07:8d:b4:db:1c:03:48:6f:cf:6f:30:9d:31:61:
                    fe:5f:17:bc:3a:0c:f1:0c:82:7c:c5:37:18:ad:23:
                    72:53:24:13:ac:cf:58:e9:dd:e2:29:7b:ad:f9:49:
                    de:12:1c:0e:34:24:97:ea:c3:52:f8:52:b0:fe:07:
                    95:72:f3:48:f7:c0:0d:8d:19:02:34:e4:fb:1c:69:
                    74:94:c6:bd:4f:b7:06:86:75:ee:66:a2:7d:06:bc:
                    46:fb:6a:ec:c9:4b:5b:2d:1d:33:16:26:5b:64:3c:
                    c7:ed:7b:a3:c0:6f:2c:95:e9:95:1d:dc:19:96:0a:
                    d5:49:35:63:64:1a:61:26:46:44:3e:65:59:99:55:
                    a1:88:e1:4c:61:e3:f2:34:f8:92:40:f1:ce:41:de:
                    58:ae:9d:96:55:22:3d:ce:ce:da:8d:32:98:03:fb:
                    ca:13:1c:69:52:62:3a:ca:e5:b9:18:2d:5b:d6:9a:
                    ef:a1:03:50:36:3c:43:72:cb:4f:50:e3:a1:e0:3f:
                    7c:41:ba:a6:53:28:e9:7a:26:af:d8:a7:08:1e:66:
                    13:92:75:d4:ce:90:df:49:fc:31:1b:85:a1:a8:5e:
                    29:c6:8c:a4:70:20:fc:31:92:cf:81:1e:4f:f3:09:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7B:07:38:DA:2E:0A:96:90:BF:0A:49:E8:1E:0F:8E:C6:D3:92:78
            X509v3 Authority Key Identifier:
                keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3b:90:74:d9:d6:55:71:98:f7:a0:1a:cd:59:98:5c:90:66:
         e5:85:8b:b8:39:b4:c1:40:3d:76:72:22:be:7f:95:eb:02:79:
         cd:83:d4:43:a7:e0:e2:a7:6a:a3:3f:76:36:43:9e:41:96:a3:
         39:b9:6f:72:dd:00:cb:d7:a7:32:fb:70:1f:b8:b7:c0:b4:71:
         10:6c:64:92:d7:f3:9a:3b:e8:e8:49:40:d6:af:8d:32:8a:2e:
         40:40:62:03:4e:10:56:fd:7b:cf:19:0b:74:56:71:51:97:bc:
         ee:80:f7:ab:ef:83:66:98:82:b5:c1:a7:1d:35:8a:08:8e:da:
         45:c9:d2:ac:83:1a:d9:96:2e:1d:8b:85:51:ee:29:e8:e7:d8:
         c1:ff:c0:b9:40:1c:fc:7b:39:38:2d:dd:13:aa:43:69:2a:bf:
         05:41:d9:91:0b:f4:79:80:49:be:29:52:db:da:ed:d0:e9:11:
         f4:0d:3a:55:35:b9:e4:e3:f1:93:09:f2:41:ec:6c:7d:11:d8:
         b4:a2:6c:76:0b:4e:db:a8:61:76:b9:b2:9a:14:c6:f8:fa:31:
         78:c0:34:4f:0a:5b:52:a4:6e:c4:64:99:da:db:14:8d:8f:ea:
         5e:0b:1a:0d:23:29:4e:ee:89:f1:f6:5c:81:6e:40:ff:92:9b:
         ba:48:06:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:51:06 2025 by rpki-client