Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
File:                     xQkxs_iAn_sx6V_THf8pd6xAgHk.mft (raw, json)
Hash identifier:          TqxGY0a7qgjunNS8P3Kh3v0rrYfe8eAA9nfxf/dGxGw=
Subject key identifier:   93:8E:33:B8:D1:99:03:BE:99:1D:71:C7:C4:DF:A9:58:22:95:FE:DC
Authority key identifier: C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
Certificate issuer:       /CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Certificate serial:       01968EB920338365F6532C853DD85EB57BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
Manifest number:          03F2
Signing time:             Fri 02 May 2025 02:00:19 +0000
Manifest this update:     Fri 02 May 2025 02:00:19 +0000
Manifest next update:     Sat 03 May 2025 02:00:19 +0000
Files and hashes:         1: xQkxs_iAn_sx6V_THf8pd6xAgHk.crl (hash: apJP6cl4izJumyDft0mFDzTFpOnu3KUnccqFuCdot98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:b9:20:33:83:65:f6:53:2c:85:3d:d8:5e:b5:7b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50931b3f8809ffb31e95fd31dff2977ac408079
        Validity
            Not Before: May  2 02:00:19 2025 GMT
            Not After : May  3 02:00:19 2025 GMT
        Subject: CN=938e33b8d19903be991d71c7c4dfa9582295fedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:f2:e8:0f:a9:80:d7:51:4d:70:f0:15:b7:
                    ff:5e:07:b5:5a:1a:22:a2:89:e5:fd:b9:62:92:a5:
                    b4:36:30:6e:d7:34:f6:a4:ce:e8:94:4a:ab:14:3f:
                    f3:2e:11:e1:2c:74:8e:dd:7d:dd:3e:a2:35:52:86:
                    27:58:bb:ee:66:16:2c:93:fa:45:01:cb:b9:8c:e5:
                    99:ba:00:72:f1:3b:86:92:a1:15:7c:ce:27:82:43:
                    51:c9:20:b6:34:bf:9d:de:00:7c:01:16:cc:3d:a8:
                    30:3f:c4:f7:e7:7a:ee:3e:4a:64:b4:2c:29:14:89:
                    d3:ff:90:08:14:3e:61:b1:d2:5f:b9:1e:8a:ba:ee:
                    1c:1a:bc:e8:ad:fd:a7:e6:e7:3c:89:3d:9f:36:7e:
                    48:73:7a:e4:dd:3c:cc:be:27:1d:bb:1b:d3:4e:79:
                    16:be:e1:37:44:15:de:3c:c3:e5:b4:36:7f:ea:e8:
                    59:bf:59:b5:55:7a:5f:84:a3:ad:44:a6:f3:e3:d8:
                    2f:08:0b:13:a5:22:01:94:b6:73:09:87:6b:4b:f5:
                    99:b7:5c:1f:51:cd:b8:f8:9a:8a:54:7f:65:23:f6:
                    76:cd:84:04:ec:4d:ac:0c:5b:7a:0c:a8:6d:8e:32:
                    e1:79:f8:ff:ca:03:1a:a8:bc:d4:ae:3d:30:15:85:
                    fe:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8E:33:B8:D1:99:03:BE:99:1D:71:C7:C4:DF:A9:58:22:95:FE:DC
            X509v3 Authority Key Identifier:
                keyid:C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2d:20:0f:ad:4f:02:a5:8b:6e:1d:56:42:76:4d:d0:66:f7:
         4a:d3:00:cc:e3:ae:b2:7a:1a:c9:96:4d:30:ac:9e:ca:94:fa:
         b1:b7:28:0e:f3:a7:de:dc:b5:3b:4c:b1:ce:79:fc:cf:13:74:
         22:25:fc:5f:5e:b9:24:25:cc:e8:48:76:62:04:ac:50:a0:4e:
         f8:28:65:a8:d4:75:27:8e:16:69:f5:a8:1c:13:3d:9e:bd:db:
         61:af:a9:03:5e:3a:52:d8:a4:1e:e9:b7:99:01:e6:55:1e:23:
         46:22:e9:bb:e0:67:2e:83:25:01:61:bd:98:f8:f9:38:ac:e8:
         04:f4:d3:69:e3:89:a0:ba:df:92:28:a3:bb:18:0a:d5:06:c2:
         c9:40:17:0b:03:dd:bb:89:55:b4:06:35:73:09:69:3a:6f:89:
         ff:69:5e:e8:89:2b:99:c7:91:2b:7e:50:ed:94:25:b0:8c:64:
         f9:22:be:38:c6:92:39:27:45:71:75:a4:70:36:bd:73:ed:a9:
         05:1f:6a:35:93:00:30:a5:b3:b7:03:a0:77:0d:b5:05:db:e7:
         db:a2:b5:34:cf:a1:9f:20:a7:30:e6:dc:36:f5:c3:ef:07:1e:
         09:5d:e0:1a:75:9e:d2:fd:68:a9:f6:0d:1f:d0:e5:07:ed:29:
         7f:00:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:56:07 2025 by rpki-client