Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
File:                     AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json)
Hash identifier:          QxkRYLiOOB0GwGSLonDpM7WTddYbcdUUYuTsb+S/wMg=
Subject key identifier:   47:96:1E:54:84:A2:97:D7:44:31:6C:63:14:65:79:32:D9:CC:BF:05
Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Certificate issuer:       /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Certificate serial:       01967EA1A1BA4D06DB6D078C2C5BC59A8A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
Manifest number:          0A94
Signing time:             Mon 28 Apr 2025 23:00:43 +0000
Manifest this update:     Mon 28 Apr 2025 23:00:43 +0000
Manifest next update:     Tue 29 Apr 2025 23:00:43 +0000
Files and hashes:         1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: cbuVVYfP9znR1j3RRwT3Rs2o3pM25xR9+fy27Hoo3P4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a1:a1:ba:4d:06:db:6d:07:8c:2c:5b:c5:9a:8a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
        Validity
            Not Before: Apr 28 23:00:43 2025 GMT
            Not After : Apr 29 23:00:43 2025 GMT
        Subject: CN=47961e5484a297d744316c6314657932d9ccbf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:05:05:33:06:fd:8a:ef:1a:fe:26:29:8f:
                    99:b5:08:61:cc:c6:5e:86:16:d3:1c:29:65:89:b6:
                    4c:22:72:18:f6:58:b6:d9:2d:aa:f7:f9:b7:00:02:
                    45:89:dc:24:72:78:a6:02:5c:1e:b3:5d:21:0c:70:
                    c7:51:82:c5:af:ca:e1:f0:57:9f:b0:b8:b1:76:02:
                    d8:79:1b:84:e7:03:ab:90:83:1f:6b:38:49:17:83:
                    02:79:61:c0:b6:e0:50:30:b9:8c:85:b6:db:39:5f:
                    77:fa:77:c5:49:57:39:5f:a9:c2:8b:35:38:3f:13:
                    d9:da:a3:34:df:8b:da:ad:8d:5d:cc:5b:08:43:98:
                    5a:bb:03:ba:7f:2f:ec:f3:47:3e:eb:8a:46:d4:6e:
                    42:c7:ee:b7:2c:c4:20:cd:70:da:26:01:f7:0c:6f:
                    c1:7d:f8:41:a2:47:52:27:f2:e4:7f:02:51:59:f7:
                    bb:c0:47:8b:8a:01:cf:9e:33:11:bd:cd:fb:42:a2:
                    10:c1:aa:c1:7d:f7:e6:c9:1a:56:b6:c6:63:f4:7d:
                    b7:6e:1f:45:ed:c5:05:9e:b4:25:71:06:ba:d6:2c:
                    87:ba:31:30:62:05:99:bc:84:87:e5:87:d2:0b:0c:
                    e6:29:c8:4d:eb:b2:db:f1:ae:bf:c0:f1:94:0b:4d:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:1E:54:84:A2:97:D7:44:31:6C:63:14:65:79:32:D9:CC:BF:05
            X509v3 Authority Key Identifier:
                keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:60:fb:e7:e2:b7:e4:9f:62:1a:d0:73:e4:02:25:9e:9a:ad:
         b6:1f:5f:65:fd:8a:d0:4e:90:6c:0b:bf:a1:66:ea:9c:55:b9:
         12:f1:82:c3:c2:56:9f:6a:ba:be:be:41:8f:9b:a0:3a:0a:b0:
         3c:31:94:1a:f6:14:70:c7:64:ab:29:13:63:a7:18:71:21:e2:
         19:f1:a6:70:63:af:a9:d8:89:61:4f:14:52:49:06:5f:43:54:
         cb:cc:22:8f:8b:ac:da:f0:b9:8a:c2:21:c0:ef:de:e8:36:6f:
         b4:ea:de:0d:a1:27:76:2b:64:9a:03:da:ed:71:eb:dd:11:1b:
         1b:9c:c4:14:7d:26:e0:25:47:a0:96:1b:cc:1d:3d:ab:6b:b7:
         08:eb:7d:53:eb:8d:b8:5f:28:1c:fa:08:08:40:c2:59:53:69:
         4a:6a:3e:7a:ea:65:8d:f8:1b:fe:79:e8:61:49:be:da:df:c8:
         f1:3f:66:fa:7a:58:96:cd:18:5a:a0:a4:c1:2b:92:4c:74:5b:
         f8:45:73:59:7a:8f:9b:d7:bb:1a:33:05:91:83:e1:b1:da:e9:
         ba:42:64:b2:11:01:a9:23:e4:a7:32:a7:94:87:32:a7:61:2c:
         3b:3b:3b:75:59:50:85:fe:0a:f6:ac:8f:99:ee:d2:3e:c8:83:
         f7:99:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:33:09 2025 by rpki-client