Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File:                     pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier:          /JMfy8V+UFg4neCo2NiXDPrrlw44XlevSF2kVhO4vT0=
Subject key identifier:   B8:EA:9D:34:5D:39:31:A2:25:19:13:01:A8:F4:35:51:DE:0A:7D:F0
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer:       /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial:       01967567282F201D682C454240DBEB982C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number:          04B6
Signing time:             Sun 27 Apr 2025 04:00:16 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:16 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:16 +0000
Files and hashes:         1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: CblI5MIMq5FUacp4MxidTJbeoM0t8JfHLpqTOSAj2D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:28:2f:20:1d:68:2c:45:42:40:db:eb:98:2c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
        Validity
            Not Before: Apr 27 04:00:16 2025 GMT
            Not After : Apr 28 04:00:16 2025 GMT
        Subject: CN=b8ea9d345d3931a225191301a8f43551de0a7df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:46:0f:97:61:94:ad:7a:d0:8f:7f:45:a9:
                    89:6f:45:04:02:9e:de:4e:a4:88:e2:a3:e6:b2:85:
                    75:de:e6:5f:0c:2a:16:21:54:a7:73:14:c5:20:fe:
                    ae:d9:86:5c:ad:ff:f6:17:b1:a3:f4:cb:85:0f:ad:
                    6e:f2:a4:86:37:86:34:36:6c:52:9f:b3:8a:8d:25:
                    42:32:f4:fb:6e:1e:80:bb:1f:d6:f1:a2:b2:7d:16:
                    2b:2d:ac:46:84:39:2a:18:d2:79:0f:55:f6:4d:db:
                    d8:07:cd:0c:70:10:64:f0:8f:b0:d2:f1:9c:96:38:
                    6c:36:01:a8:c3:e6:ef:71:22:41:a1:15:f8:03:3a:
                    b9:f7:ac:99:c6:de:37:93:a2:1b:f2:50:56:17:ae:
                    0b:e0:74:ec:13:a9:15:c9:06:de:06:10:db:af:08:
                    59:44:2b:40:8e:09:f1:44:15:29:c3:38:e2:aa:94:
                    7f:10:06:e5:41:cc:1e:63:27:40:c9:72:8b:b9:30:
                    74:f5:90:7b:28:bf:c7:96:1e:a5:a9:b0:87:13:f1:
                    9c:9d:2e:67:cb:98:44:9c:8b:b0:81:20:29:59:04:
                    ef:5b:43:e4:5c:37:33:da:a2:67:8d:93:89:4b:b1:
                    39:34:83:07:75:dd:e2:d6:4b:5f:01:c9:56:00:3b:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EA:9D:34:5D:39:31:A2:25:19:13:01:A8:F4:35:51:DE:0A:7D:F0
            X509v3 Authority Key Identifier:
                keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:7e:a5:24:b6:fb:a6:f9:e1:c5:4b:16:2e:9a:0d:b2:f3:
         80:e1:81:10:ae:be:04:c7:ac:5e:59:67:f4:27:7e:53:12:a5:
         a8:56:a0:31:09:b1:43:db:82:05:16:d4:ef:c7:f8:66:d2:1e:
         e3:b0:cd:23:1a:03:7e:fb:b5:94:37:b8:38:1a:a0:c1:66:c6:
         6f:da:63:b8:1a:e2:6f:11:4a:08:20:d6:80:c0:77:68:78:68:
         0e:f5:e1:a4:d9:90:3b:90:be:62:0d:fc:62:a8:b4:c8:cf:ea:
         f0:7e:7c:1d:50:e6:51:bb:80:34:e8:35:f5:3b:e5:d1:94:8a:
         91:e5:85:4a:18:69:8d:1e:93:7e:d2:42:62:9f:56:3b:ac:9c:
         41:ff:05:ea:c0:92:76:00:af:e6:f6:2c:6b:57:bc:a3:e0:70:
         9c:36:aa:65:82:ba:56:71:fd:ec:fb:4d:15:9c:58:2c:7b:fc:
         e4:ea:34:e9:5d:8f:2c:61:91:69:2e:9d:de:bb:41:66:4a:11:
         b9:e7:da:af:3a:53:e6:70:8c:73:18:75:c2:f8:29:82:1a:cd:
         8c:85:02:4b:d3:71:f9:07:e8:9e:15:ec:a1:2d:c5:6a:cc:bf:
         43:cb:04:3d:45:7c:53:ee:c9:df:94:9d:d4:a6:58:89:af:19:
         c3:b8:47:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:25:54 2025 by rpki-client