Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File:                     4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier:          OwO/g6zV4bbGt/dTSOZ+DE7IJA967EI2TO2ug/Hz1XQ=
Subject key identifier:   61:C9:38:92:57:10:D5:6F:D7:12:1F:8A:20:8B:25:69:68:91:50:26
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer:       /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial:       0196748C77B355616CC717FD9A0860720D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number:          150B
Signing time:             Sun 27 Apr 2025 00:01:24 +0000
Manifest this update:     Sun 27 Apr 2025 00:01:24 +0000
Manifest next update:     Mon 28 Apr 2025 00:01:24 +0000
Files and hashes:         1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: 3I5GZbYU3zzolr5mCc175Eto9wwcRQgxu6s0kJ8P77A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8c:77:b3:55:61:6c:c7:17:fd:9a:08:60:72:0d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
        Validity
            Not Before: Apr 27 00:01:24 2025 GMT
            Not After : Apr 28 00:01:24 2025 GMT
        Subject: CN=61c938925710d56fd7121f8a208b256968915026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:41:aa:b7:cc:d1:23:59:05:0a:0d:2a:72:22:
                    ad:48:f5:b8:43:fb:b1:f2:b3:2b:77:fd:8a:36:a2:
                    11:af:1a:7f:2b:c5:a4:26:b8:15:73:4e:0c:35:73:
                    f5:af:f7:a5:4a:49:c6:1d:18:b7:9d:ac:af:1a:2b:
                    f1:de:18:d1:dd:2f:09:7d:35:df:4d:e5:d2:08:46:
                    c0:9a:8e:1f:7b:b0:fd:95:b2:c2:ed:98:18:12:b4:
                    c8:30:7d:bc:d0:01:93:43:00:c7:7b:e1:46:e7:91:
                    b2:f3:89:64:14:f9:28:45:74:10:bb:62:c1:ea:84:
                    5f:06:a0:b3:9b:45:15:c2:b5:e1:ed:02:8e:6b:7c:
                    fe:9e:c6:8d:3c:8c:3b:f5:e6:32:85:48:04:ac:ba:
                    14:85:89:cd:27:db:43:17:80:81:ea:94:d6:b1:a1:
                    fc:f8:ab:4e:1a:c2:ec:7e:1e:89:e0:8c:df:e0:dd:
                    5d:08:e2:ad:74:c7:75:55:43:e8:50:68:26:65:65:
                    f8:3b:eb:e3:c5:ca:93:ca:ff:dc:49:78:da:d8:ea:
                    f6:68:12:54:22:58:da:40:b0:68:61:c3:e2:3c:15:
                    f7:33:f9:ac:da:e1:49:31:04:97:f0:b4:75:9b:40:
                    6e:7f:21:77:d2:55:e5:85:8b:36:4c:d3:5f:ba:23:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C9:38:92:57:10:D5:6F:D7:12:1F:8A:20:8B:25:69:68:91:50:26
            X509v3 Authority Key Identifier:
                keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:a0:5a:ee:76:06:59:72:88:11:04:f2:d0:e9:d0:5a:ca:
         39:4f:62:a2:d1:3a:41:64:cf:b7:be:5d:56:26:9b:44:eb:4d:
         2b:88:99:20:99:c8:b8:f8:94:4b:89:63:80:09:43:95:4f:6a:
         d3:51:7b:3f:30:9a:3f:e8:bb:1b:f4:77:b1:32:ca:93:f6:ac:
         e2:50:96:ad:ef:15:ab:1d:10:52:ce:ed:96:57:1b:d2:40:5e:
         14:4f:14:49:d7:de:95:df:9d:45:cf:7c:3c:ba:fa:bd:4c:f6:
         9d:b5:e2:76:71:64:8c:e4:f2:07:c5:35:6a:28:94:9d:22:21:
         1a:07:df:ac:f0:59:07:99:c9:2d:8b:95:7e:5c:50:4a:c1:17:
         13:f7:bb:a5:d8:53:ef:e3:66:da:94:dd:b5:cd:fe:3e:08:f1:
         4f:8c:cd:2c:11:00:45:aa:ec:3f:ed:d9:3c:1a:d1:e6:06:07:
         23:53:50:64:b2:b9:02:68:b4:83:27:2f:44:f0:72:5d:65:a3:
         9a:38:67:25:ae:7b:01:77:02:b8:38:0a:29:13:d6:2b:58:ef:
         52:8c:79:32:e5:3a:84:31:90:ce:c7:27:d1:04:b7:7e:5d:9d:
         4f:6c:18:2a:23:f0:11:40:3a:f8:d9:6d:08:de:30:6b:1e:cb:
         41:d9:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:57 2025 by rpki-client