Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
File:                     rqVXfKLwuifftTsIjifG2Uty7_c.mft (raw, json)
Hash identifier:          ydszLG/tfEM8krn9ey5O2SK6xhfzsIvSilzm8zyhspE=
Subject key identifier:   90:42:EC:08:23:CA:93:43:98:41:E5:C6:8F:BE:3D:40:5C:2A:00:2F
Authority key identifier: AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
Certificate issuer:       /CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Certificate serial:       019685803AA3A29D164862FB2DF919778D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
Manifest number:          0C0B
Signing time:             Wed 30 Apr 2025 07:01:35 +0000
Manifest this update:     Wed 30 Apr 2025 07:01:35 +0000
Manifest next update:     Thu 01 May 2025 07:01:35 +0000
Files and hashes:         1: rqVXfKLwuifftTsIjifG2Uty7_c.crl (hash: p6XztwfHXIbepbav7OanAzVJ5YqcCp1di4QJ65xNlOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:80:3a:a3:a2:9d:16:48:62:fb:2d:f9:19:77:8d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
        Validity
            Not Before: Apr 30 07:01:35 2025 GMT
            Not After : May  1 07:01:35 2025 GMT
        Subject: CN=9042ec0823ca93439841e5c68fbe3d405c2a002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:ae:83:38:41:44:c6:8a:95:d5:c8:3e:ee:
                    37:f6:5b:83:1f:40:be:08:74:c4:c6:39:45:f3:16:
                    1d:5d:32:72:3a:23:aa:01:82:f0:7a:df:29:6b:35:
                    ef:7d:7b:0b:0b:5e:d4:10:35:c8:91:ad:96:70:6a:
                    16:cb:bb:f8:ac:df:07:bb:23:23:ce:75:bc:f3:49:
                    00:01:bb:56:7d:df:ca:29:14:83:2a:9d:56:a3:1d:
                    d1:24:5b:cf:fc:e6:ce:d6:bf:7b:bf:f2:44:61:2e:
                    0a:26:73:13:81:0d:3a:b6:25:af:d9:fc:50:bb:1c:
                    65:b4:80:f2:9a:f6:e9:f7:20:55:99:f1:0b:5a:58:
                    f2:b0:a8:86:d0:ef:49:ef:64:c0:4b:00:35:e2:f5:
                    98:e0:5e:8a:d2:ad:2b:42:7d:30:ef:1c:11:d1:c9:
                    8e:88:1a:2a:7e:07:63:bb:47:3f:a2:1a:2f:f4:85:
                    2f:a1:cd:19:4c:d4:01:f4:a8:22:16:36:5f:4d:9b:
                    a7:d2:c4:36:aa:2d:3c:57:27:95:59:a0:7d:53:bd:
                    ed:8d:8a:2a:c4:fc:0d:3d:09:1b:26:4c:85:81:31:
                    a3:40:78:ee:82:2e:9f:e9:b1:00:8b:2f:a7:d6:5f:
                    95:3d:09:ba:74:0c:52:ad:68:2a:48:f6:03:1f:50:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:42:EC:08:23:CA:93:43:98:41:E5:C6:8F:BE:3D:40:5C:2A:00:2F
            X509v3 Authority Key Identifier:
                keyid:AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:cd:a2:3d:26:bc:d7:a9:b8:66:b0:84:df:5e:9a:2c:4b:
         1f:b6:8d:86:32:fa:25:5d:f0:8d:3a:34:6b:57:eb:f4:b7:2e:
         41:48:cd:07:59:21:b9:d4:56:31:f5:87:a0:18:b5:ec:68:63:
         14:84:2b:15:93:57:e1:9c:15:aa:e1:8b:3b:94:cb:f4:92:6e:
         1c:7d:8b:cc:d9:64:3d:ed:6e:e9:0e:67:15:91:fb:b6:15:e0:
         9d:08:09:7e:a6:96:57:e8:42:c6:58:18:15:d2:ad:03:7e:0f:
         f0:05:4c:9a:ca:0f:5c:48:d5:dd:a7:83:5b:e6:8f:7e:99:13:
         4d:81:b6:1a:6c:18:f6:4a:82:f9:4a:93:2a:76:a7:31:60:3f:
         51:a1:d2:5c:2c:6a:52:d4:18:1b:20:b8:d8:12:39:09:fe:dd:
         d6:f4:a8:2b:ca:c1:b3:0b:48:0a:a0:eb:1b:fd:12:43:6b:76:
         02:c9:91:4c:bc:27:2e:f0:38:fb:92:d4:e3:e6:54:61:1c:78:
         40:37:c7:e1:c5:67:5d:88:dd:21:22:1b:c5:65:62:f3:02:9d:
         92:db:2a:6c:5f:01:e2:d7:47:c9:18:5a:d7:21:69:9a:a1:3b:
         75:fb:d7:81:50:74:f8:31:b1:aa:da:66:eb:2c:be:c4:72:bc:
         72:4f:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:37 2025 by rpki-client