Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File:                     1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier:          T1yMVCaoyyGt5V9wxr116+Hc8W6bfWevPt6kRcMxUgs=
Subject key identifier:   59:19:D2:A6:41:99:89:C7:85:E4:ED:D9:E2:CF:93:6A:F9:87:C5:D8
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer:       /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial:       019677557FC5F88A67F948B52EEADF7C5A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number:          11F4
Signing time:             Sun 27 Apr 2025 13:00:14 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:14 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:14 +0000
Files and hashes:         1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: nkHPy2kX284Th+3z9wxhU41JbcmN2Pk/68b8I56fKWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:7f:c5:f8:8a:67:f9:48:b5:2e:ea:df:7c:5a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
        Validity
            Not Before: Apr 27 13:00:14 2025 GMT
            Not After : Apr 28 13:00:14 2025 GMT
        Subject: CN=5919d2a6419989c785e4edd9e2cf936af987c5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:df:32:62:b4:e8:86:52:39:9b:a0:47:0f:
                    93:3f:bc:66:21:b0:36:69:c4:e0:7c:89:3c:cd:69:
                    85:a6:97:88:9f:e7:9b:9b:0b:a9:f0:52:b0:dc:9b:
                    82:2f:8c:b9:33:2b:30:9c:ce:9d:41:77:21:ef:c8:
                    40:3b:5e:57:2f:29:0b:75:15:08:68:0a:81:5d:9d:
                    00:03:72:d3:76:4b:a6:de:ee:78:c8:82:fe:77:b3:
                    2b:fd:b2:46:ab:37:6e:8a:cf:8a:e9:c5:e0:f5:a6:
                    cb:78:84:6a:2f:fa:97:9c:48:a7:71:80:75:0f:ec:
                    0d:ef:a3:cb:7f:b8:b9:86:d4:95:be:a2:46:79:4a:
                    73:24:7f:f6:34:7a:6a:65:6b:27:90:62:64:f9:98:
                    01:f2:bd:8d:e8:54:38:32:31:90:0b:bd:98:33:33:
                    15:72:bc:de:59:8d:71:3a:59:d0:a7:c6:ef:1b:7e:
                    55:32:37:4e:c9:11:cb:2f:33:dd:5d:85:18:25:22:
                    b9:9d:eb:36:5a:82:53:2b:1a:0f:33:79:54:0b:9e:
                    12:fc:3c:39:2d:76:69:8b:f7:3f:9f:39:02:e8:8f:
                    2f:dc:02:8a:d8:0d:31:ea:78:3e:57:cb:a8:65:18:
                    8f:d4:08:48:a8:1b:d3:d7:26:2e:8e:79:0f:ca:31:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:19:D2:A6:41:99:89:C7:85:E4:ED:D9:E2:CF:93:6A:F9:87:C5:D8
            X509v3 Authority Key Identifier:
                keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:ea:16:93:7e:97:5b:97:ff:c1:a1:ee:50:28:0b:27:64:
         85:64:ca:19:6a:7a:ac:1b:48:3e:0a:b2:eb:88:84:6a:69:49:
         f6:14:d1:11:b5:bb:77:d8:97:0f:35:b3:5f:46:92:fe:36:ce:
         28:ae:73:76:48:09:dd:40:17:b4:36:0c:16:5f:65:68:9f:75:
         80:2c:44:5d:59:17:23:3b:3d:0f:2d:36:98:5f:8a:3f:3b:da:
         99:37:4d:af:ab:0d:9c:68:f3:47:ec:65:82:9a:20:44:92:d5:
         4e:42:c9:0a:8a:95:52:0b:e5:92:4f:f5:78:da:45:0a:54:2f:
         b6:5d:6b:3c:e8:db:95:1c:32:66:5a:eb:42:43:1b:84:b4:bf:
         ab:e1:3f:3f:b3:26:19:19:60:20:92:d9:f4:e4:ed:b7:bd:74:
         a3:a7:ce:8c:9b:c9:dd:53:ba:fd:a9:b6:3c:5b:b2:b2:15:28:
         e9:37:11:a6:bf:67:32:2b:62:6c:48:66:9e:be:85:c3:50:aa:
         af:79:9c:29:65:c4:fc:0a:24:87:a8:fe:45:42:80:1f:3b:8c:
         06:34:b3:9a:85:26:9f:42:49:bf:a4:ac:67:71:74:f7:4e:26:
         af:8d:ad:91:22:2e:ad:6f:9a:c5:60:4c:00:06:48:ed:00:26:
         db:ff:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:24 2025 by rpki-client