Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft
File:                     M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft (raw, json)
Hash identifier:          mzFLQAIIUHoPyz/5P3+3Bn8WbRRYBbeGZzZF4AwpnTU=
Subject key identifier:   10:56:93:3E:EF:2F:B7:DA:C5:AA:47:7A:98:FE:BA:57:EF:F6:AA:82
Authority key identifier: 33:63:D7:2C:DD:93:AB:02:FE:3F:78:8D:62:1D:71:5D:9E:FD:76:99
Certificate issuer:       /CN=3363d72cdd93ab02fe3f788d621d715d9efd7699
Certificate serial:       0196A2781486B1A37D7547F83705E8501BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M2PXLN2TqwL-P3iNYh1xXZ79dpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft
Manifest number:          110B
Signing time:             Mon 05 May 2025 22:01:40 +0000
Manifest this update:     Mon 05 May 2025 22:01:40 +0000
Manifest next update:     Tue 06 May 2025 22:01:40 +0000
Files and hashes:         1: M2PXLN2TqwL-P3iNYh1xXZ79dpk.crl (hash: 7dxOMlaHyoIM+OPvr7sxTjkeMbGTgoydU3a6oa/vuB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M2PXLN2TqwL-P3iNYh1xXZ79dpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:78:14:86:b1:a3:7d:75:47:f8:37:05:e8:50:1b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3363d72cdd93ab02fe3f788d621d715d9efd7699
        Validity
            Not Before: May  5 22:01:40 2025 GMT
            Not After : May  6 22:01:40 2025 GMT
        Subject: CN=1056933eef2fb7dac5aa477a98feba57eff6aa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:85:48:82:53:f3:b8:10:32:e5:fc:67:1c:
                    67:58:e3:9e:c2:b4:28:ac:22:8c:73:d8:09:61:bf:
                    cf:ce:bc:61:ce:b2:66:aa:7c:82:0d:4a:31:8e:56:
                    46:30:7a:ee:b3:7f:f2:76:34:6f:8a:55:67:13:a7:
                    f4:dc:86:01:a7:97:18:eb:34:1c:04:2f:58:aa:6a:
                    8e:96:42:eb:1c:61:91:64:e0:55:c4:9b:a2:8c:9d:
                    31:c7:e4:a4:31:c5:06:0f:30:0a:e4:57:a4:66:fe:
                    71:1e:dc:87:f3:f4:2b:ba:46:14:cc:ed:ed:dd:54:
                    db:10:e2:11:00:59:27:ef:a0:a2:f0:3f:31:7a:66:
                    d0:57:6d:84:c7:fb:13:3f:ae:45:8b:dd:1d:a3:60:
                    3f:d1:94:23:78:5a:7e:9c:65:c1:a1:7e:8a:87:05:
                    00:1f:aa:56:18:4f:3f:fc:f0:fc:ca:97:44:3e:d2:
                    64:56:aa:80:8f:5e:51:5f:67:f5:42:48:ab:91:33:
                    39:f2:2c:15:9a:85:4c:10:86:7a:48:09:95:a9:a0:
                    3f:16:34:1f:8a:21:d7:1b:59:fb:eb:93:04:59:41:
                    60:7a:fb:c4:87:ba:84:ed:82:56:d7:95:d2:94:69:
                    b2:58:5c:1e:d3:be:3a:7f:0b:3d:7c:94:66:ff:a7:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:56:93:3E:EF:2F:B7:DA:C5:AA:47:7A:98:FE:BA:57:EF:F6:AA:82
            X509v3 Authority Key Identifier:
                keyid:33:63:D7:2C:DD:93:AB:02:FE:3F:78:8D:62:1D:71:5D:9E:FD:76:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2PXLN2TqwL-P3iNYh1xXZ79dpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c9c0d8-7013-46c3-9c28-434f9e0d750c/1/M2PXLN2TqwL-P3iNYh1xXZ79dpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:2f:08:50:34:ea:a1:7f:47:71:4e:6b:1c:bf:e1:34:c3:
         4d:52:be:92:1e:87:64:35:01:f4:f7:48:7c:88:1c:b5:99:af:
         95:16:c9:cf:41:0c:3a:5d:04:a8:b7:79:8f:f3:61:c1:bd:85:
         bb:6d:f2:03:6c:16:17:0d:6d:64:d8:66:e0:b6:c8:d4:c4:e1:
         83:e4:cb:68:98:fb:18:21:c4:f2:47:6c:d2:9f:3c:bd:8c:3b:
         5b:70:65:86:a2:75:42:20:b1:54:5c:44:ad:fb:98:7b:7b:e8:
         0f:73:0f:bb:c9:d1:e9:d5:0a:4b:66:c9:ca:48:a2:22:6d:a3:
         56:6a:8f:2c:04:60:66:dc:a6:e6:16:7b:b6:31:86:33:49:33:
         27:0e:85:8a:f9:14:78:ef:b2:e5:78:8f:e6:c4:d1:23:be:98:
         10:c5:e6:cb:32:5c:00:24:f1:91:f7:c9:07:7f:4a:91:3d:e3:
         6c:44:5e:a1:06:ee:05:6d:c3:cb:3c:e3:6e:c3:80:e8:35:7e:
         21:0a:4c:a0:99:2c:ed:8b:6a:f0:3a:b4:b3:b8:90:dd:1d:fb:
         b7:a2:38:55:08:bd:ba:29:44:bd:cb:ff:3a:8b:63:23:54:00:
         4d:9c:d6:2a:5a:3e:eb:8f:a6:5e:d9:19:60:a6:8a:4b:bf:1d:
         5d:ab:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:12:41 2025 by rpki-client