Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File:                     xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier:          vqrIlZM1k16fMFQecs/ARmDu3Z95AunVXkxc4GucOP0=
Subject key identifier:   ED:C6:DB:8B:82:EB:C3:86:84:94:DD:24:87:FF:33:43:68:1A:DD:06
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer:       /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial:       0196CEE2648D8CEC03025397C75838F13CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number:          115D
Signing time:             Wed 14 May 2025 13:01:05 +0000
Manifest this update:     Wed 14 May 2025 13:01:05 +0000
Manifest next update:     Thu 15 May 2025 13:01:05 +0000
Files and hashes:         1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: AZ/amhCKvg6vI8oe3A+bzPKGXDCEDQOWy6mDKNaKb4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e2:64:8d:8c:ec:03:02:53:97:c7:58:38:f1:3c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
        Validity
            Not Before: May 14 13:01:05 2025 GMT
            Not After : May 15 13:01:05 2025 GMT
        Subject: CN=edc6db8b82ebc3868494dd2487ff3343681add06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:61:1a:0d:99:c2:fe:c6:c4:7c:53:ea:ab:
                    61:55:a7:62:68:c8:fc:59:c6:20:86:02:2f:98:f2:
                    37:56:fc:ee:72:b7:81:b8:be:ea:b5:72:2b:2d:0e:
                    18:d6:93:e4:11:83:09:59:cf:ef:ba:08:1c:a1:b4:
                    97:2c:52:2e:3a:f0:1f:2e:ae:d0:e5:5d:ee:b5:b0:
                    9f:24:39:70:e3:97:99:b6:d6:67:71:8b:42:33:fb:
                    1b:0d:3c:fa:39:ea:5e:fb:86:1b:43:98:fb:b5:7e:
                    7b:38:c5:7e:09:79:bc:0d:87:b2:85:6e:9c:82:ce:
                    72:80:62:9c:af:bb:70:19:f9:4f:8a:0c:b9:23:d8:
                    7a:78:36:c2:a4:d4:d6:48:ee:ea:dd:f3:49:8d:2a:
                    e4:b0:34:e7:52:30:d4:6d:7f:04:53:98:81:f0:31:
                    cf:bf:f6:f6:cd:50:90:e4:66:67:2f:0b:44:b8:74:
                    d8:13:5c:7d:00:5b:85:88:1d:a4:40:f8:16:6c:63:
                    d8:5f:55:ff:e6:67:4e:35:28:a3:64:d6:09:a4:02:
                    b0:08:74:1f:d6:2a:af:84:0b:53:32:a3:af:99:bd:
                    58:f7:3d:d1:3d:a7:ea:40:4f:54:88:06:94:94:3e:
                    a4:48:4f:93:4c:8d:69:a0:fd:5c:93:57:78:d1:7b:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C6:DB:8B:82:EB:C3:86:84:94:DD:24:87:FF:33:43:68:1A:DD:06
            X509v3 Authority Key Identifier:
                keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:f9:e5:5f:46:d0:3f:df:ce:55:03:fb:07:a5:d1:b4:e4:
         88:5e:54:68:71:5b:ab:d2:6e:ab:b1:91:74:9a:a8:4e:a8:ca:
         61:51:e9:e7:a3:a1:84:5a:cc:3b:35:0f:fa:d2:4d:16:a6:4f:
         61:78:e5:4f:11:76:63:f7:75:ee:81:8f:05:3e:f0:d6:5b:b1:
         80:98:5c:25:39:e9:41:eb:44:41:d5:8d:65:11:40:98:b3:3d:
         dd:cb:7e:8e:79:c5:1e:07:9f:ff:76:c7:d2:34:b1:11:ee:b9:
         54:64:ff:92:2f:39:a0:cb:40:ec:d0:54:e4:0a:76:47:fd:a6:
         f6:e0:53:7d:48:ce:39:f9:0f:00:f3:98:83:ba:87:a9:7e:28:
         d8:dc:2b:dd:29:b2:82:87:1b:26:e0:f7:44:47:32:18:88:af:
         a4:2b:53:98:59:81:c4:25:61:8e:f9:ac:ea:3f:c4:0d:d0:12:
         01:4a:f4:31:e7:f2:86:3e:07:b0:53:fb:94:67:f3:72:6f:60:
         45:8e:b2:03:84:06:a5:fa:c1:41:c4:e3:eb:36:47:62:96:9d:
         4f:7e:4a:f7:e7:d0:82:ec:df:a8:79:1d:19:d3:06:fe:81:06:
         86:05:61:f1:c6:e8:2f:28:c1:c4:63:2f:ff:f7:aa:91:2e:68:
         c5:e1:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:12:13 2025 by rpki-client