Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
File:                     EMTixWLflMzKm0ggghD9Fs-6kjU.mft (raw, json)
Hash identifier:          N63grwiVuDpHN0iRTMOwj+4GwIvT4O635VxA4z3p4Zg=
Subject key identifier:   F3:22:A0:74:70:A7:C6:ED:78:CE:0B:00:E2:72:CE:F0:3E:52:C1:20
Authority key identifier: 10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Certificate issuer:       /CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Certificate serial:       0196BD8101C02E5A8ECA25CC4C6D7782F0E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
Manifest number:          1531
Signing time:             Sun 11 May 2025 04:01:10 +0000
Manifest this update:     Sun 11 May 2025 04:01:10 +0000
Manifest next update:     Mon 12 May 2025 04:01:10 +0000
Files and hashes:         1: EMTixWLflMzKm0ggghD9Fs-6kjU.crl (hash: ivqUVP+OQkSq1w19TvXEDu7oBzUp3BPElsEEZfNPdfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:81:01:c0:2e:5a:8e:ca:25:cc:4c:6d:77:82:f0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
        Validity
            Not Before: May 11 04:01:10 2025 GMT
            Not After : May 12 04:01:10 2025 GMT
        Subject: CN=f322a07470a7c6ed78ce0b00e272cef03e52c120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3e:da:8c:c3:1c:9b:49:69:6b:e9:bd:74:db:
                    9e:8d:1c:b4:51:01:83:ef:21:a8:56:19:55:79:8f:
                    ef:72:5d:19:7b:b4:3a:21:e5:29:7c:d1:b1:e1:92:
                    d4:c8:2f:2d:49:ad:08:46:96:41:ee:3d:d5:90:7d:
                    ad:c8:66:b5:d2:34:f4:3c:00:49:19:45:b1:47:a3:
                    e9:db:af:d2:93:93:d6:00:be:b0:d9:03:65:a9:39:
                    00:a9:0c:66:ab:74:7f:15:0e:a3:4a:cb:06:02:02:
                    09:f7:05:59:d4:60:f9:17:99:b6:43:4b:17:00:30:
                    0c:34:2c:3a:06:cb:d4:35:ac:44:b1:0f:29:96:dc:
                    c4:9c:a9:f1:ae:5b:ca:24:ac:a7:8d:60:e1:d1:a1:
                    11:e2:02:60:a2:a4:04:b3:2f:ce:e1:c4:67:af:07:
                    61:6f:7c:93:58:24:d0:3d:5c:e2:49:19:57:df:ac:
                    c0:d2:69:6b:db:ad:e6:e8:a3:1f:b3:8d:df:93:7a:
                    08:7c:77:1f:77:3b:e4:f0:9c:62:ee:c8:41:fd:da:
                    68:fb:13:9f:90:12:a7:48:b1:3a:4c:db:fd:f9:28:
                    ea:77:b4:b7:23:1b:a7:76:0a:b2:6a:e7:a8:ae:49:
                    2d:99:cb:f8:cd:b6:05:68:2d:45:44:54:66:41:f9:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:22:A0:74:70:A7:C6:ED:78:CE:0B:00:E2:72:CE:F0:3E:52:C1:20
            X509v3 Authority Key Identifier:
                keyid:10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:3b:dd:c2:6f:41:e6:2e:cc:92:b3:e8:fb:7b:69:b7:d7:
         4c:72:45:f1:75:9b:9a:51:6d:17:7d:ec:b7:28:3d:46:3e:52:
         29:79:78:ef:33:70:0c:09:d2:9c:9e:f6:33:5b:1c:18:bf:ee:
         ab:6a:2c:f8:22:16:51:d5:05:7a:67:07:9b:db:af:e9:8e:46:
         87:0d:10:9d:b5:4e:42:d8:14:0f:e4:16:50:95:a0:be:b9:ac:
         0f:0e:0c:73:8a:2a:0b:4a:ec:84:87:25:90:d1:dd:ba:4e:27:
         04:ba:b7:48:9c:1d:11:bc:18:a9:09:c4:01:eb:5c:d7:31:d0:
         08:70:65:d1:2e:77:52:df:12:8e:0d:99:a8:85:b5:1d:74:31:
         94:45:69:a6:bd:84:8d:55:29:d3:e0:ad:10:31:61:5d:e0:05:
         36:7d:14:40:03:b1:b1:5a:dd:ea:ae:86:60:50:5f:7e:bd:04:
         24:ae:9c:4f:ec:0e:8f:b1:8f:13:e2:f0:da:e2:9e:65:67:f4:
         51:b3:31:ce:2a:7a:3f:03:2b:1b:f5:13:5e:7a:3b:dd:c3:7a:
         5b:cc:78:a1:bf:52:cd:e3:d9:3b:53:2b:9e:f1:60:3c:5d:be:
         f0:57:1b:d2:80:19:b8:61:6b:68:01:f3:8f:4d:ac:72:d4:88:
         93:02:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:35:21 2025 by rpki-client