Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          d0duk1mwAApTGFWopnvz2stCDAL0Jsxp3aQlu1GiJGQ=
Subject key identifier:   E3:AA:24:A7:8D:3A:48:79:64:F0:3E:57:94:86:EA:6C:1A:9D:47:1E
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       0196D5BF680C72125A6006D1DB68FC511887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          0315
Signing time:             Thu 15 May 2025 21:00:13 +0000
Manifest this update:     Thu 15 May 2025 21:00:13 +0000
Manifest next update:     Fri 16 May 2025 21:00:13 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: wxW4F343IBvoEaS3Vz6O0dIPRPQLUFk9JXVkeDnw4gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d5:bf:68:0c:72:12:5a:60:06:d1:db:68:fc:51:18:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: May 15 21:00:13 2025 GMT
            Not After : May 16 21:00:13 2025 GMT
        Subject: CN=e3aa24a78d3a487964f03e579486ea6c1a9d471e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:19:e2:20:bf:18:07:6d:d6:a7:a5:d7:97:
                    4b:48:d2:ef:c4:c4:d4:32:a9:5b:bf:02:8d:05:27:
                    65:c3:5e:b8:37:e5:88:e0:36:0d:b0:e6:a3:1e:df:
                    80:a4:d0:14:53:62:b3:27:ec:1b:4a:b5:f8:41:cf:
                    3a:c2:cc:71:79:d0:65:9c:66:1d:e5:62:df:aa:52:
                    47:f7:05:1b:66:21:8a:76:d0:43:83:b6:85:68:2f:
                    6c:49:b4:51:41:c7:8d:e3:53:05:76:ef:80:4c:2c:
                    bb:aa:c2:76:fe:1e:8b:ce:db:f3:e7:e4:46:c8:f1:
                    9b:46:1f:38:b9:83:05:31:70:34:93:2e:ed:6e:ef:
                    b9:8b:db:2f:3d:6a:48:f5:1c:db:dd:e0:77:a4:da:
                    b1:c0:31:8d:a5:4f:28:0f:9d:d7:44:76:95:a8:8c:
                    7d:76:03:12:03:24:23:88:7d:36:81:a1:d5:9a:f5:
                    53:a4:d6:55:38:1c:ea:49:4b:ad:6f:26:26:c9:5b:
                    0c:d8:f9:97:5c:29:e9:12:25:77:1b:94:18:92:f4:
                    e6:d8:4d:d4:35:d0:32:38:3a:65:af:0f:62:32:c8:
                    6b:9c:61:3a:6d:8e:b0:7e:f9:af:ec:1b:ba:2a:da:
                    22:fb:be:d1:9d:1f:72:fa:7a:04:0a:f9:a7:f5:61:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AA:24:A7:8D:3A:48:79:64:F0:3E:57:94:86:EA:6C:1A:9D:47:1E
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:96:3b:73:8d:a4:69:f4:11:81:4f:82:2a:e4:8c:c9:52:35:
         c6:04:97:33:9c:93:6a:05:26:db:2b:bd:f5:77:0c:48:5d:25:
         d6:00:cb:29:9a:cf:81:bc:da:3d:c1:6b:01:f8:52:4d:05:3b:
         8e:66:a7:aa:ee:de:c1:3a:52:ad:98:64:0d:f6:ef:ed:b2:30:
         e3:e3:f1:6e:20:1d:f0:b3:e2:e8:97:25:29:68:c6:01:de:be:
         dd:4e:49:e8:57:5b:75:74:d7:57:dc:d3:3d:5a:94:4c:2c:13:
         12:bc:b1:05:2a:b9:cc:42:13:8a:39:4c:2b:49:dd:79:de:1e:
         53:19:df:c2:38:fe:de:66:30:2e:4d:f5:90:99:0d:cb:b9:00:
         c0:2c:08:77:95:f8:a8:22:92:dc:ff:73:4c:c2:d7:86:10:4e:
         95:f7:0d:c1:c3:52:90:b1:b4:71:f1:9d:2e:a5:85:d1:0c:a4:
         19:94:2e:0e:38:9f:2c:c3:2a:99:68:31:cf:7e:03:9d:6b:09:
         df:10:90:b1:f6:45:4f:53:5d:52:5f:ed:f1:42:cf:82:06:32:
         69:c2:24:7e:84:0b:7c:9f:bb:45:4f:33:81:31:7e:be:c7:b2:
         35:e9:ad:ef:a3:44:6a:d3:ae:2b:83:60:ab:25:20:25:ab:6a:
         ce:86:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:55:45 2025 by rpki-client