Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File:                     55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier:          ATdwcrpZSyEkgchdtWQ4l6IKz9tlwfvcdq2dqwLizao=
Subject key identifier:   57:A7:3B:7B:E7:B5:DB:8E:65:1E:B0:2B:BB:5F:A3:88:72:41:DE:AD
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer:       /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial:       0196CD2A6BFAA114B288D17A5DD09DA53AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number:          028B
Signing time:             Wed 14 May 2025 05:00:31 +0000
Manifest this update:     Wed 14 May 2025 05:00:31 +0000
Manifest next update:     Thu 15 May 2025 05:00:31 +0000
Files and hashes:         1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: Vffv/umqTSC0Zkfh9Aee2bVOA/Cu3nKSn3aTkSF5Miw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:2a:6b:fa:a1:14:b2:88:d1:7a:5d:d0:9d:a5:3a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
        Validity
            Not Before: May 14 05:00:31 2025 GMT
            Not After : May 15 05:00:31 2025 GMT
        Subject: CN=57a73b7be7b5db8e651eb02bbb5fa3887241dead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:1f:b1:51:46:63:b1:3b:4c:68:d6:a4:c3:
                    11:f3:9c:3c:15:50:33:8e:06:b1:d9:8a:3d:2b:2b:
                    c2:15:b8:1c:00:77:f2:f4:b3:04:26:9e:64:53:be:
                    28:e9:3a:48:b4:34:47:9e:ef:d2:48:c4:c1:71:93:
                    93:93:d1:bb:ce:5d:b0:a2:5d:48:78:53:f6:26:ac:
                    9a:a5:47:f1:68:7a:67:8f:4a:4a:63:7b:1a:68:c3:
                    ea:e5:4d:1a:dc:36:7c:46:d6:70:51:0d:8d:f4:d7:
                    75:24:06:bc:b6:39:8b:dd:81:4a:46:4d:a4:47:9a:
                    d3:f3:c3:01:ff:15:bf:29:7f:f7:fe:e1:c4:81:de:
                    cc:73:6e:3d:5a:4f:fc:1f:69:89:a4:4b:93:3e:71:
                    0c:fc:05:31:e3:30:72:5a:85:c3:21:a8:e0:61:5d:
                    84:9b:46:9c:db:31:cb:5e:30:dc:d0:ef:76:75:02:
                    8e:66:59:ba:5b:b3:25:42:59:27:29:d5:14:23:ad:
                    bb:ab:a4:9a:5d:a9:90:7e:b9:4f:94:11:d9:fb:47:
                    7f:a9:cf:d8:04:5e:e8:ef:25:e0:e0:2f:a4:71:b1:
                    a1:68:23:cd:40:62:35:55:fa:28:91:36:ed:8d:36:
                    68:06:5c:31:60:cd:5a:2e:6e:56:59:38:ee:db:c4:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A7:3B:7B:E7:B5:DB:8E:65:1E:B0:2B:BB:5F:A3:88:72:41:DE:AD
            X509v3 Authority Key Identifier:
                keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b5:11:ce:96:f3:bb:9e:7c:b8:81:00:eb:70:66:80:2d:8f:
         fe:28:27:14:7e:42:85:23:7a:82:9a:e7:fc:23:95:c5:62:30:
         35:1c:b0:e2:e9:31:00:7a:1f:49:19:b5:69:53:4c:37:3d:77:
         f3:66:74:71:05:17:2c:c1:e0:79:43:27:0c:1e:f3:92:e9:38:
         29:ec:ff:41:85:8e:ea:86:fc:c5:8b:74:e2:2f:15:82:ff:eb:
         83:89:88:db:18:76:6c:a1:7b:e1:d9:3c:46:db:4c:00:3c:b9:
         d8:e0:cb:14:f0:f0:e5:68:6c:a6:9f:44:ad:4a:34:04:98:63:
         a7:0d:e7:bf:c0:dc:06:15:5a:4a:8a:3e:5f:be:95:85:28:08:
         93:48:90:1b:05:60:7f:b4:ae:c5:ad:b7:3a:59:13:5c:e9:18:
         59:42:d6:19:32:d7:2d:12:f5:93:88:98:7e:b1:96:ee:76:bf:
         96:76:23:d3:ef:05:9b:85:64:15:c8:b4:29:0d:33:17:85:67:
         62:85:8e:2a:0e:b6:65:0a:7e:a4:25:d3:36:1c:5c:12:61:27:
         e4:c8:fb:89:a0:8e:de:9d:5c:2a:71:52:ba:90:1a:da:38:a4:
         71:63:d4:7d:86:68:85:5c:73:ae:8e:f0:1f:35:8e:3c:12:7e:
         39:84:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:46:11 2025 by rpki-client