Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File:                     4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier:          V2zKY9OOFRh8LdCOcBcz/iA4vA/nqJ5eSIttbI2uzK8=
Subject key identifier:   77:A2:F8:04:58:EF:4A:11:AF:03:FA:5D:45:D2:AB:39:73:44:FD:9E
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer:       /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial:       0196D2BFA099D7DB5A76202DEF5DEA633DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number:          153A
Signing time:             Thu 15 May 2025 07:01:35 +0000
Manifest this update:     Thu 15 May 2025 07:01:35 +0000
Manifest next update:     Fri 16 May 2025 07:01:35 +0000
Files and hashes:         1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: IBySHjoWEIYqj96YrDJ3NpFU/sNfPRpnmqfBIDgWdcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:bf:a0:99:d7:db:5a:76:20:2d:ef:5d:ea:63:3d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
        Validity
            Not Before: May 15 07:01:35 2025 GMT
            Not After : May 16 07:01:35 2025 GMT
        Subject: CN=77a2f80458ef4a11af03fa5d45d2ab397344fd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:61:ed:d9:c0:b6:08:04:66:53:54:43:77:
                    9b:fd:f7:fd:e9:f8:58:4e:bb:34:97:33:1b:52:2b:
                    93:fe:94:a3:b3:40:a6:bb:7b:a3:02:17:8a:f0:eb:
                    fe:fd:47:5c:bf:30:4a:e3:c5:42:e2:c7:f7:fa:f8:
                    6d:9b:9a:e8:f0:0a:7c:25:19:3a:0f:e1:b5:51:04:
                    79:9f:b9:9e:d4:5d:e0:e6:bf:11:1b:43:3c:32:5f:
                    2e:b1:6b:80:20:8e:9d:d5:b0:79:bd:2e:45:47:2d:
                    cc:11:2d:b8:8c:b8:94:49:14:58:a2:04:ce:11:f3:
                    dd:8e:52:f4:18:74:a9:c7:e1:f6:5e:c9:2f:cd:5e:
                    f2:ef:8f:33:79:08:43:8b:37:f5:90:cc:03:40:63:
                    3c:21:d9:0e:92:6e:2b:1b:ce:3a:10:62:c7:e6:76:
                    4a:b7:44:c0:28:69:0c:ea:cb:0d:de:87:4c:30:61:
                    94:79:d5:4a:db:31:59:4d:d9:4c:1d:e7:eb:fe:7d:
                    94:8a:8b:30:55:00:44:90:8f:53:0c:fd:4d:14:56:
                    41:28:a5:00:4a:90:1a:64:3a:ba:83:16:23:d1:7f:
                    10:d5:e0:78:e2:76:7d:94:56:8a:c1:7b:04:9b:2b:
                    28:5e:95:bd:24:7e:59:ff:2b:c4:07:a1:c3:3b:41:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A2:F8:04:58:EF:4A:11:AF:03:FA:5D:45:D2:AB:39:73:44:FD:9E
            X509v3 Authority Key Identifier:
                keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:45:6b:b1:87:e0:22:7c:1c:be:49:24:03:d6:ca:e6:30:91:
         1a:14:5c:58:5b:e1:d8:d5:2d:5f:da:89:a9:73:be:00:75:9e:
         fd:fb:d1:9f:d4:20:18:f6:79:7a:05:49:84:32:c5:63:6a:f9:
         99:2f:2f:d6:3e:a6:bb:e6:62:53:77:20:5d:3b:39:25:1e:f8:
         ff:6f:97:2f:4e:f2:f9:51:f8:0b:98:cb:60:c7:83:93:81:e8:
         b6:20:59:c5:d9:e6:cc:7c:d6:00:36:d7:cb:bd:43:50:26:e1:
         ee:c2:78:8c:82:2c:20:b5:a5:07:c2:36:24:a3:a9:60:a0:53:
         1d:d6:61:fd:33:fb:5e:78:e3:51:2b:0f:d0:cf:7b:8b:95:61:
         a0:73:4f:45:2f:a8:1d:96:cf:f8:ee:05:d1:3f:73:df:b9:e2:
         c1:3f:26:b3:fa:b3:dc:55:17:44:64:7a:64:cf:c1:6f:c6:c6:
         93:89:5f:21:d4:98:24:d1:9e:75:39:d1:da:50:ea:51:d5:83:
         16:ee:35:7d:63:03:f5:ec:dc:f7:ba:f0:fe:27:fb:91:b5:90:
         b0:e1:e9:e9:ef:7d:65:21:9f:14:19:03:18:82:68:ff:02:3f:
         f8:54:d7:96:93:9c:35:77:87:0d:e8:04:bd:6f:d2:51:47:ca:
         37:e3:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:23:59 2025 by rpki-client