Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File:                     xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier:          nC+xbwUPkHLsuQyd4UUq/vMl/YeHQENGSkVvIaq8b4o=
Subject key identifier:   10:C0:85:DC:BF:7A:50:AF:2B:BF:AA:7B:AA:FF:15:F9:25:56:C2:C1
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer:       /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial:       0196C3F0826381B1AEB3A376E997528096C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number:          0B78
Signing time:             Mon 12 May 2025 10:00:41 +0000
Manifest this update:     Mon 12 May 2025 10:00:41 +0000
Manifest next update:     Tue 13 May 2025 10:00:41 +0000
Files and hashes:         1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: K+FHosb3ilpudtuQB7Tgu5FymMtpL3vjVqK73Zzuh9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:f0:82:63:81:b1:ae:b3:a3:76:e9:97:52:80:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
        Validity
            Not Before: May 12 10:00:41 2025 GMT
            Not After : May 13 10:00:41 2025 GMT
        Subject: CN=10c085dcbf7a50af2bbfaa7baaff15f92556c2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:52:70:6b:5d:68:df:b0:4b:37:9b:d7:04:
                    e3:da:c7:a0:da:76:9d:04:e4:f1:92:42:96:8e:b8:
                    99:13:1a:1d:9c:c0:b0:bf:10:de:7e:94:f7:10:d2:
                    62:f4:82:63:6c:1a:80:4f:e8:86:bd:14:02:68:10:
                    15:1f:e2:46:cd:33:ba:b2:56:2d:19:4e:8a:2e:99:
                    07:e8:9e:19:fa:cb:0b:9d:74:6c:23:69:5f:06:30:
                    13:26:c0:ba:0d:0a:c5:cd:22:b7:34:17:c7:5f:5c:
                    b5:35:56:17:27:3b:1f:a6:97:6f:ad:c8:8b:6d:5b:
                    84:76:ee:2e:b9:20:4a:81:a6:b6:52:71:8c:77:c7:
                    14:da:f8:b8:0f:71:68:64:26:e8:9f:e8:36:2f:6b:
                    9b:46:83:e0:9e:fb:72:cf:40:6a:34:c1:da:8a:b5:
                    54:e5:9e:8d:67:c9:3a:3b:6c:97:60:83:1d:bd:b3:
                    02:35:79:86:df:30:bf:50:9f:79:26:e8:91:81:af:
                    ae:47:11:4c:82:a3:ed:33:9b:e7:91:d3:47:c8:d0:
                    76:ef:de:7f:f6:98:03:d8:c8:a5:62:d1:ec:9d:db:
                    93:e2:f7:3b:78:ec:c4:24:79:a1:3d:fc:f6:2f:23:
                    47:ea:b8:03:1e:2b:7d:6b:eb:bc:19:06:bf:96:3b:
                    3b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:85:DC:BF:7A:50:AF:2B:BF:AA:7B:AA:FF:15:F9:25:56:C2:C1
            X509v3 Authority Key Identifier:
                keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:d0:72:86:f4:93:49:6e:5d:6e:d9:fa:4d:55:7a:39:61:
         c3:1d:b9:5a:55:a1:a0:5a:b6:c2:02:26:91:78:c4:6d:62:aa:
         6f:6b:98:ce:b6:c1:17:4d:c0:e8:af:1d:22:f9:5c:53:b7:52:
         e9:dd:f4:95:04:cc:82:fd:dc:e8:11:97:27:c2:20:61:b2:e1:
         91:59:ef:05:7a:41:ad:04:ed:07:16:9a:86:0b:70:05:72:69:
         32:b0:c3:cd:2f:97:f6:9c:ec:d5:5f:bb:24:c0:15:52:5e:b6:
         25:0e:5c:14:73:4f:74:88:1f:e2:de:95:c8:db:a3:75:1d:c7:
         0f:a1:ca:9c:75:3e:6f:2a:31:c7:40:54:33:be:d1:0e:63:2b:
         15:5f:33:1f:07:a2:77:6c:f5:5b:9b:3a:78:af:c1:1b:95:d2:
         13:d0:f8:ed:31:1e:0b:fb:07:e1:15:1a:72:aa:58:86:6d:01:
         d9:01:69:63:35:08:e6:ed:2f:6f:fd:67:44:b4:6b:6d:ae:1b:
         2a:95:81:67:2a:8c:6d:fd:3a:7d:dd:87:34:4a:5e:a0:cc:6a:
         2e:34:b8:42:eb:46:0b:37:d1:a0:c3:87:03:3e:3c:c1:ae:35:
         ad:00:ff:82:7a:c6:2d:07:6f:69:1e:77:f6:20:db:90:1e:34:
         db:74:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:28:20 2025 by rpki-client