Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File:                     1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier:          Xb8IPyUbIa1iC6m7XQ10NAxhGCTMWB6bG1iAkzWArN0=
Subject key identifier:   EB:ED:D7:02:11:4B:63:2F:4F:E7:13:85:E3:FF:F1:92:10:D0:B7:78
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer:       /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial:       01969D88170C430544F9A95C7F4E904C533F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number:          0238
Signing time:             Sun 04 May 2025 23:01:03 +0000
Manifest this update:     Sun 04 May 2025 23:01:03 +0000
Manifest next update:     Mon 05 May 2025 23:01:03 +0000
Files and hashes:         1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: qMq6E1AU2vJlBtuza4+ozcekrRKGvrOwRbW2SdsdqvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:88:17:0c:43:05:44:f9:a9:5c:7f:4e:90:4c:53:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
        Validity
            Not Before: May  4 23:01:03 2025 GMT
            Not After : May  5 23:01:03 2025 GMT
        Subject: CN=ebedd702114b632f4fe71385e3fff19210d0b778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:41:77:91:ea:0b:38:4e:64:01:f6:85:9d:
                    10:0d:31:2a:01:cc:06:20:92:99:c2:22:f2:50:7c:
                    7b:37:72:f8:a4:53:a7:b5:6f:72:87:49:c6:96:03:
                    f2:de:a8:84:5f:85:f5:5a:21:7f:45:13:49:ef:82:
                    cb:f4:58:77:fc:23:66:ea:ce:d1:d9:3d:c1:b4:06:
                    88:85:c9:62:73:40:f6:e2:71:3c:f3:77:b0:ef:cd:
                    98:c6:62:8d:18:dd:2b:83:9d:c8:24:c3:d2:90:09:
                    01:7f:ab:7f:8a:21:b9:b2:57:01:b7:15:88:c0:d1:
                    11:9a:ea:3a:de:b7:7f:15:06:46:64:42:06:b1:05:
                    48:2a:31:77:20:31:f2:5d:6e:be:87:5a:21:ad:bf:
                    7c:ad:73:87:db:de:e2:92:87:1e:c7:3b:eb:09:4d:
                    70:1d:1b:8c:df:16:0c:d5:d9:bd:de:84:c8:9d:5d:
                    50:24:42:4b:fa:da:46:64:be:e6:5a:b4:f9:fa:be:
                    92:bb:eb:d7:11:64:f6:bc:14:b0:92:a8:39:97:e4:
                    50:4b:8b:fc:b9:bc:de:1b:a8:9b:52:fe:58:fa:34:
                    c1:68:7b:ce:e0:b8:c5:81:fa:b6:3c:08:e4:df:08:
                    70:d6:b3:8f:5f:e6:e2:70:a9:67:86:75:54:ce:86:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:ED:D7:02:11:4B:63:2F:4F:E7:13:85:E3:FF:F1:92:10:D0:B7:78
            X509v3 Authority Key Identifier:
                keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:a8:a2:f5:34:84:25:75:f4:a7:c3:c5:ec:97:a5:6f:9b:
         0a:20:23:46:ba:94:f6:2b:db:49:96:f9:d7:93:01:10:21:74:
         20:c6:96:7d:8b:a6:e4:7a:fb:99:b4:74:99:c6:91:58:e0:e4:
         e1:44:49:33:a3:9e:39:05:42:0c:fc:73:5b:49:78:cc:77:22:
         4c:4b:70:f3:e4:1e:dd:de:dd:0b:31:81:0c:a9:ee:54:f6:bb:
         99:ea:94:55:24:80:15:7f:72:a4:0d:04:db:29:75:e9:05:8d:
         6c:31:3a:86:7d:38:f9:6b:33:3d:80:98:48:6d:1e:14:9d:be:
         7b:53:b7:10:8c:29:32:4b:9e:da:6f:fc:c4:18:d7:90:d6:88:
         10:d9:ab:d4:89:0c:51:82:b0:9f:d1:05:33:c8:2c:55:6a:da:
         19:8e:da:1b:bf:27:16:f9:41:d4:3e:5d:2d:e5:7b:d0:94:9b:
         d0:f9:f7:98:06:42:cd:4c:c6:5e:46:a0:59:8e:cb:f4:a4:94:
         b4:ee:8a:37:3a:dc:05:b1:57:c3:5a:ff:12:00:3d:dd:cd:02:
         16:6d:4c:24:18:72:2a:9c:2a:48:e4:19:cc:3c:34:2e:ed:f8:
         2b:3c:1c:bc:a4:93:1f:05:df:de:b9:df:a8:f3:12:9f:49:18:
         d3:0e:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:25:56 2025 by rpki-client