Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File:                     jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier:          eMLYuMAIpbUsN8wpRAFRaBHXhex4bfBjl6Dtvcp+5aw=
Subject key identifier:   7F:55:0E:1F:81:06:70:65:92:BE:D9:62:9D:AB:9C:12:AE:DF:02:21
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer:       /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial:       01969FACDEEACF8EF741D82C3EFB0F8F0461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number:          0E55
Signing time:             Mon 05 May 2025 09:00:28 +0000
Manifest this update:     Mon 05 May 2025 09:00:28 +0000
Manifest next update:     Tue 06 May 2025 09:00:28 +0000
Files and hashes:         1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: uhN9mthKttZBQMJaZbQPDPI0vNTpSwbgmVV7fgfOrQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:ac:de:ea:cf:8e:f7:41:d8:2c:3e:fb:0f:8f:04:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
        Validity
            Not Before: May  5 09:00:28 2025 GMT
            Not After : May  6 09:00:28 2025 GMT
        Subject: CN=7f550e1f8106706592bed9629dab9c12aedf0221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:98:2a:c5:59:07:10:36:51:77:f2:05:0e:
                    57:1e:c1:11:ac:3d:d1:7e:78:e5:10:b6:f0:a9:8a:
                    f4:ad:a7:4b:50:01:48:73:f4:98:d9:19:6c:88:02:
                    31:a6:e6:20:1b:e3:04:19:54:bd:86:ee:d0:91:35:
                    30:e5:bf:68:b3:ba:9d:e4:3d:53:2a:5f:25:2c:20:
                    4a:5c:63:34:a0:76:cd:6c:01:d4:6e:3f:54:e9:fe:
                    c8:b9:b6:ae:94:98:9e:3a:84:07:ac:1a:68:85:20:
                    17:ef:2a:74:5d:bb:f5:50:d3:ff:60:41:4a:a8:a7:
                    cd:a7:79:22:6b:fb:7d:11:ee:0e:95:bf:02:66:bb:
                    52:75:3a:9b:44:f4:a0:13:c1:84:8e:0a:80:47:f4:
                    40:ef:14:72:11:6d:11:28:04:e7:16:95:36:d4:01:
                    b0:83:4e:09:e7:6b:8d:36:3d:c7:ff:b8:10:17:e0:
                    60:2a:6e:c2:2f:8c:79:90:89:df:9a:2d:48:0d:71:
                    da:83:be:95:24:c4:59:f5:72:6b:59:ad:41:bc:d8:
                    6c:e2:e5:36:ea:28:c4:da:92:0c:d7:9c:f1:20:db:
                    ea:73:ef:1a:00:ba:f6:12:65:f9:0c:ad:b2:e8:fd:
                    94:fe:ba:cd:a5:d2:0f:34:fc:57:c2:4e:5d:6b:d5:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:0E:1F:81:06:70:65:92:BE:D9:62:9D:AB:9C:12:AE:DF:02:21
            X509v3 Authority Key Identifier:
                keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ef:95:fc:2e:44:0e:96:ca:b7:40:57:08:37:9c:60:ed:ae:
         3c:25:17:a2:e2:60:79:95:0d:66:e8:31:89:17:03:23:f9:5b:
         01:7b:7f:1c:92:35:7c:ac:7b:4f:85:78:e7:81:a8:28:50:84:
         50:55:03:c2:3e:30:21:e7:d9:13:7a:ca:a4:da:cd:5b:5a:0c:
         8a:e7:c9:02:4c:1a:1f:64:d9:81:2c:a1:0c:ef:60:52:b0:98:
         da:5c:52:1a:fc:96:e5:b6:28:2a:3d:11:6c:6b:57:31:9d:4b:
         3d:a5:2a:d1:5a:6a:af:06:e2:40:48:99:5d:86:9c:18:08:32:
         e3:77:59:f6:4e:db:98:e8:6d:cd:0e:73:f4:9c:66:81:00:3e:
         f9:b7:9b:c9:2a:b4:e6:ea:6e:56:fe:d0:44:d8:8a:49:69:d9:
         9e:f1:ae:c6:71:6f:20:b2:fb:12:8c:ca:f7:d2:ea:1a:9e:ac:
         17:7e:ed:60:51:9b:6d:25:6f:70:c1:14:ac:b5:88:e6:5f:8f:
         50:73:5f:b4:bf:93:b9:73:82:4e:d8:88:2a:a4:af:4c:e3:80:
         68:7d:33:d4:35:24:73:0b:78:42:21:39:7f:d8:96:13:47:0d:
         03:b6:e8:90:6f:13:ca:d1:73:26:0b:0b:d9:f8:1f:4c:a8:d2:
         63:a0:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:50:14 2025 by rpki-client