Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File:                     p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier:          Ackghd+dvTCAMUvaSU+8VP8D4ubxGgHicg2b0VsYH1g=
Subject key identifier:   5B:BC:D4:CF:22:9A:66:5D:59:B9:DE:BE:D0:57:FB:3F:21:05:22:50
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer:       /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial:       0196CB05659418EE43A5673BC60E9EFD9F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number:          1539
Signing time:             Tue 13 May 2025 19:00:50 +0000
Manifest this update:     Tue 13 May 2025 19:00:50 +0000
Manifest next update:     Wed 14 May 2025 19:00:50 +0000
Files and hashes:         1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: lOpDNtU/rNrKRDWI4YLhq/ca3dyQ4w2ye1kXcdRel2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:65:94:18:ee:43:a5:67:3b:c6:0e:9e:fd:9f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
        Validity
            Not Before: May 13 19:00:50 2025 GMT
            Not After : May 14 19:00:50 2025 GMT
        Subject: CN=5bbcd4cf229a665d59b9debed057fb3f21052250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:89:09:ff:ff:93:79:4f:89:50:3f:00:85:
                    ed:be:c4:a6:03:a7:06:05:62:3b:66:c5:8e:a7:04:
                    18:22:04:81:4b:d1:29:17:28:09:c6:d5:64:f0:ea:
                    31:3a:cf:06:f1:60:98:fd:ac:55:69:0a:b9:09:28:
                    25:fb:26:6a:65:62:d4:f7:c6:c6:0b:6f:29:e7:8f:
                    14:ca:83:24:81:4c:91:64:70:c6:90:92:a0:1f:67:
                    1d:4f:62:07:2b:e7:35:55:c4:27:18:8e:08:76:e5:
                    51:e0:40:06:5a:7a:76:37:cb:39:81:61:29:c4:6f:
                    df:64:0c:69:4a:c1:d4:0b:50:cc:74:f4:95:89:41:
                    81:66:b2:c0:19:ae:f0:23:e4:d3:de:66:1f:f8:5c:
                    4d:5a:19:34:f8:a9:dc:8b:4a:c3:8b:7e:49:4a:f0:
                    15:6d:3c:fa:f5:1e:91:ca:de:5b:29:52:d6:f7:68:
                    ce:56:9e:55:a8:ad:51:45:2d:46:c1:ee:eb:d1:47:
                    db:40:a4:f6:7a:0a:a2:39:65:ae:23:a5:8c:35:30:
                    2e:3f:aa:bb:68:e5:9d:26:8e:f4:de:70:27:52:d5:
                    24:76:e2:c8:6c:92:a0:3a:73:9c:a1:95:a4:44:3d:
                    cd:0e:77:39:a2:03:f3:79:bf:39:e5:ad:08:35:c8:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BC:D4:CF:22:9A:66:5D:59:B9:DE:BE:D0:57:FB:3F:21:05:22:50
            X509v3 Authority Key Identifier:
                keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:86:ee:dd:97:06:0f:69:bc:6d:1e:8d:34:af:42:3a:b8:a2:
         0e:d7:2c:06:33:3a:44:5d:80:89:03:97:b3:f2:33:af:0a:c8:
         21:36:94:e6:b3:ce:6e:bd:16:c4:de:bd:e2:b1:59:d8:99:c6:
         1e:f8:61:b0:8a:cd:44:b7:9e:56:85:e6:41:df:19:64:83:13:
         bb:be:e2:b0:7b:bd:a8:d5:00:e9:ca:69:9f:0c:29:af:38:4e:
         66:96:d8:ad:0c:d4:33:0b:4c:2f:97:38:64:b2:c4:72:e5:75:
         10:b9:29:ef:61:70:0f:ae:ac:3c:67:12:43:cd:b6:1c:55:b4:
         37:2a:20:2a:59:20:bf:a6:39:24:f9:f4:03:c6:40:b2:e7:e9:
         22:81:58:df:96:4b:13:65:f6:48:54:ba:65:2f:ec:09:45:54:
         3b:47:98:3f:13:ad:48:43:c2:df:c2:49:e4:9b:4e:67:a5:2b:
         c1:32:a0:ad:4d:54:7f:35:0a:fb:e5:6c:41:f6:91:0e:a5:41:
         63:d8:d4:32:06:2c:72:b7:84:33:06:64:06:f6:b2:ef:07:98:
         de:68:c9:dc:e4:41:f8:34:c2:a6:1c:5a:9a:01:6f:6e:71:0a:
         69:40:2a:3d:a6:40:99:9c:9c:57:82:0e:25:6b:7b:fa:39:a4:
         73:53:18:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:48:14 2025 by rpki-client