Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File:                     _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier:          RjRMOPdia5mhdMHL7P2JYzbYuJEfyfd7r+gF/YT5CQ8=
Subject key identifier:   0A:B5:01:44:98:72:6A:87:15:F1:96:A9:15:2B:50:60:F4:E5:83:39
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer:       /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial:       0196A352ED61724E0974A7B5369616B03B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number:          1523
Signing time:             Tue 06 May 2025 02:00:42 +0000
Manifest this update:     Tue 06 May 2025 02:00:42 +0000
Manifest next update:     Wed 07 May 2025 02:00:42 +0000
Files and hashes:         1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: EDWE5t10v7iEjq1A3zlPAEeXTwMMwSIpQpVaP+QUrQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:52:ed:61:72:4e:09:74:a7:b5:36:96:16:b0:3b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
        Validity
            Not Before: May  6 02:00:42 2025 GMT
            Not After : May  7 02:00:42 2025 GMT
        Subject: CN=0ab5014498726a8715f196a9152b5060f4e58339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:f2:78:9b:7a:24:e0:ae:5a:5c:e1:9b:df:
                    79:62:f3:d6:00:83:f1:66:9d:8b:8d:3e:0e:9c:5e:
                    3e:80:7c:03:17:17:2e:fc:6a:3c:26:af:1b:79:5d:
                    ac:7e:4a:73:bb:ce:85:9f:33:46:37:c0:b5:18:5e:
                    01:e8:0a:d9:6b:fb:9f:bf:9d:df:0d:58:a2:0c:d2:
                    73:d4:25:5d:ac:7a:f2:f1:d8:90:20:94:95:53:e9:
                    f2:56:f9:38:d0:00:13:b4:cc:44:ea:4e:36:b1:db:
                    84:31:ea:b8:7d:00:58:34:60:6c:17:0e:b1:64:9a:
                    a8:fb:00:b2:0e:1e:bc:b8:ba:59:1c:e5:f7:eb:fc:
                    69:4e:5b:14:ee:21:13:73:10:1d:54:92:1e:a0:5c:
                    81:ef:da:26:b0:f2:ef:55:53:26:d7:46:bd:c3:5d:
                    d8:7c:fe:5c:92:da:c1:90:e5:a3:4f:12:58:20:3c:
                    79:e9:ca:e6:e8:a1:ee:e1:24:d4:df:8f:81:cd:56:
                    d4:bc:f5:a7:0d:7b:84:66:3f:17:70:c0:42:90:d8:
                    2c:d9:a4:a7:39:3e:f4:6f:51:17:5b:8a:eb:6a:4b:
                    49:d0:5a:e2:5a:1f:69:76:13:bc:b5:a2:f5:0b:cc:
                    9b:4f:f4:f2:e3:4c:9a:7b:48:f7:07:64:e4:b6:17:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B5:01:44:98:72:6A:87:15:F1:96:A9:15:2B:50:60:F4:E5:83:39
            X509v3 Authority Key Identifier:
                keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f6:0e:66:ba:38:ee:df:ad:68:54:b7:6d:cf:37:d4:39:68:
         26:31:60:2d:d7:4f:ac:b5:38:ca:88:cd:0c:64:ba:6a:76:0f:
         59:a4:fd:e4:79:ff:d5:5c:aa:f9:9c:0c:ac:ea:5b:e0:ba:e8:
         f1:ae:2e:51:91:98:d8:30:2c:64:9b:a8:d6:35:33:02:35:83:
         25:ee:16:a2:7b:ca:04:3e:11:48:28:36:3e:2d:5f:d1:c3:1e:
         c7:aa:92:e2:1b:fc:ef:d6:dc:ff:26:d9:b6:51:e7:68:23:2a:
         1c:80:81:29:bd:b0:f1:2f:c1:f7:61:cf:64:45:30:9b:10:a2:
         d2:b0:12:b3:ff:94:64:62:9c:f2:dd:c8:1b:c3:f9:92:b4:f2:
         29:4c:ad:97:5e:7e:26:5b:46:d6:de:16:23:03:3e:11:cb:9a:
         7f:82:9c:78:c2:ba:f8:cc:05:cd:11:b2:19:91:63:46:4d:3a:
         33:78:f3:8f:72:ee:d8:d1:c0:f3:08:1a:e1:8e:5a:cf:d0:ad:
         e7:21:98:2d:30:80:95:66:10:20:34:71:3d:ed:0d:8d:52:c9:
         46:5d:2a:05:33:50:b4:47:8b:20:41:04:c9:1b:d1:c3:bb:eb:
         6b:b8:bf:10:ae:be:42:8d:9d:81:9a:95:a6:21:c5:b4:42:4c:
         ea:5b:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:48:00 2025 by rpki-client