Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File:                     8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier:          dXuavVcABSM9YGdbIR/DOzGN6t0uXsjGdHrAGjUV84A=
Subject key identifier:   E3:B2:81:E7:9A:C0:E0:BB:E8:FE:D9:5F:F4:DC:A7:4C:0C:58:67:EA
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer:       /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial:       0196C0B84E13D6A63138C4492EB9646156D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 19:00:26 +0000
Manifest this update:     Sun 11 May 2025 19:00:26 +0000
Manifest next update:     Mon 12 May 2025 19:00:26 +0000
Files and hashes:         1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: bpJJ+zqveRa5vhGfI2526OcGWl8rOdym/sYW+iKU6hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:4e:13:d6:a6:31:38:c4:49:2e:b9:64:61:56:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
        Validity
            Not Before: May 11 19:00:26 2025 GMT
            Not After : May 12 19:00:26 2025 GMT
        Subject: CN=e3b281e79ac0e0bbe8fed95ff4dca74c0c5867ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:79:29:a5:3c:4b:21:3a:34:ee:d9:5d:15:
                    ac:bb:25:15:75:fa:f7:45:ed:93:6b:4c:3c:3c:62:
                    07:1a:18:72:19:ed:3c:00:3c:ee:6e:29:74:dd:9c:
                    36:a7:39:7e:f9:24:3f:b8:68:7b:77:bb:be:83:c9:
                    a5:ff:8f:5d:c9:8f:d9:f6:1b:3f:a5:4d:57:7f:8c:
                    2f:11:30:50:c3:f5:45:17:4b:07:c0:81:72:c9:5a:
                    6e:f6:27:ec:bb:f1:0e:71:e6:13:16:08:45:a6:92:
                    e6:93:47:08:5b:5b:21:d2:1f:1c:45:71:a0:0d:90:
                    1c:e6:2a:8d:cd:e6:b1:de:b2:01:b7:54:69:9e:83:
                    6c:a1:0a:6f:4f:b3:30:8e:ce:8b:32:b5:ee:98:2f:
                    d8:6a:3c:1c:2a:29:ca:a1:22:2d:ba:89:f7:4d:1b:
                    ba:1e:9e:35:c9:2e:77:fc:54:ad:fa:d6:f8:31:b8:
                    ef:38:3e:27:ca:f8:ce:e5:02:0d:17:fb:d6:a4:53:
                    bc:41:55:89:5e:a8:04:c5:e3:63:a8:42:39:f2:4b:
                    a2:5f:34:0f:79:8e:59:17:e5:1e:ef:8c:7c:eb:1a:
                    c1:d0:f9:f1:55:c0:8a:34:df:e5:1a:ae:a0:fb:f7:
                    d2:48:85:70:5c:a9:1b:15:2f:e3:b1:ba:37:5e:20:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B2:81:E7:9A:C0:E0:BB:E8:FE:D9:5F:F4:DC:A7:4C:0C:58:67:EA
            X509v3 Authority Key Identifier:
                keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:09:21:88:76:da:26:57:62:56:e8:05:bc:97:ed:39:db:26:
         d8:dd:17:3e:3a:8d:d3:6e:35:53:63:51:b7:13:2e:df:3c:1c:
         77:bd:10:d3:c5:bd:5e:d4:86:26:aa:b3:eb:e5:bd:e6:e6:0a:
         78:94:f0:c8:fd:24:b8:b3:5a:5d:f5:3b:7f:6c:68:28:4c:66:
         ee:7c:13:55:15:03:82:70:2c:01:9e:98:aa:76:ec:2f:5c:34:
         b5:c6:46:13:f4:80:d5:89:4a:f3:c8:04:0d:a2:81:bd:f7:8f:
         3c:65:77:3a:0a:ad:d9:2e:62:dc:be:af:fe:45:b3:84:14:e3:
         6f:a7:0f:f3:5f:9f:2b:c4:9b:9d:d2:d1:4e:96:63:f3:b7:0b:
         8f:3a:aa:a0:fa:5d:d2:f5:81:7a:f4:ba:18:78:6e:be:20:6f:
         5a:59:26:42:81:4e:84:1f:58:60:4b:69:45:03:f5:f5:22:e3:
         6b:7d:13:08:91:0b:c4:58:c8:46:0b:a4:85:18:c5:ee:56:94:
         92:f3:98:2b:22:96:16:88:f4:ea:0c:e6:78:b0:07:ef:a4:c8:
         06:a6:94:46:68:cb:84:3b:88:15:23:58:e6:2b:ec:11:c1:d6:
         9a:88:19:3b:c8:6a:80:c1:dc:3b:67:f7:1d:c4:ab:ce:c7:b1:
         b9:2f:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:39:02 2025 by rpki-client