Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File:                     1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier:          KiNDEHGiEVRyfagshFH257WFgR2OB9ChgYHvsrT78lg=
Subject key identifier:   51:22:ED:25:CE:3C:F0:D0:69:97:FB:40:C8:FA:67:08:C1:4B:9F:46
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer:       /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial:       0196C6834EF39432601FCFE325FF9386A89D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 22:00:16 +0000
Manifest this update:     Mon 12 May 2025 22:00:16 +0000
Manifest next update:     Tue 13 May 2025 22:00:16 +0000
Files and hashes:         1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: 6qro8A1+i72vqOocdXxHnYPB+D+wWUjt0pze6cwedE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:4e:f3:94:32:60:1f:cf:e3:25:ff:93:86:a8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
        Validity
            Not Before: May 12 22:00:16 2025 GMT
            Not After : May 13 22:00:16 2025 GMT
        Subject: CN=5122ed25ce3cf0d06997fb40c8fa6708c14b9f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:40:18:f9:62:9d:1e:1c:e2:4c:2a:fb:2e:
                    36:82:47:03:66:10:27:f5:36:b7:04:62:83:7d:c9:
                    5d:cc:8a:c3:e1:48:e9:63:92:40:da:28:af:cd:d8:
                    b9:db:e9:ea:cb:e7:91:94:f3:e3:43:a7:1a:58:b8:
                    f9:2b:8e:e4:8c:75:d2:37:1b:c5:72:b4:ae:17:2b:
                    b1:d5:b6:54:f7:c1:34:42:c3:17:15:2d:58:7a:47:
                    8d:6c:d1:f2:64:98:2e:e0:01:6b:e4:67:f0:8a:5e:
                    1e:95:3a:4b:9f:2d:eb:c6:a9:41:d0:23:21:f6:d6:
                    9e:43:38:06:39:76:bf:13:87:1f:65:13:b2:de:9c:
                    c9:b6:35:92:6a:1e:e7:2a:97:aa:bb:df:3a:36:07:
                    ec:07:69:ca:ed:a3:eb:d3:7d:df:74:91:e9:07:88:
                    da:23:1d:f0:ed:24:85:fb:45:75:cf:59:cb:b2:9d:
                    c1:98:90:b3:b7:b7:90:6f:12:0f:ee:19:f0:ab:ef:
                    d4:61:f4:44:2d:18:3b:f7:3c:31:d9:86:77:ff:04:
                    9f:01:8a:a3:e1:0f:2c:6b:88:86:6a:b4:44:a2:4b:
                    d1:72:a3:cf:c8:36:59:ed:e0:dd:24:22:6a:00:6d:
                    ea:42:81:6b:7b:6e:85:6e:74:4d:95:3d:70:2c:6c:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:22:ED:25:CE:3C:F0:D0:69:97:FB:40:C8:FA:67:08:C1:4B:9F:46
            X509v3 Authority Key Identifier:
                keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:95:e2:ef:2a:4a:59:e2:d3:b8:d0:c2:c7:96:6b:73:e2:
         47:2d:39:fd:a1:95:88:57:b5:5c:aa:7c:fa:74:22:13:3b:bf:
         20:4f:f4:eb:35:a7:40:3e:e8:05:a3:20:e3:3e:83:dd:32:41:
         ab:26:2d:8b:9e:dd:57:74:9a:fe:e2:8a:40:77:0b:d4:ff:5c:
         33:16:ea:b5:1f:4c:b8:b1:a9:b4:77:e1:06:37:7a:b6:7b:27:
         ae:49:6a:41:2e:36:2d:bc:93:dc:3d:c4:78:06:1f:25:7e:76:
         93:64:b3:5b:26:42:15:59:c9:47:4b:92:42:e8:4b:ac:8f:82:
         35:60:e7:54:eb:13:1e:ed:d3:c1:f5:fe:87:4a:e7:df:77:2f:
         e1:56:69:c4:51:11:2e:5b:dd:1e:39:11:c5:17:b1:cd:90:9f:
         15:ea:b1:5f:fc:48:88:a2:a1:53:f1:a0:d7:23:a4:eb:a4:2d:
         6e:56:9b:3c:13:cd:31:4d:5a:46:76:7c:91:3e:92:c3:48:94:
         a9:37:9c:dd:1b:b4:0d:59:8d:c5:41:d8:be:5e:0e:61:6f:36:
         9a:7f:69:ca:1e:60:f6:be:9a:5c:9a:88:95:5e:1c:90:16:e4:
         26:85:97:0e:f7:05:fd:19:42:43:0e:72:4a:12:b4:ea:3c:45:
         ec:bb:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:44:19 2025 by rpki-client