Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File:                     g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier:          KyaBeRIgBlzgZFSByzoHhNigPN2rtUHfAahLwj4CZUQ=
Subject key identifier:   37:60:40:71:2A:4C:ED:F3:0C:9D:C1:AC:0C:08:F0:22:25:7B:0B:BE
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer:       /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial:       0196D6D22BE6080E31031ECEEC17F73B85A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number:          0478
Signing time:             Fri 16 May 2025 02:00:20 +0000
Manifest this update:     Fri 16 May 2025 02:00:20 +0000
Manifest next update:     Sat 17 May 2025 02:00:20 +0000
Files and hashes:         1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: pHgMGnnVYi5NfZBFqyCheuyEEWOb3J9DiBts1k2hLws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:d2:2b:e6:08:0e:31:03:1e:ce:ec:17:f7:3b:85:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
        Validity
            Not Before: May 16 02:00:20 2025 GMT
            Not After : May 17 02:00:20 2025 GMT
        Subject: CN=376040712a4cedf30c9dc1ac0c08f022257b0bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:5a:3a:cb:10:41:32:d4:60:22:9a:3c:bb:
                    75:87:a2:6f:ab:6b:6f:44:f0:95:35:9e:44:92:b6:
                    23:5d:5a:eb:0e:10:56:e0:d6:29:b1:d7:a2:28:ee:
                    54:e9:b8:5a:0e:2c:a2:fc:a2:2a:e8:cd:de:f7:fe:
                    85:c2:d1:59:a4:a7:c4:fa:ed:ab:ec:18:fc:7f:48:
                    f6:5e:68:cc:4e:1c:24:0c:d5:45:17:a3:7f:df:83:
                    bf:eb:f3:45:1a:09:4b:cb:bc:dc:fc:e7:18:b3:bb:
                    54:0a:96:34:72:ad:a0:73:64:89:af:98:f7:3a:2f:
                    f8:c3:e5:e2:17:06:24:44:69:ba:1a:9e:62:7e:2c:
                    b5:30:d3:fd:3e:4d:48:7a:e1:cd:49:3d:fd:b4:68:
                    e6:b2:d6:7c:83:4b:a8:fd:99:14:10:ba:05:cc:3e:
                    50:4e:de:a9:04:a8:d6:6e:0e:9e:2d:db:32:8e:34:
                    1f:7d:c5:47:dc:f5:bf:5c:aa:c2:59:a1:c3:88:e1:
                    fd:01:e9:4a:06:2b:b9:d1:de:3b:f7:37:1a:67:45:
                    fd:a5:b3:91:17:6d:ad:0a:cc:57:12:c6:1a:1e:80:
                    77:4c:a5:f0:82:ce:90:c5:5b:5c:08:21:15:3d:d8:
                    d2:95:49:15:00:d5:1f:0e:ae:07:d5:b6:9d:6d:22:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:60:40:71:2A:4C:ED:F3:0C:9D:C1:AC:0C:08:F0:22:25:7B:0B:BE
            X509v3 Authority Key Identifier:
                keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e7:46:09:4b:fc:3b:e9:60:8f:db:02:5e:ec:94:1b:94:1a:
         21:cc:84:3d:07:ab:20:1a:71:d8:3d:09:da:a8:2b:a9:1f:7a:
         86:d6:8a:7a:4c:3e:bd:c1:d7:85:8d:f9:18:9f:eb:8d:f9:aa:
         81:fb:96:57:06:72:7b:a8:5f:87:b3:41:f4:68:d6:4c:ad:19:
         a6:9b:ae:1a:90:d9:e3:fd:64:5f:90:1d:f2:26:94:bc:49:54:
         fc:1a:01:39:27:6d:2f:12:f8:a0:68:03:9d:98:19:0e:e4:38:
         43:b6:4d:ac:6b:8e:fd:92:29:d6:41:89:cc:cd:7f:05:c1:74:
         73:49:67:2a:f5:c9:b5:dc:14:ef:9c:4b:83:0d:20:1c:9d:6f:
         a6:10:21:9d:44:68:12:63:a1:c0:e4:53:8c:88:86:26:88:a4:
         83:e6:22:2c:b2:66:8d:58:4a:9c:ba:da:93:8e:cc:e4:de:c9:
         0a:ea:b0:ac:49:dc:d3:36:dd:90:fe:6b:57:34:b5:d2:c4:e3:
         7f:a3:cb:13:a5:ca:d9:18:e5:bc:10:e9:6d:71:86:05:db:c8:
         b5:e4:d0:51:c5:27:19:5b:76:fb:33:f9:ec:bd:20:7e:29:01:
         59:e0:74:79:d9:d1:1f:3b:e8:e0:3b:dc:22:fa:c7:5f:61:03:
         9d:de:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 05:29:42 2025 by rpki-client