Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
File:                     eV1ljeA6jc0LbfbnZscH9P49FS4.mft (raw, json)
Hash identifier:          PXnc0KE13WGb6RPOmNrKb4/gbnVwth0li3DsM/OWuFQ=
Subject key identifier:   05:58:EE:16:94:40:20:8B:BE:F9:54:06:6F:9C:CB:5D:B5:06:ED:15
Authority key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
Certificate issuer:       /CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Certificate serial:       0196C4958D57A0DBC814A16A265F484EA5B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
Manifest number:          1534
Signing time:             Mon 12 May 2025 13:00:57 +0000
Manifest this update:     Mon 12 May 2025 13:00:57 +0000
Manifest next update:     Tue 13 May 2025 13:00:57 +0000
Files and hashes:         1: eV1ljeA6jc0LbfbnZscH9P49FS4.crl (hash: GE07i41zP6aSK9TCkAz/UK+a3KTZMwVR+H7ASn7ewpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:95:8d:57:a0:db:c8:14:a1:6a:26:5f:48:4e:a5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
        Validity
            Not Before: May 12 13:00:57 2025 GMT
            Not After : May 13 13:00:57 2025 GMT
        Subject: CN=0558ee169440208bbef954066f9ccb5db506ed15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:a4:14:e9:ae:ad:b4:7d:e1:6c:d6:38:1a:
                    34:01:66:b5:4b:ef:b3:3b:5c:80:fc:01:90:65:1d:
                    43:11:01:68:af:b1:c9:2f:01:fd:49:8d:fc:0d:3f:
                    9d:c4:48:b0:e4:24:01:e1:c4:58:2d:bc:b7:97:21:
                    17:a8:ff:96:65:1a:35:c9:95:bf:34:57:69:5a:76:
                    46:b8:f3:ee:ad:68:17:c7:96:91:4f:b8:77:3a:cd:
                    2c:66:7c:73:f2:50:82:7d:d3:a8:a4:93:cf:fb:02:
                    40:69:ab:a9:0e:e3:c2:e8:a8:79:32:69:56:cd:95:
                    e4:f6:7d:03:e8:a0:08:1e:9c:ed:2d:fd:cc:fc:8a:
                    ee:b4:4e:64:4d:e0:e1:ec:49:38:55:c0:28:84:d4:
                    2d:2f:6d:a7:7d:43:ed:53:4a:d2:5e:c4:6a:65:2a:
                    ed:ca:53:97:9a:9c:34:ea:0a:a4:bd:90:0c:0d:82:
                    7a:d7:12:53:17:ea:cb:b9:48:65:60:43:af:24:9a:
                    91:01:c9:95:a5:9f:4a:20:d1:51:9e:26:73:fa:80:
                    c9:97:62:ac:53:0b:35:26:b5:9e:74:a8:86:d2:17:
                    27:c0:fd:d5:cf:da:b3:59:21:43:95:84:06:95:13:
                    5f:90:aa:28:2a:ab:f4:cd:41:da:7e:0a:23:9b:48:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:58:EE:16:94:40:20:8B:BE:F9:54:06:6F:9C:CB:5D:B5:06:ED:15
            X509v3 Authority Key Identifier:
                keyid:79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6c:f7:0d:b2:98:d7:f9:0c:c3:c5:33:06:06:8e:12:d9:63:
         d3:ef:0e:7d:3c:a8:a5:0f:06:f1:cc:d8:af:f0:8b:01:54:cf:
         83:e2:cd:a7:b2:93:9b:5a:cf:29:a1:52:55:14:f7:d0:f7:f8:
         1a:f2:77:fb:8f:a4:5e:05:e3:8f:48:0a:ce:49:9e:c1:22:31:
         19:77:f1:20:8a:53:08:f9:2e:f7:41:74:be:ab:f4:af:13:b3:
         7c:1d:40:48:43:4c:5d:10:2c:45:80:f7:7f:9d:33:6a:18:07:
         f0:34:a8:7e:86:0a:f1:69:ee:06:91:5d:30:52:dd:c8:64:9f:
         33:19:29:3a:73:ee:81:b2:7a:d7:cb:f2:a9:23:47:f6:a7:f4:
         81:26:0a:1c:f7:38:b4:b4:a6:2b:cb:6e:e9:a0:2c:18:0d:a4:
         60:f1:94:13:bc:03:94:77:d4:5b:f4:02:83:db:62:c8:b7:e3:
         54:2b:6f:5a:e2:d2:c3:f5:e2:72:dc:de:f7:7a:6f:22:20:11:
         5f:d6:eb:4f:5a:24:e7:b8:38:8a:fd:20:d0:08:11:d9:cc:b0:
         15:6f:14:6a:33:69:30:42:55:a8:66:eb:a0:5a:a2:e4:2e:5c:
         43:99:85:7e:b1:3f:f9:cc:90:a3:bb:62:e2:2d:1d:85:e6:6f:
         ae:2a:87:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:46:18 2025 by rpki-client