Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          5xfT1+W11z6flirEQRBmxhk46gVg8BXBGIMupW4zoAA=
Subject key identifier:   36:0B:49:43:B4:07:90:F9:BF:1B:F6:A9:77:4F:FC:7A:89:FF:5E:70
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       0196C193EDFCF08EFA25AFC58B27C7EFD256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          01F2
Signing time:             Sun 11 May 2025 23:00:19 +0000
Manifest this update:     Sun 11 May 2025 23:00:19 +0000
Manifest next update:     Mon 12 May 2025 23:00:19 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: nIjOTlAQqfxmuoz1bgSUPH9H9A99thORpHd1rH17eyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 23:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:93:ed:fc:f0:8e:fa:25:af:c5:8b:27:c7:ef:d2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: May 11 23:00:19 2025 GMT
            Not After : May 12 23:00:19 2025 GMT
        Subject: CN=360b4943b40790f9bf1bf6a9774ffc7a89ff5e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a8:f1:e9:43:c4:9d:bb:df:e3:f5:b7:c4:4e:
                    68:73:45:11:71:64:2b:9a:74:59:aa:59:e2:fe:fd:
                    63:eb:59:28:55:7a:38:d4:43:6a:b2:09:33:06:3c:
                    6e:0a:8d:ec:f2:bd:16:c4:0d:74:e7:fd:2d:de:fd:
                    65:ce:36:53:59:d2:14:fa:fa:85:fa:e5:96:b7:0f:
                    8f:2e:ae:aa:b9:89:ce:23:d6:9b:8d:6b:c4:87:3c:
                    33:b9:6d:f4:05:2b:ee:43:f1:29:40:4c:09:0b:66:
                    0c:b4:53:55:41:cc:8c:e4:32:56:f1:60:a5:ca:8e:
                    6b:0e:50:81:8a:26:a4:24:3f:b3:32:b5:2b:c1:4b:
                    b4:06:4d:e5:3c:fc:96:04:93:37:af:c9:d0:30:c8:
                    a5:22:46:8d:ef:40:71:c6:00:fc:7e:b9:d7:99:bb:
                    63:ae:11:52:7b:a5:9f:b8:ac:3c:d5:59:fd:9e:5c:
                    6b:2c:78:4b:68:f1:52:59:bf:72:b0:74:7d:d7:4a:
                    b7:8e:78:22:d6:d8:67:51:0f:95:9b:db:3c:a3:7f:
                    60:fb:c4:5d:7c:dd:18:18:64:ea:36:69:a9:31:ad:
                    22:37:56:4d:14:b9:ff:01:4f:32:82:0f:51:93:02:
                    22:2c:f0:23:fe:c6:fd:32:63:85:a5:1a:ee:ab:1e:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0B:49:43:B4:07:90:F9:BF:1B:F6:A9:77:4F:FC:7A:89:FF:5E:70
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:bd:05:02:b7:00:1a:6c:c2:00:4c:58:82:b9:4a:a7:f0:
         11:b1:9a:ac:05:36:b9:c7:f8:9b:e7:14:91:c2:57:42:d9:6f:
         a0:09:96:bb:62:1f:54:2a:ea:43:1d:90:b0:3b:19:ef:0f:1b:
         24:c7:7a:b0:35:bb:2f:17:96:16:50:87:c0:0d:c4:b5:c0:0f:
         6e:af:40:c9:80:33:5c:1f:68:09:ff:7b:47:fd:2b:20:ac:9a:
         01:d3:0c:d7:e9:80:76:8e:02:e4:e6:05:a5:33:c7:e8:41:b9:
         dd:86:f3:31:e3:01:6c:6a:be:03:08:30:ab:9e:82:27:a2:c0:
         5d:89:2b:ac:21:db:3d:1b:85:0f:08:08:62:cc:4a:85:e0:a8:
         d1:80:c6:4f:f8:50:00:9f:14:ef:15:52:9c:fe:d8:a8:8b:97:
         45:93:c4:1d:e6:01:24:31:a9:85:67:4e:f7:dc:d6:6e:8d:d7:
         7b:96:cf:b8:aa:1a:27:b2:5f:b3:e8:8e:17:a8:30:15:15:cd:
         b7:85:01:f4:30:fa:8b:82:cb:91:d4:25:ad:d2:1f:82:94:a4:
         85:58:6c:7a:b9:b2:31:db:b1:f3:56:d9:12:5a:37:c2:ef:a9:
         c5:a2:14:f9:36:ca:17:00:e9:1f:46:fc:ea:36:b5:f7:39:33:
         fa:b5:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:17:47 2025 by rpki-client