Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File:                     793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier:          euJ767VTZiFQnLAU1wd/fQ4wMhjpi6e5veCGBwvjMSg=
Subject key identifier:   B9:B1:55:14:F1:1C:10:7F:7F:96:25:03:77:B0:AE:02:A6:0E:B4:71
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer:       /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial:       01969CABFFEFBE8AB9B4B64573097C65783D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number:          151F
Signing time:             Sun 04 May 2025 19:00:39 +0000
Manifest this update:     Sun 04 May 2025 19:00:39 +0000
Manifest next update:     Mon 05 May 2025 19:00:39 +0000
Files and hashes:         1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: k9aK3mVt0TwADGd7X/WG3SDAfJJW6hSxveofQ1QLBS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:ab:ff:ef:be:8a:b9:b4:b6:45:73:09:7c:65:78:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
        Validity
            Not Before: May  4 19:00:39 2025 GMT
            Not After : May  5 19:00:39 2025 GMT
        Subject: CN=b9b15514f11c107f7f96250377b0ae02a60eb471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:69:a8:aa:2a:94:2d:ea:7c:12:7d:62:3b:
                    1f:b7:98:65:02:3c:1b:f6:fc:78:01:a8:ea:7b:e4:
                    d8:c2:5a:17:1d:4e:89:fb:af:06:51:55:4c:4a:d0:
                    d0:81:4b:53:1d:6c:b9:eb:5a:5a:4f:5c:0d:21:0b:
                    7a:4f:fc:6d:ae:5b:ff:f3:18:58:62:e5:18:13:95:
                    ad:62:bb:1e:c9:af:f7:8f:01:d1:bf:11:6d:5e:cb:
                    8b:3a:e0:64:f7:15:10:30:79:cd:ea:78:43:20:2a:
                    2f:6a:54:83:65:21:94:48:0d:e2:9c:1e:f7:d3:f3:
                    16:f2:d4:f6:3a:b0:27:99:a7:2a:d5:3a:09:58:6d:
                    17:58:22:6d:09:06:3c:64:bf:d5:83:db:f2:55:0c:
                    fb:dd:26:de:b6:cb:3d:4a:db:6d:7e:bd:29:06:23:
                    c5:b7:8f:0c:46:dd:ff:82:3c:7f:d1:ce:ed:df:0d:
                    33:c5:0f:46:7a:d9:e9:a2:65:b6:ba:a8:d0:33:a7:
                    ca:a6:85:98:32:64:f5:6a:49:0f:c5:3b:23:93:d5:
                    96:e7:96:f8:74:b6:d4:f4:8b:23:a3:fc:78:a4:10:
                    c1:ab:25:f7:19:ae:32:52:34:8c:39:e4:60:9b:de:
                    82:07:a1:db:38:d1:06:18:21:86:71:07:5f:46:a5:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B1:55:14:F1:1C:10:7F:7F:96:25:03:77:B0:AE:02:A6:0E:B4:71
            X509v3 Authority Key Identifier:
                keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:23:9a:cc:17:33:d5:b3:15:54:86:d0:b7:42:4c:04:ba:
         ed:60:9c:1e:dd:9c:4c:1e:2f:3f:91:b1:15:93:df:36:3a:15:
         8c:b8:5d:69:2c:bb:86:d5:39:d5:99:73:c6:a4:c6:2c:cb:ac:
         c6:bc:53:0c:51:6e:ec:d7:02:18:09:f7:bf:b1:30:ab:bd:a1:
         e4:68:4d:b9:b1:8e:d6:98:b4:f3:53:d5:1f:92:f1:0b:83:59:
         20:09:30:27:4a:f0:8b:05:27:28:bd:d9:37:7e:14:f6:70:f7:
         24:f8:ad:c3:15:2b:5c:27:00:c1:9b:2b:17:0a:d7:ab:e1:d2:
         0c:7d:d6:2e:b0:e8:04:80:b5:35:6e:85:c8:3a:7e:0e:ca:a4:
         6f:0a:2e:13:10:30:e0:1f:47:09:e3:15:04:c6:60:3b:a3:15:
         b0:e5:40:f6:b0:41:85:f4:12:ba:df:eb:44:f7:c1:84:b0:ad:
         c0:17:cd:30:b7:6d:b0:fd:7e:f8:de:4b:af:d1:32:f2:97:26:
         bf:c8:56:b3:af:09:99:73:00:a5:44:88:33:c4:30:77:40:26:
         bb:82:75:79:9e:5f:57:77:4b:6f:e4:ea:fb:61:92:5d:0f:38:
         45:ff:4d:40:f2:0e:42:a9:0d:b4:7e:cd:75:87:a1:83:41:fe:
         ed:64:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:34:50 2025 by rpki-client