Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
File:                     eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json)
Hash identifier:          /ovIua11Q7L09M7yRdgehR8T5PF9L1jzL0FaI3RUk28=
Subject key identifier:   12:13:AA:8E:2E:EB:81:70:82:6C:64:03:FC:A0:6F:14:CE:B7:89:7B
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Certificate issuer:       /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial:       0196C20285201D146978CA71A889AB885E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 01:01:07 +0000
Manifest this update:     Mon 12 May 2025 01:01:07 +0000
Manifest next update:     Tue 13 May 2025 01:01:07 +0000
Files and hashes:         1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: AJ9exhWJ8bxxi7wH3nIsDPDNrAukrZ/LBKPlfIeNWKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:85:20:1d:14:69:78:ca:71:a8:89:ab:88:5e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
        Validity
            Not Before: May 12 01:01:07 2025 GMT
            Not After : May 13 01:01:07 2025 GMT
        Subject: CN=1213aa8e2eeb8170826c6403fca06f14ceb7897b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:66:86:13:ec:ec:9c:02:22:82:bd:26:ff:
                    17:be:b6:05:2e:48:8f:41:06:6e:5e:ef:a5:63:69:
                    01:ef:4a:da:fe:dd:ad:44:6d:94:0c:53:18:d6:11:
                    d2:96:4c:f7:f0:97:86:b0:99:82:ce:3b:d6:72:ed:
                    9a:78:fa:f3:78:1e:92:68:79:a1:55:5c:bb:44:2c:
                    42:57:88:60:e8:46:a6:bd:a1:1c:c4:d8:1c:66:79:
                    1c:13:b3:3e:de:34:03:f0:75:bd:53:23:3e:9a:2d:
                    1d:32:cf:b8:45:61:84:d9:2b:d9:e3:fe:b9:73:e8:
                    77:60:8f:c4:e9:71:7c:74:17:04:26:7b:35:95:e9:
                    73:9b:fa:b2:49:da:f0:c8:ba:be:9c:45:89:44:9e:
                    c3:bc:87:12:df:5d:ce:da:11:66:c1:7b:53:7e:03:
                    79:5b:8c:21:cb:dd:a1:0c:91:ec:58:35:20:32:45:
                    93:a9:0d:a4:5d:aa:2e:4f:1a:a7:33:7d:ee:48:5a:
                    9a:d3:ee:eb:b4:7e:f5:a8:5a:70:6c:11:0f:43:8e:
                    5c:16:e4:36:50:a8:fb:a4:b8:da:c3:cb:3a:54:22:
                    63:12:bc:17:ff:d1:11:11:ac:37:00:d7:fc:87:87:
                    1e:45:51:f1:e8:e0:d8:f4:d9:65:4d:6b:a6:93:2a:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:13:AA:8E:2E:EB:81:70:82:6C:64:03:FC:A0:6F:14:CE:B7:89:7B
            X509v3 Authority Key Identifier:
                keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:46:f9:87:a0:ce:27:55:7a:fd:59:cd:fc:27:e6:bc:5f:08:
         a5:11:3e:fb:f0:f8:ce:07:14:8f:e3:f8:06:21:6e:53:0c:0d:
         5c:7c:0b:82:f1:8d:11:24:bd:a6:50:3e:e5:f9:40:d9:53:7e:
         38:57:51:c3:8c:14:f0:e4:8d:e6:0e:19:d9:a3:0a:ff:04:d2:
         67:ce:07:26:52:ed:2e:0e:06:3a:1b:f5:32:93:f2:a7:55:17:
         6f:65:fa:f7:0c:66:12:6e:69:a3:fe:18:9c:45:06:5a:ef:16:
         d3:a6:81:e5:0e:6a:91:77:ff:96:03:0d:a0:62:3b:c5:e8:e5:
         d8:f1:3a:6b:05:60:85:cf:cf:82:55:a2:a4:82:50:05:99:3a:
         19:c1:41:cd:cc:33:65:84:b3:6d:64:1f:42:36:a1:06:47:f2:
         0e:8e:8f:1b:8f:6d:64:0b:ed:0d:32:1c:58:83:a3:c0:0b:85:
         ee:49:5e:fa:cd:8a:ae:d4:af:18:33:00:56:95:4e:53:5b:c7:
         10:4c:b1:07:ad:39:0d:93:1a:3e:2c:9e:4b:b7:64:af:91:ea:
         78:2e:d0:35:a2:08:74:ce:70:85:eb:07:26:b9:1e:aa:60:ca:
         f5:b3:11:4b:3d:a3:98:31:09:ba:9f:41:9f:a2:3e:8d:1b:08:
         0e:f7:ba:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:32:32 2025 by rpki-client