Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          FuvFvTF2n80hXSyG/LSF54G8dwxrYii2Fn1cPXPcLHk=
Subject key identifier:   70:B0:45:AF:99:96:0D:A0:DC:FB:6D:7B:A8:5B:C5:AC:5F:57:72:7C
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       0196C9850DB81FBABAC99CA8181D3DB69C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          1536
Signing time:             Tue 13 May 2025 12:01:02 +0000
Manifest this update:     Tue 13 May 2025 12:01:02 +0000
Manifest next update:     Wed 14 May 2025 12:01:02 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: omOeVZFTmeWUYflN4D06zdRlbK+EAlml7phJ3tYIiDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:85:0d:b8:1f:ba:ba:c9:9c:a8:18:1d:3d:b6:9c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: May 13 12:01:02 2025 GMT
            Not After : May 14 12:01:02 2025 GMT
        Subject: CN=70b045af99960da0dcfb6d7ba85bc5ac5f57727c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:d8:91:97:7d:ae:37:14:cf:e9:4a:a2:65:
                    67:d2:5a:b3:a0:b6:a8:d3:96:9c:bc:37:ec:e9:8c:
                    c5:15:a2:16:c4:c1:60:d0:a0:33:59:29:06:ab:65:
                    1b:fe:69:ad:48:39:22:e6:e4:e3:58:d0:48:78:85:
                    9c:05:bb:c4:61:19:eb:81:95:3e:5c:65:f8:35:49:
                    9f:79:0a:c1:1d:9b:c0:af:9d:a5:46:6f:4c:6e:34:
                    b5:b0:a7:26:7a:a3:23:37:1e:63:cc:44:a9:a5:60:
                    ce:a6:ba:8b:62:e2:93:1b:47:4b:35:cb:7a:45:3a:
                    86:ae:bf:97:cf:e0:03:05:65:20:e4:b1:bf:9a:94:
                    24:97:f1:ad:fb:66:9d:23:f7:9e:a9:d2:4a:49:e9:
                    24:86:d8:07:48:b7:77:5a:c6:3a:17:ca:2b:2b:75:
                    43:8f:91:03:d1:a2:e9:4a:76:55:4a:a6:7b:c9:d0:
                    e1:ff:76:58:76:87:7d:df:55:bf:1e:bd:b0:69:1a:
                    5e:c3:07:77:0d:32:ef:bf:30:56:2a:a2:05:8a:4b:
                    af:5e:66:00:47:3b:2c:00:a6:aa:43:f0:b9:c3:91:
                    03:fc:2f:07:98:6a:63:f1:89:7f:bc:56:27:f0:f3:
                    14:0b:90:60:93:39:0a:ad:77:6d:66:f3:00:6b:b1:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B0:45:AF:99:96:0D:A0:DC:FB:6D:7B:A8:5B:C5:AC:5F:57:72:7C
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:b7:09:f3:24:db:f0:99:14:67:05:0d:e1:7f:83:ab:05:
         60:fb:01:49:af:8b:e5:6f:9d:d1:31:50:fb:72:6a:5b:b7:8f:
         38:2b:be:fb:58:72:ae:a3:4e:3e:b6:27:46:20:1a:c5:86:34:
         49:4d:57:5b:44:e9:74:fc:ad:27:4c:4d:06:5d:bd:38:46:d4:
         c8:70:f1:83:e7:d5:bc:3a:7b:c1:f5:88:ca:87:b1:bc:27:af:
         31:7a:b5:43:67:fd:ee:d2:78:91:fb:1f:75:7e:a2:3b:c1:68:
         30:57:3f:04:6c:c8:23:10:3a:27:7b:4c:75:25:89:5f:e2:55:
         b0:53:4a:9c:cb:89:60:c6:ed:ab:93:cf:fc:c6:e8:1c:1d:c1:
         b8:e2:a7:56:09:fa:54:5d:32:a7:0e:1b:2a:46:d3:ac:ff:dd:
         fa:18:df:1e:d9:40:7c:70:86:25:7d:ab:3b:6f:a4:64:cd:3f:
         3f:6b:e7:8c:b6:a2:31:b8:75:f3:b4:26:75:7d:8c:62:48:01:
         44:77:c3:3a:f9:2c:f1:70:a1:90:d8:eb:5e:d6:14:3f:99:37:
         dc:11:85:0a:db:84:24:55:a1:11:97:dc:c3:d4:d2:4c:9c:1e:
         d5:81:27:fa:48:de:8b:a8:1a:65:40:58:d4:c1:be:ac:00:fa:
         b0:3e:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:59:17 2025 by rpki-client