Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
File:                     tU0YlEyigIUFOR3pf6nWsrxhiZo.mft (raw, json)
Hash identifier:          1MCCrV0iHx728XAYTG58CpsFsJpADy7AKe6pSDF45xc=
Subject key identifier:   80:A3:7F:8F:46:84:5F:1B:77:3A:4B:92:0B:0E:B1:C5:BA:57:4C:76
Authority key identifier: B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
Certificate issuer:       /CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Certificate serial:       0196BD815255D9D4652B1B6ED5F62E4A3F67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
Manifest number:          0FD1
Signing time:             Sun 11 May 2025 04:01:30 +0000
Manifest this update:     Sun 11 May 2025 04:01:30 +0000
Manifest next update:     Mon 12 May 2025 04:01:30 +0000
Files and hashes:         1: tU0YlEyigIUFOR3pf6nWsrxhiZo.crl (hash: bvMzDZRLnXkgnZwN2vIXwST1bOB7kFGPilzYkyOqBAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:81:52:55:d9:d4:65:2b:1b:6e:d5:f6:2e:4a:3f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b54d18944ca2808505391de97fa9d6b2bc61899a
        Validity
            Not Before: May 11 04:01:30 2025 GMT
            Not After : May 12 04:01:30 2025 GMT
        Subject: CN=80a37f8f46845f1b773a4b920b0eb1c5ba574c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:60:9c:6c:50:63:8f:29:cb:a2:95:7d:a6:
                    d5:58:35:b0:76:95:7f:c2:a5:cf:b5:ef:1e:13:f5:
                    cc:bb:2a:19:23:a4:93:f8:ce:19:ea:4b:64:d2:d0:
                    3d:54:46:dd:67:b3:03:a2:43:80:c2:b1:83:f5:ed:
                    c3:7a:53:bf:51:ee:bf:8e:5e:03:6d:59:7b:34:cb:
                    85:d7:3f:2e:1f:16:ac:46:7a:83:89:a2:c0:69:aa:
                    d8:b2:47:e8:3c:2f:1d:88:a9:b6:dc:21:c9:15:f8:
                    16:0e:3a:28:14:f7:2f:c1:3c:5c:87:a2:0f:9a:ac:
                    04:8a:7e:14:7d:95:b0:71:9d:a8:82:94:40:f4:d3:
                    d2:c4:09:87:45:6f:85:38:a4:73:85:74:a7:bb:62:
                    ea:ab:f3:c9:3a:c3:7e:8c:71:84:00:66:aa:23:33:
                    2f:33:6d:2f:3b:f2:12:15:1f:b8:4c:74:96:01:5b:
                    58:69:fc:71:97:45:81:2d:15:46:85:b2:8a:e3:37:
                    19:c9:98:1b:4f:ad:42:78:04:77:d2:19:92:8e:2c:
                    f8:9a:bb:19:1c:7a:00:2e:87:bc:b4:d3:34:70:05:
                    62:ee:a0:8e:0e:45:39:88:19:92:c7:fb:6a:3e:70:
                    5c:92:2c:4d:37:9d:2a:d5:d6:36:7e:f0:e1:2d:38:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A3:7F:8F:46:84:5F:1B:77:3A:4B:92:0B:0E:B1:C5:BA:57:4C:76
            X509v3 Authority Key Identifier:
                keyid:B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:69:69:ff:f3:9d:a1:fc:a9:ca:09:59:bc:a1:21:5a:4c:90:
         e2:97:4b:fe:31:e8:6e:7a:61:39:32:00:73:b1:60:da:ec:3c:
         ad:90:08:c6:96:e8:7d:9f:81:10:2c:f4:74:54:f9:57:4e:92:
         40:1f:f4:b3:8f:fb:82:2e:63:4c:c9:23:11:06:5b:a6:bb:79:
         14:bc:66:2f:7c:ca:0c:e0:0b:2b:07:78:e7:40:89:e2:b8:5a:
         b4:18:33:f4:87:c7:8a:f7:3f:ee:67:68:bc:75:18:17:fb:f3:
         87:69:96:b3:9b:cd:ac:04:ea:98:14:16:c6:d6:45:2e:41:d7:
         aa:5f:39:6d:e0:98:30:3c:0e:71:07:87:73:c6:0f:3a:3b:48:
         c1:0b:f5:10:13:15:39:7c:86:a7:7a:9e:b8:3d:4a:dd:bb:7f:
         e7:34:b5:08:19:58:9c:54:d0:d3:04:c3:bd:ab:5e:10:e7:28:
         bf:72:ee:67:bf:40:9a:75:9a:e9:65:23:d3:24:ae:46:dc:5b:
         56:d7:39:b2:07:7e:86:7f:08:ae:0f:10:c1:c2:99:ca:af:4a:
         79:47:2f:15:b3:36:4b:8e:2a:62:fb:14:00:46:4e:26:a4:73:
         ad:d7:84:ba:63:3f:0e:52:87:1a:2a:dd:97:29:3a:15:7c:a0:
         91:c9:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:38:36 2025 by rpki-client