Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
File:                     FlazvdJs8CcTOSyn3Vnq9czsEhE.mft (raw, json)
Hash identifier:          uXhDLpovdQkhhYff2U5xBMHhx7cLNQI2KSnWUaln1VE=
Subject key identifier:   35:8C:FA:26:49:5B:F9:00:97:D8:58:3C:24:4D:51:C2:4B:BC:0F:B4
Authority key identifier: 16:56:B3:BD:D2:6C:F0:27:13:39:2C:A7:DD:59:EA:F5:CC:EC:12:11
Certificate issuer:       /CN=1656b3bdd26cf02713392ca7dd59eaf5ccec1211
Certificate serial:       0196BC37416129FFBE905259382D240E4399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
Manifest number:          0A51
Signing time:             Sat 10 May 2025 22:00:59 +0000
Manifest this update:     Sat 10 May 2025 22:00:59 +0000
Manifest next update:     Sun 11 May 2025 22:00:59 +0000
Files and hashes:         1: FlazvdJs8CcTOSyn3Vnq9czsEhE.crl (hash: 0FxfzfNHaeS4+66iyPizOeMsgWqSG8BVgheLPUthu1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:37:41:61:29:ff:be:90:52:59:38:2d:24:0e:43:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1656b3bdd26cf02713392ca7dd59eaf5ccec1211
        Validity
            Not Before: May 10 22:00:59 2025 GMT
            Not After : May 11 22:00:59 2025 GMT
        Subject: CN=358cfa26495bf90097d8583c244d51c24bbc0fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c1:2f:2e:20:a3:a1:10:77:ed:63:a9:37:82:
                    6d:08:58:5b:eb:a0:66:55:bf:98:dc:72:43:ff:9f:
                    12:1a:d9:40:21:40:3a:4e:d1:21:cd:ee:4b:7f:f1:
                    d2:3a:8b:cc:08:24:36:8f:c6:e4:a3:3c:68:b3:2f:
                    c3:4a:24:5a:17:60:65:78:5c:12:ed:e0:7f:10:e8:
                    cd:aa:1f:18:4a:f2:00:ad:47:b9:81:c4:33:cf:6d:
                    1f:fb:af:dd:a6:46:19:00:c0:22:27:87:c3:13:25:
                    64:3b:9c:6d:8f:99:d5:33:93:6c:d7:4f:8e:50:0e:
                    71:b1:59:8b:55:bc:10:e0:51:b8:12:52:b2:51:87:
                    5d:cc:96:c2:4f:09:b5:5b:0f:8f:75:f6:46:f1:da:
                    74:f7:a5:78:c1:a1:2b:66:79:4d:38:8c:52:b8:7c:
                    e3:80:95:0c:64:f8:c6:d3:8b:36:ba:75:94:40:1b:
                    87:fa:5b:ab:ba:07:21:1a:8a:c5:41:cf:69:63:39:
                    9b:51:1d:28:90:13:83:21:ce:99:35:e7:f8:15:48:
                    a1:18:fe:03:fc:36:70:9b:c9:82:7c:00:fe:b5:93:
                    f3:60:b7:d5:0d:75:8e:45:1a:5e:b8:3e:1c:5a:c0:
                    f7:a8:d0:ca:9e:e2:eb:63:8d:18:7a:ca:8e:87:9e:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8C:FA:26:49:5B:F9:00:97:D8:58:3C:24:4D:51:C2:4B:BC:0F:B4
            X509v3 Authority Key Identifier:
                keyid:16:56:B3:BD:D2:6C:F0:27:13:39:2C:A7:DD:59:EA:F5:CC:EC:12:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:21:71:7d:da:9c:38:44:e5:a0:7b:4b:24:3e:98:51:2d:e7:
         71:6d:30:45:b2:e8:89:74:60:c8:a4:ee:d9:dd:36:b0:b1:13:
         9c:65:2f:eb:2c:e0:ea:d4:71:d3:18:14:25:33:26:77:d5:53:
         36:77:43:cc:63:65:62:0f:d8:f3:2b:31:75:02:d4:5c:e7:13:
         66:33:bf:c8:40:f8:01:77:e3:3b:4b:c6:90:0b:5c:2c:e6:48:
         bb:07:62:49:f8:31:30:6d:bf:77:55:5a:ab:f0:90:39:ec:c7:
         51:e9:37:a3:a2:c6:6e:ab:9c:39:80:b9:00:8f:6c:d1:a2:9a:
         8c:95:5a:17:c4:9a:e9:e2:f9:c0:41:91:cb:16:a6:25:21:12:
         b7:40:83:d5:19:c4:e3:08:69:07:4e:5b:f2:00:cf:6d:d9:87:
         51:88:a2:53:4d:b0:d2:28:29:77:1d:e4:a6:f3:ef:a6:a8:a0:
         71:b8:cc:16:3d:65:70:6d:ea:b3:59:b2:69:04:f6:c1:81:15:
         3e:84:07:28:b3:5f:e5:d5:69:0c:7c:07:3b:60:fc:aa:17:17:
         df:ae:76:9f:95:20:a4:07:35:a7:51:a0:25:3b:ce:bd:00:b4:
         15:39:47:fb:67:da:84:4b:4c:b1:83:e6:56:65:3f:77:2d:85:
         40:f1:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:14:18 2025 by rpki-client