Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
File:                     dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft (raw, json)
Hash identifier:          8G+91qj0e9wTs/ai60Y59GGZlKgqGUc8aCRg3i13oy0=
Subject key identifier:   33:FD:3C:5F:B8:4D:AE:FE:14:D4:6A:83:F9:EB:74:2D:ED:B3:83:4F
Authority key identifier: 76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
Certificate issuer:       /CN=769c7445f567912ce828a5f787ec944a08dbfde3
Certificate serial:       0196C7295112922AAF90A5E55FBEC867592B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
Manifest number:          1119
Signing time:             Tue 13 May 2025 01:01:35 +0000
Manifest this update:     Tue 13 May 2025 01:01:35 +0000
Manifest next update:     Wed 14 May 2025 01:01:35 +0000
Files and hashes:         1: dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl (hash: Qg1yFCGODUnsgZnX7Iw6YWiO7e8Je33k222akEQhd+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:29:51:12:92:2a:af:90:a5:e5:5f:be:c8:67:59:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769c7445f567912ce828a5f787ec944a08dbfde3
        Validity
            Not Before: May 13 01:01:35 2025 GMT
            Not After : May 14 01:01:35 2025 GMT
        Subject: CN=33fd3c5fb84daefe14d46a83f9eb742dedb3834f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:44:7b:70:f6:a5:67:86:3a:e5:08:73:d7:
                    d4:93:e8:29:40:ca:48:60:36:07:ba:7e:e6:34:74:
                    3c:d4:dc:dd:6a:99:f3:a1:5d:39:b3:f3:a2:15:ee:
                    4d:80:24:88:bb:f0:d1:89:32:f1:06:43:44:31:3f:
                    39:cd:18:8b:94:06:6e:e7:e3:06:7a:ad:75:95:70:
                    cf:e2:b4:a0:d3:af:5d:57:36:b5:75:2e:45:5a:d6:
                    20:ad:61:9b:6a:bd:23:4a:8b:a3:57:a3:36:6b:fc:
                    17:e1:e1:cf:63:13:92:67:67:71:d0:58:7f:cf:44:
                    d2:f8:d1:a3:e2:52:41:ff:d8:47:cf:3c:d7:58:7a:
                    58:fe:ad:79:53:92:4c:64:11:07:86:87:19:5f:4b:
                    08:f4:58:98:bd:0c:9d:5a:57:31:a0:3a:aa:99:95:
                    c3:73:62:0b:49:d9:83:36:e0:19:f2:14:e6:15:0f:
                    5b:cd:87:8c:60:71:79:c4:5b:95:8a:11:ac:5e:64:
                    fb:3f:8f:d5:71:0e:bc:bb:39:14:f8:6c:16:4b:44:
                    20:5a:de:c3:e7:f6:b8:1a:5b:29:36:99:56:e0:d7:
                    1c:0d:25:b4:c7:74:13:2e:e0:eb:5f:1e:b5:78:9e:
                    b8:6d:cc:d8:e5:a4:ee:b4:73:5e:47:a1:0f:0b:bb:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FD:3C:5F:B8:4D:AE:FE:14:D4:6A:83:F9:EB:74:2D:ED:B3:83:4F
            X509v3 Authority Key Identifier:
                keyid:76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:d4:a5:de:c6:77:ca:47:eb:15:ca:4e:a3:35:81:0e:4a:
         5b:5f:b8:e4:76:ac:2f:27:c8:36:83:32:31:a6:09:f3:80:9f:
         f1:e1:03:bc:5b:26:0c:ec:5a:d4:b7:26:77:c6:ba:72:5d:3b:
         bb:78:19:2d:df:a1:3e:d2:9a:06:05:c9:70:cb:9b:c5:11:bf:
         6d:8f:ed:05:92:cb:30:be:d8:41:07:06:a7:2c:9a:88:d3:3e:
         8c:cf:35:4f:6b:49:4f:b7:a8:73:f5:69:d1:ad:df:95:83:49:
         07:c0:5c:1a:3e:f4:b3:b9:67:96:7a:ec:8d:58:29:2d:f7:af:
         47:01:d8:0d:d3:a2:57:a0:a3:d9:2d:e1:2e:95:c3:26:2f:7e:
         7e:56:65:28:46:d2:b0:1c:03:9f:b3:c7:41:c0:b4:1e:9b:1d:
         17:5c:35:21:9a:71:7a:d0:84:21:0d:8d:7e:f3:fc:ad:52:24:
         fe:c8:60:4d:25:2c:fa:df:26:fa:d7:7d:ca:93:85:da:96:5b:
         b1:9f:04:3d:63:50:a5:48:a5:76:63:67:03:56:3b:56:4e:f5:
         b8:93:6f:37:e7:f7:71:16:83:a7:f4:63:42:e1:e0:68:7c:f9:
         3b:d1:94:7a:25:3f:f6:b8:f6:e5:79:44:c6:6d:18:bc:b4:b8:
         59:40:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:19:33 2025 by rpki-client