Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File:                     pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier:          IhZRVESu8pw+/kArw9QGbEL8W4qTlGBYtdhqSFzD6DA=
Subject key identifier:   7F:0C:00:38:85:BA:A1:AF:1B:82:E7:A2:D9:CC:B3:D0:06:48:AF:FC
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer:       /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial:       0196C15DC8920494BB129139A6E347F89D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number:          0560
Signing time:             Sun 11 May 2025 22:01:10 +0000
Manifest this update:     Sun 11 May 2025 22:01:10 +0000
Manifest next update:     Mon 12 May 2025 22:01:10 +0000
Files and hashes:         1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: bhuQA27+tuBlRbsp6gWqIjKrws8tV3FcG5Wew5kj5mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:c8:92:04:94:bb:12:91:39:a6:e3:47:f8:9d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
        Validity
            Not Before: May 11 22:01:10 2025 GMT
            Not After : May 12 22:01:10 2025 GMT
        Subject: CN=7f0c003885baa1af1b82e7a2d9ccb3d00648affc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:fa:30:02:10:51:10:cc:d8:09:b9:4d:af:
                    2f:c5:7f:b7:92:67:e8:5b:5c:ed:a4:f7:cb:e6:e2:
                    10:89:2b:cf:26:dd:1d:1a:b8:0f:3f:dc:3d:68:50:
                    f9:32:04:d4:29:a8:96:59:27:9e:60:bd:0a:c5:a7:
                    1b:6d:ae:4d:f9:07:34:83:e8:bd:de:ae:44:47:09:
                    15:3d:1a:6b:f1:57:ec:3c:07:be:0a:42:a4:4b:34:
                    45:aa:4b:ba:ec:61:14:ed:68:81:9a:89:7c:1f:23:
                    59:da:15:d9:d3:81:ef:04:47:a4:f1:ff:b3:03:57:
                    cf:08:7e:55:7c:b4:be:79:b9:e7:86:ab:03:c4:21:
                    ed:7b:56:7b:da:03:2e:b7:78:75:69:9f:57:0f:2f:
                    9a:a0:18:37:b6:51:74:a4:a8:c7:3f:13:ec:82:6c:
                    43:7f:cc:fe:3e:94:f1:af:44:79:3d:f8:fa:a9:cb:
                    48:9d:c7:2c:27:30:39:de:01:a2:ae:79:fa:a5:0c:
                    45:f5:f8:d9:8b:d7:5e:0d:b5:be:53:c0:68:8a:c6:
                    78:1e:29:b7:53:c5:b6:d2:56:15:27:b3:3c:11:67:
                    e8:44:fd:5a:19:0c:3a:4f:8d:77:7e:4c:c7:82:c6:
                    b9:36:61:df:2f:ea:6b:72:34:61:8b:5f:7c:78:59:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0C:00:38:85:BA:A1:AF:1B:82:E7:A2:D9:CC:B3:D0:06:48:AF:FC
            X509v3 Authority Key Identifier:
                keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:16:11:30:09:70:e5:21:d9:48:a5:91:b3:4f:8e:cf:4a:ab:
         42:31:c4:9e:16:ef:b2:55:d3:2d:b6:85:8b:f5:f5:27:e0:db:
         ec:7d:fd:26:a4:71:21:47:06:de:74:c3:27:b8:ee:23:7f:5f:
         76:66:c4:fa:6d:70:29:f0:b7:80:42:b7:8d:81:c2:dc:6f:3e:
         17:18:30:c6:93:63:e8:f6:69:73:7b:51:2b:b5:ce:20:30:78:
         cf:0a:e0:e2:9f:a2:b5:88:82:20:ab:d6:15:cc:5d:a1:b6:76:
         97:57:3e:18:0e:22:60:77:76:2b:2f:36:7b:a0:83:33:42:08:
         b8:d9:26:78:da:f6:2e:8a:67:83:02:e5:db:63:00:9b:5f:e5:
         67:ee:41:e2:e5:5b:f1:49:0b:15:ab:77:d0:41:b3:73:5b:25:
         75:75:be:84:c4:ef:2f:12:93:94:42:86:45:95:88:d7:d0:f2:
         45:f4:38:d5:74:38:77:e1:c3:7d:30:ca:43:5a:8e:79:b8:f3:
         82:d4:1d:c3:10:aa:7f:08:a6:15:ba:fa:33:7f:b6:2b:5f:27:
         d1:e4:78:71:d5:81:e0:a8:39:72:a5:92:eb:66:e7:66:94:20:
         91:af:ec:6f:ca:cc:ab:0a:36:40:ed:f1:f3:09:c5:62:f2:19:
         f9:e2:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:19:57 2025 by rpki-client