Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File:                     dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier:          GeOhCR9NRYtaKSPfYgmp1Eyx4L4dhgqgrq0fMOk1RJs=
Subject key identifier:   9E:03:D8:52:6C:76:29:F4:BD:EB:4A:88:70:A8:27:39:19:F1:E4:77
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer:       /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial:       0196A3C137E2EB3529EE406716792E134BC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number:          1522
Signing time:             Tue 06 May 2025 04:01:11 +0000
Manifest this update:     Tue 06 May 2025 04:01:11 +0000
Manifest next update:     Wed 07 May 2025 04:01:11 +0000
Files and hashes:         1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: sSiiMKh06hqGjkmJgh7LEVMoRwOkpNU5Cph/v+/zqgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c1:37:e2:eb:35:29:ee:40:67:16:79:2e:13:4b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
        Validity
            Not Before: May  6 04:01:11 2025 GMT
            Not After : May  7 04:01:11 2025 GMT
        Subject: CN=9e03d8526c7629f4bdeb4a8870a8273919f1e477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:30:58:5c:0d:09:90:11:94:0d:c8:9a:2e:
                    dd:81:69:0b:00:d6:f4:ec:25:0e:9e:f1:ec:e0:da:
                    0a:f7:cd:9b:d2:c3:5a:52:b8:21:83:6a:d3:9a:9b:
                    b5:7c:cc:68:ca:3a:a5:6a:94:55:3a:bd:90:cf:6c:
                    29:46:f3:3c:52:05:17:59:cc:d0:e9:d9:47:5c:9a:
                    90:d8:6c:37:97:75:a3:6d:e5:fa:8b:de:9c:3a:08:
                    6a:89:fe:62:ef:63:b8:e9:73:2f:f0:12:98:b7:66:
                    ed:7d:c9:ac:f2:f2:69:4b:6d:e1:4a:61:b6:97:14:
                    46:74:36:e2:17:fe:84:f8:29:de:f9:52:83:b7:4f:
                    14:fc:31:a6:15:39:6a:0f:5c:eb:58:86:26:3e:68:
                    e6:98:aa:90:4f:6a:3e:cc:82:31:f1:dd:54:bc:3c:
                    e5:b7:a2:3d:70:60:04:12:8a:28:da:c9:7d:d0:ce:
                    3c:bb:1b:25:b6:6e:57:a9:ab:36:25:2d:f6:bb:cb:
                    bd:de:0c:48:c7:92:8a:03:8a:6d:66:9d:59:f7:30:
                    f6:35:a9:47:76:8f:71:50:ee:74:31:71:68:5f:15:
                    fb:10:99:78:0d:6a:38:64:17:7b:b7:3a:4c:2e:7c:
                    bf:8a:d7:30:be:0d:4c:df:9a:67:1e:69:bd:e3:74:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:03:D8:52:6C:76:29:F4:BD:EB:4A:88:70:A8:27:39:19:F1:E4:77
            X509v3 Authority Key Identifier:
                keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d2:4d:d5:2a:a8:ba:b5:a3:cf:94:50:0e:91:93:bf:9e:c3:
         3d:93:21:df:9d:d4:1d:dd:94:09:18:c7:13:4d:79:79:7f:db:
         0f:dc:60:6b:55:20:34:19:75:a6:f4:e2:6a:0d:d9:bd:65:82:
         52:b2:c5:18:fb:a2:d3:6b:e0:2c:7a:92:95:82:e7:43:2d:76:
         01:5d:28:c8:be:ec:6b:f3:8c:ef:72:70:0a:ea:2b:16:31:d3:
         b2:da:29:23:e4:b0:b1:d3:60:d2:40:01:6b:aa:d1:be:d2:9d:
         20:33:84:f9:79:df:9f:59:3f:08:5e:d1:83:90:77:c1:68:42:
         68:8d:3f:d1:b9:2b:9a:9c:68:cc:b4:5c:f9:16:ac:fd:f8:97:
         8c:f9:12:c4:4d:86:c4:60:50:a9:7a:a0:cd:99:0e:de:72:9e:
         36:5e:b9:cf:5e:50:db:b6:a1:27:63:6e:4c:81:82:01:f5:60:
         c8:21:00:4e:fb:96:6e:d7:89:0d:5b:69:cb:32:2c:5a:ce:1e:
         99:d3:18:b4:6d:63:12:f3:2e:d7:f5:22:fa:19:58:89:b2:92:
         81:48:77:11:86:11:8f:9c:ea:e2:5f:5e:ea:d4:d8:74:71:89:
         b5:6e:5f:2b:9e:e6:76:63:ec:51:0e:5f:95:f0:7f:d7:fc:9d:
         8c:67:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:39:48 2025 by rpki-client