Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File:                     pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier:          xMzG4EQF93Rm6KM1VpwUEbKG/0sUPdUxrgxEjhu3XZU=
Subject key identifier:   BB:90:45:38:10:35:94:6B:FB:F3:60:2C:3D:FB:0F:0E:40:E1:3A:72
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer:       /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial:       0196C7285ED145CCBA7C8E7C9A249764EB5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number:          0851
Signing time:             Tue 13 May 2025 01:00:33 +0000
Manifest this update:     Tue 13 May 2025 01:00:33 +0000
Manifest next update:     Wed 14 May 2025 01:00:33 +0000
Files and hashes:         1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: FkEx3RVwP7zYnOkqAbIXO+Xc0knLUg6M6a9iaFRa0V8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:5e:d1:45:cc:ba:7c:8e:7c:9a:24:97:64:eb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
        Validity
            Not Before: May 13 01:00:33 2025 GMT
            Not After : May 14 01:00:33 2025 GMT
        Subject: CN=bb9045381035946bfbf3602c3dfb0f0e40e13a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:d6:e1:76:b0:89:93:4c:07:be:94:db:aa:
                    d9:11:44:2f:a7:28:62:f3:1d:0e:25:48:33:a6:ed:
                    2b:6a:1e:97:d4:ed:d7:ff:53:74:be:10:64:25:aa:
                    b5:c3:be:c2:89:79:41:c5:9e:3b:0a:c0:c7:26:b8:
                    de:7e:91:cc:ff:28:e1:b3:24:43:34:0c:cf:34:8f:
                    fb:db:99:e3:ae:4e:f2:1a:a3:98:03:50:03:d1:e4:
                    29:7f:40:e7:fe:0d:cb:48:89:ea:30:55:cb:68:98:
                    03:55:a0:c9:3e:a9:f2:35:a8:5c:2c:b6:aa:9b:9a:
                    00:df:48:8c:9f:3d:54:f6:9b:32:7f:f7:73:d8:36:
                    1a:ef:89:d6:62:d4:66:de:40:2d:fe:b1:9c:41:36:
                    95:7f:87:05:05:76:d1:76:fc:84:d7:b4:9b:78:7d:
                    50:5e:2c:d2:98:e9:d2:82:e3:7b:82:b4:ce:d9:2c:
                    5e:c9:2d:1b:02:b3:7c:b2:15:a0:c1:17:37:fa:15:
                    e0:cb:3b:db:de:fb:b6:99:be:93:bf:b8:47:3f:8e:
                    71:dc:9b:ac:b5:2b:33:32:46:b9:7f:1e:f3:cf:9f:
                    e3:32:0b:16:8a:6e:41:1a:fe:99:eb:f6:fe:0c:16:
                    22:ae:c0:c8:bd:7d:c3:32:8d:3e:05:cd:f4:f6:5b:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:90:45:38:10:35:94:6B:FB:F3:60:2C:3D:FB:0F:0E:40:E1:3A:72
            X509v3 Authority Key Identifier:
                keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:4e:7c:4a:e1:74:ba:0f:8c:8a:09:6f:e7:83:37:7b:54:a4:
         78:b1:21:f8:1c:d8:7c:03:a4:0e:d7:77:ff:4a:40:97:4b:3f:
         26:36:6a:08:80:73:4b:81:cf:5d:0e:99:67:34:6e:d5:91:4f:
         c2:d0:8c:49:07:e2:c6:3f:0f:eb:63:34:ad:35:e0:ed:06:50:
         4e:df:da:20:e2:a1:bc:8b:b8:4e:64:e5:0f:03:c9:2c:eb:1c:
         09:7b:e6:7a:e1:6b:25:b9:44:c1:a1:08:e6:ef:fc:e0:70:f0:
         d6:6c:c4:db:c9:db:28:ed:5c:60:74:2a:97:8a:d4:3b:60:a1:
         38:e6:67:4a:b0:92:63:88:b5:d8:9a:2c:ae:b4:af:13:f8:5d:
         12:7d:60:fe:c6:f4:1f:9d:93:37:88:ee:1a:fc:6f:fe:71:40:
         22:62:5f:b9:49:27:ca:5f:61:ad:64:97:73:12:32:64:13:f9:
         5a:7c:28:bc:4f:ea:a1:ca:47:a5:04:7a:cb:01:bb:35:01:33:
         ad:35:ac:88:96:b0:2e:ea:49:08:17:e7:f5:c0:65:b0:99:2a:
         01:db:93:84:18:01:7f:f4:6b:c0:78:be:fd:8a:ac:c6:6d:83:
         cf:55:55:96:74:38:e3:f7:d4:f3:bd:a0:82:4e:b2:7b:26:32:
         39:59:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:27:37 2025 by rpki-client