Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File:                     0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier:          QBj5kTlEyl2ZmvmnLefPSHCafBIeVJc/kexUy3908As=
Subject key identifier:   3C:F1:EE:C8:5A:2B:1D:E3:6B:9D:CE:E1:B9:7A:06:89:C1:61:15:50
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer:       /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial:       0196C201F822549EC5DFA64FAB2C91F3821A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number:          DD
Signing time:             Mon 12 May 2025 01:00:31 +0000
Manifest this update:     Mon 12 May 2025 01:00:31 +0000
Manifest next update:     Tue 13 May 2025 01:00:31 +0000
Files and hashes:         1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: VmeKW+kO6q30NWdw3EN0SYnkrSHE09XPmYsLeZlyDk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:01:f8:22:54:9e:c5:df:a6:4f:ab:2c:91:f3:82:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
        Validity
            Not Before: May 12 01:00:31 2025 GMT
            Not After : May 13 01:00:31 2025 GMT
        Subject: CN=3cf1eec85a2b1de36b9dcee1b97a0689c1611550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:85:1e:03:a2:b5:69:78:57:23:c8:be:16:
                    45:5e:36:65:ba:75:99:c3:68:44:97:aa:76:4a:f9:
                    0f:f5:94:78:47:5f:82:f5:98:ff:af:04:93:8a:7a:
                    53:19:b5:2f:84:e4:e8:76:f5:a9:0f:25:14:21:5e:
                    40:0a:7b:e6:99:61:fd:bc:77:0b:36:b3:3c:bd:5f:
                    88:86:da:6a:83:78:7c:f0:73:a8:c4:8f:0a:75:eb:
                    5f:85:07:45:2d:aa:29:83:5c:47:6a:bf:85:00:d2:
                    7d:c4:6e:b8:06:87:87:9a:59:f4:a5:0f:84:40:8f:
                    ba:8e:99:5c:64:89:3b:0a:81:5b:bc:90:2f:26:c3:
                    5a:37:da:58:92:b1:51:a8:4e:32:98:d6:74:3a:44:
                    31:e4:64:82:2b:97:a4:7d:da:87:51:ce:06:2f:8e:
                    18:d3:01:7b:8f:e7:96:76:45:1f:73:30:52:b1:d9:
                    16:62:5f:d5:e1:35:02:f9:8c:4c:97:4c:c1:46:18:
                    20:16:f1:ff:09:52:51:bb:32:cc:d1:ba:19:a2:70:
                    f2:1b:b6:ac:1a:70:5a:22:ff:04:f6:52:c2:a3:0f:
                    52:02:4f:6d:84:35:dd:c5:0f:f3:22:ef:b1:b3:cb:
                    a5:6f:65:7c:f2:12:ba:67:3b:cc:65:16:7d:34:ad:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F1:EE:C8:5A:2B:1D:E3:6B:9D:CE:E1:B9:7A:06:89:C1:61:15:50
            X509v3 Authority Key Identifier:
                keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:50:fd:3f:01:4c:a6:c9:2f:f0:be:bf:39:b0:37:a2:e9:19:
         2f:4c:1f:80:da:46:d2:20:b1:8c:40:87:23:f6:76:c0:74:30:
         fe:35:f9:7b:4c:02:b5:84:63:54:9c:5b:d8:22:31:4d:92:95:
         fb:8b:23:55:9e:db:c8:12:95:80:b9:7a:c8:62:5a:80:03:d1:
         01:01:62:df:6d:1a:5e:a0:32:a3:c8:8e:5b:92:c1:80:51:66:
         ba:e0:22:47:e9:dd:b6:50:aa:39:03:ca:ef:65:0c:61:58:00:
         31:fa:99:60:27:d7:94:c9:e3:4b:4c:fa:c1:86:f4:bb:4e:be:
         27:fb:c6:ec:93:a0:43:d2:2a:c1:24:c1:5f:e6:75:fc:15:b6:
         e3:51:db:55:0b:00:68:3a:8b:dc:35:9b:8b:e8:4a:df:ba:34:
         88:07:63:c0:67:ac:c0:50:8c:28:38:6d:60:b6:77:ed:f6:72:
         33:3c:00:d7:ed:67:84:56:4f:df:a3:de:95:63:5f:3e:f8:c6:
         5f:b6:ec:29:a6:ee:e6:e2:99:62:44:85:15:a1:92:01:31:2c:
         23:72:74:05:89:22:c3:49:f4:83:85:9a:23:f2:e7:b2:39:78:
         18:fb:f3:16:46:7b:f8:77:bf:8c:92:01:d3:0c:00:17:3c:50:
         ed:a0:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:23:37 2025 by rpki-client