Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
File:                     l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json)
Hash identifier:          6ZjYdl20bIWVmACSkI/Hfo/MwIvM9WujRIFhLJE8610=
Subject key identifier:   A0:DB:17:2C:58:0C:02:31:38:B2:9C:B3:39:02:30:73:6E:74:7F:C9
Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Certificate issuer:       /CN=97b6cb48841ce519b28359caf1bce340e33681ef
Certificate serial:       0196C23933EB6F65FE4610D6EE1403CF51D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
Manifest number:          06E1
Signing time:             Mon 12 May 2025 02:00:50 +0000
Manifest this update:     Mon 12 May 2025 02:00:50 +0000
Manifest next update:     Tue 13 May 2025 02:00:50 +0000
Files and hashes:         1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: yE+pXF4GvTt7LmZR5Pz1emzPrsQcQ6Ey37HdlA1/J+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:33:eb:6f:65:fe:46:10:d6:ee:14:03:cf:51:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef
        Validity
            Not Before: May 12 02:00:50 2025 GMT
            Not After : May 13 02:00:50 2025 GMT
        Subject: CN=a0db172c580c023138b29cb3390230736e747fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:e3:ea:35:19:44:5b:fd:99:29:c6:21:93:
                    71:08:ef:3b:84:89:0c:da:60:cb:31:2a:23:b8:f8:
                    56:e5:f6:ae:a3:58:9f:13:33:e3:71:6f:e4:2a:90:
                    28:64:98:93:a1:9e:a6:11:6c:b3:19:06:42:d2:56:
                    84:22:b4:19:53:17:2e:f1:8d:0b:7b:35:4c:8f:0c:
                    79:89:3d:a0:98:0b:0a:9d:f6:65:67:1e:4c:fd:f3:
                    b7:53:68:bf:57:d5:97:97:8d:fe:bd:8b:50:d1:9e:
                    b7:03:1e:dc:e8:22:cb:19:87:e1:64:f5:62:4a:19:
                    ff:d4:cc:51:80:92:0b:44:f7:5c:d2:61:60:66:62:
                    9b:8d:d8:2a:6c:32:27:df:4d:03:0c:28:89:53:36:
                    5d:b0:38:b9:ec:1e:99:b3:60:bc:f7:11:15:73:55:
                    e2:25:e4:86:85:ca:05:65:b3:ae:f3:e8:f5:30:2e:
                    c3:1d:55:a9:9f:14:c0:53:e2:89:7a:27:ab:7e:93:
                    cd:16:88:ca:e5:69:7f:04:4c:69:31:a4:69:fe:ad:
                    20:95:c9:ca:5d:70:58:19:58:6e:e9:d8:c4:1c:4e:
                    2e:4a:d9:24:23:ef:62:41:0d:ae:f6:d2:b0:23:c2:
                    90:dc:c3:0c:7f:02:c3:c2:15:a8:81:43:1a:a0:88:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DB:17:2C:58:0C:02:31:38:B2:9C:B3:39:02:30:73:6E:74:7F:C9
            X509v3 Authority Key Identifier:
                keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:30:c1:27:19:71:54:6c:48:88:7d:57:41:7f:9f:d1:0d:
         4c:17:fd:83:68:2a:88:bd:f7:e1:ad:dd:32:62:07:a7:be:c0:
         64:a7:32:fa:6c:d5:13:59:b7:e2:19:76:66:a8:01:84:5d:2e:
         fe:57:df:ee:62:1f:8b:5c:87:5e:fa:8a:eb:fe:93:4d:c4:d6:
         87:d3:9e:95:b5:6c:a9:5e:ea:f2:66:1b:04:0f:8b:36:57:b8:
         55:d8:e0:8d:94:cc:54:86:f0:83:1a:58:e8:c5:9d:ee:64:18:
         a6:48:cf:2a:6a:90:80:fb:a4:01:29:6a:1a:c6:6f:ef:5c:00:
         e7:dd:e2:4d:a7:a3:a8:a4:b5:b9:a9:2e:6c:61:05:e8:e6:72:
         13:01:36:55:31:ef:5c:cb:f3:dc:d4:41:05:12:65:71:1f:4d:
         7e:ff:55:2e:90:99:a1:f2:36:9f:21:50:2f:76:bb:4e:df:8f:
         df:69:99:d2:e7:d5:24:84:58:fa:d2:d7:d3:09:fb:3e:20:c4:
         66:be:aa:12:4d:01:ae:6c:80:2d:48:3f:2a:c1:cb:66:00:8c:
         91:5d:bb:9d:76:88:4f:e6:7d:08:5a:15:70:13:d4:17:4e:23:
         31:f5:aa:15:83:e3:27:fc:4e:21:22:46:28:73:d2:c8:ff:13:
         4b:ae:1e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:54:28 2025 by rpki-client