Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File:                     iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier:          1hBDRugsyNuIYEowQfa5M9MWKuu5kXhIrNWK9b/rG2U=
Subject key identifier:   99:A0:B7:18:32:3F:62:7B:9F:16:EC:30:2E:41:E3:6F:FF:F2:FB:D9
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer:       /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial:       01969DF5F7FA1F3ABF176D5FCB06164A015D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number:          054B
Signing time:             Mon 05 May 2025 01:01:04 +0000
Manifest this update:     Mon 05 May 2025 01:01:04 +0000
Manifest next update:     Tue 06 May 2025 01:01:04 +0000
Files and hashes:         1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: 4vsDR4FvCiMd1Ot8R5k26NCZUgCDHku/ynEEomllhq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:f7:fa:1f:3a:bf:17:6d:5f:cb:06:16:4a:01:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
        Validity
            Not Before: May  5 01:01:04 2025 GMT
            Not After : May  6 01:01:04 2025 GMT
        Subject: CN=99a0b718323f627b9f16ec302e41e36ffff2fbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:a7:a2:e0:f6:b4:fd:0b:7a:1f:6e:e0:be:
                    85:9e:e5:09:c7:ae:ac:c3:65:3e:ac:07:5e:c4:88:
                    56:4b:21:ad:e1:80:b4:49:ac:bf:bb:16:96:4a:5c:
                    2f:b2:b2:c9:fb:ce:c6:8a:ab:19:ed:3b:86:19:4c:
                    e2:0c:ca:32:fb:00:ca:b7:a0:22:76:d5:6f:9a:b3:
                    59:f5:3d:4b:f3:92:43:24:cb:a9:93:b3:44:46:dc:
                    87:3c:e0:b7:9b:b1:bd:83:1d:b2:74:bc:bb:c1:43:
                    fa:eb:f0:62:ae:b3:a3:76:9c:89:7b:bb:e3:bd:9b:
                    f7:e2:f4:7c:ef:c1:51:f7:5e:68:63:65:98:a8:4a:
                    99:66:7d:ee:66:d9:fd:76:31:aa:1f:cc:16:12:31:
                    bc:8e:07:63:0c:69:b2:d7:cd:f0:9e:0f:62:a7:e3:
                    fc:47:ee:2e:69:ba:94:9e:99:97:07:7e:8e:df:2e:
                    9a:07:76:22:af:42:f4:72:3b:59:bf:d3:2b:54:80:
                    2d:d0:2e:e0:ab:4c:57:ea:2a:9a:56:86:53:ab:6d:
                    f0:1d:84:ce:df:da:34:d7:c0:e5:d6:da:e2:0d:57:
                    e1:b5:5d:fc:2b:84:69:4b:cf:0c:b7:84:44:07:32:
                    a2:ea:63:bb:f9:ca:64:d5:11:e2:1f:d7:c8:96:02:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A0:B7:18:32:3F:62:7B:9F:16:EC:30:2E:41:E3:6F:FF:F2:FB:D9
            X509v3 Authority Key Identifier:
                keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a3:f1:78:75:cb:7c:30:d3:e2:4b:39:00:d8:4a:cd:c1:3b:
         05:47:cd:02:16:ac:c1:3e:55:af:18:eb:bd:51:94:c4:9e:06:
         90:e2:6a:23:60:d8:6e:c7:45:4c:c3:2e:ee:9e:67:c6:6d:83:
         9c:73:fd:05:7c:ba:c0:66:0d:50:2e:f2:eb:65:d2:cf:86:22:
         69:74:a4:d2:c6:10:65:ec:dd:d0:94:7a:22:65:71:78:e7:a6:
         58:d0:70:d7:db:48:10:c7:c0:73:f9:7c:90:e8:4e:e5:c5:d5:
         11:1b:0a:92:76:6b:fa:78:2c:1b:54:50:45:0c:33:11:48:8b:
         f0:c4:99:b5:53:6d:2e:bd:c7:ba:d5:47:50:63:a1:5b:6d:64:
         d5:82:a7:f5:41:b7:8e:3a:b8:4d:7d:37:7e:b4:8d:1d:ac:fa:
         cc:a3:da:4d:38:d8:2f:f2:bb:91:7c:cc:fc:b5:f5:cc:bf:1e:
         6a:d4:d3:8d:d7:4b:ba:0e:37:72:55:63:ea:9c:00:85:93:77:
         4d:22:4f:0a:4d:81:03:8b:90:aa:ee:60:f3:8d:4e:a7:67:b1:
         54:36:59:cb:e5:fd:38:56:2a:2a:2e:3b:c4:84:0f:83:2a:d6:
         7d:a5:58:e2:e8:07:41:64:47:cc:ec:3c:de:1c:7d:b5:5e:f7:
         fa:d8:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:40:54 2025 by rpki-client