Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File:                     EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier:          uxIroFXTJzrlkXAXz3J4xKo/ZIORTLGxO/yuMOHPO4Y=
Subject key identifier:   B5:E3:A0:B8:27:41:97:95:43:C0:02:0E:70:48:5C:F8:43:99:4D:DC
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer:       /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial:       0196CEE26BE42CDACDC9EE35D9BDB775AF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 13:01:07 +0000
Manifest this update:     Wed 14 May 2025 13:01:07 +0000
Manifest next update:     Thu 15 May 2025 13:01:07 +0000
Files and hashes:         1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: 9HhBHmNJP/QcOLE/u9v8CGOGyJ5YhU3yvInn6uDGjUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e2:6b:e4:2c:da:cd:c9:ee:35:d9:bd:b7:75:af:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
        Validity
            Not Before: May 14 13:01:07 2025 GMT
            Not After : May 15 13:01:07 2025 GMT
        Subject: CN=b5e3a0b82741979543c0020e70485cf843994ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:ae:22:2f:ef:49:fb:fa:9a:78:f1:0c:98:
                    33:c2:a0:4e:de:4e:52:73:be:52:be:bd:10:d3:5b:
                    71:06:ac:e5:c2:0d:31:49:bf:bf:30:53:07:50:44:
                    1f:19:db:db:91:13:c7:2a:3f:8c:f9:c6:23:46:73:
                    83:61:61:d3:4c:93:b7:59:d1:b3:8c:00:1e:dc:b8:
                    1f:2c:73:cc:84:c2:1a:ca:4b:11:52:c0:c9:1c:2b:
                    63:69:6e:a9:08:f8:02:71:e6:d5:49:b8:78:68:5e:
                    56:b8:e8:ae:99:90:ad:10:81:db:e2:43:88:6e:d7:
                    fb:31:fb:df:bf:82:de:fc:ed:54:40:69:8d:ac:58:
                    af:9d:fa:e1:e1:80:a0:28:41:91:f8:e2:e8:4c:4b:
                    52:4f:41:1e:f9:fe:80:15:9a:9b:fb:b3:fa:98:d9:
                    71:c2:e1:f2:de:e1:6e:9d:6e:b0:09:70:64:ee:c3:
                    29:00:09:62:b3:40:f9:0e:7a:02:82:c7:25:43:eb:
                    cc:55:2c:d6:56:b4:e3:d7:b5:64:3e:23:9d:a6:a9:
                    5a:17:79:b5:14:86:33:c8:c5:a1:11:15:05:3c:51:
                    89:42:ba:7e:7f:83:28:ae:e4:f6:f6:20:f3:3c:1b:
                    70:d2:1a:f8:06:9b:99:50:f1:1f:8d:0c:e5:a7:2b:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E3:A0:B8:27:41:97:95:43:C0:02:0E:70:48:5C:F8:43:99:4D:DC
            X509v3 Authority Key Identifier:
                keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:59:69:2e:ba:6f:27:ed:70:d3:ab:36:51:0f:37:6e:78:
         1a:f8:a9:7b:0a:b5:54:df:f0:dc:61:b4:e0:41:bf:b0:77:91:
         89:b6:2f:8e:af:4a:8c:50:c0:22:11:2e:87:5a:99:a4:be:77:
         74:35:78:0b:b7:de:13:6e:87:2a:6b:07:95:c6:d8:7c:0c:09:
         f9:d8:f1:0d:ec:40:0a:19:65:88:1d:12:4f:79:26:27:3c:59:
         49:ab:7b:5a:05:9e:35:04:a4:60:2b:81:cc:46:45:61:4e:a6:
         7e:db:62:b3:fb:c3:5b:ad:65:30:91:b9:ac:95:de:a0:40:c6:
         8b:23:ad:38:2d:cb:2e:b0:5d:65:1a:97:d2:16:b5:63:c4:e0:
         5e:9d:2f:1f:7b:f7:bc:22:a8:66:f4:20:30:67:9d:28:12:46:
         af:d5:94:3c:c5:ee:9e:99:4f:78:69:0b:bf:9d:4a:52:85:20:
         7a:09:0c:14:8a:75:46:79:ef:9d:48:65:33:2b:d6:88:01:5e:
         a7:b7:a6:3b:af:58:25:16:ae:d1:33:af:86:9d:3c:9c:f1:f0:
         a1:98:49:26:af:be:e0:c4:8b:10:83:31:3e:16:54:50:be:3b:
         6b:95:d4:c6:8d:7c:25:e7:51:1f:d0:ac:3a:04:87:ec:01:b1:
         7e:e9:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:05:05 2025 by rpki-client