Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
File:                     esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json)
Hash identifier:          JneMoYTPYRicmGNs30zR8JQWLo9GPOIGYYCsFOca2t4=
Subject key identifier:   C2:A7:96:A3:36:23:52:31:BA:39:02:69:FD:DB:A7:0E:8E:13:D0:67
Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
Certificate issuer:       /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Certificate serial:       0196B7473802E5F267FFA5B93DF78303532D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
Manifest number:          010A
Signing time:             Fri 09 May 2025 23:00:19 +0000
Manifest this update:     Fri 09 May 2025 23:00:19 +0000
Manifest next update:     Sat 10 May 2025 23:00:19 +0000
Files and hashes:         1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: cpvChbwfGgfyy++8OCp/L4vEJocv9QNxxPWqnYQvyww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:38:02:e5:f2:67:ff:a5:b9:3d:f7:83:03:53:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
        Validity
            Not Before: May  9 23:00:19 2025 GMT
            Not After : May 10 23:00:19 2025 GMT
        Subject: CN=c2a796a336235231ba390269fddba70e8e13d067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:b5:c5:c6:37:d6:56:50:3b:8d:0f:89:7f:
                    c0:84:a6:bf:5b:5a:92:63:5c:f5:5e:bb:63:51:d4:
                    a9:5b:0d:0a:14:6c:5e:f3:a5:d2:34:8d:72:2b:a1:
                    ef:d5:15:01:a3:ec:b9:ce:f1:d0:f0:34:27:0a:72:
                    1f:60:4f:fb:af:bd:87:91:dc:61:a7:ea:c8:5d:f1:
                    16:98:f9:10:19:1a:a5:8c:e5:16:e5:20:14:e4:4d:
                    3c:90:02:b9:81:e5:bc:5a:77:08:ea:9b:b5:79:1b:
                    d2:37:3d:9c:aa:38:0f:68:db:bb:90:f3:07:c9:b6:
                    53:98:5e:57:a0:2e:e2:b7:8a:c0:a5:f8:f0:73:88:
                    aa:06:f9:d1:d8:e9:5e:5c:18:3f:5f:3f:4d:15:d2:
                    85:aa:f8:63:c2:53:5e:b4:02:3a:84:c5:e4:de:1d:
                    0f:84:55:b2:6c:4a:80:cd:6f:98:ca:c8:f8:94:7e:
                    c4:fe:9c:66:fa:8e:dd:da:85:e2:53:31:4e:59:6e:
                    54:5b:66:54:3d:80:c1:5a:83:fe:90:be:0d:05:63:
                    97:ac:7a:32:d6:6a:7e:9e:09:e3:53:13:66:02:f4:
                    9e:ae:23:3c:79:8f:71:ee:11:ba:c1:f3:e5:ce:97:
                    68:8b:4d:60:ef:40:d2:f5:4b:e2:b3:c7:ab:ee:26:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A7:96:A3:36:23:52:31:BA:39:02:69:FD:DB:A7:0E:8E:13:D0:67
            X509v3 Authority Key Identifier:
                keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d5:a9:72:ee:91:d1:da:f7:f8:1b:ae:d3:23:cb:67:68:32:
         fc:48:ca:66:14:f5:6d:00:66:fc:c9:92:5a:7f:de:fd:a9:e0:
         fc:88:00:e7:d3:d0:ab:05:59:88:b3:a1:93:8b:69:d6:ce:95:
         a1:93:dd:92:5a:07:d9:7b:20:de:c7:91:91:c7:00:e3:f7:b4:
         5a:59:a8:6f:dc:61:f4:4f:2b:4e:3f:55:66:ee:94:7b:72:75:
         ae:56:bd:0f:61:c9:a8:74:12:a8:e0:75:04:6c:40:24:87:30:
         85:bf:5e:d5:7e:1c:da:b9:ed:a7:e9:f3:51:8a:d3:bc:ae:83:
         90:94:97:96:cb:05:dc:a2:13:82:72:f6:54:26:e2:02:57:0b:
         d6:49:21:c8:b1:e9:12:fd:a8:0d:65:50:34:bc:55:15:83:d0:
         76:e5:07:09:82:3b:14:f3:d3:35:65:77:bf:b1:3b:31:e3:25:
         2c:48:c5:6d:0a:67:04:a4:23:fd:2e:a1:3c:89:fa:00:16:15:
         40:4c:16:11:09:9a:5e:97:24:e8:64:d3:61:74:91:68:9e:6d:
         12:7e:37:4d:ba:fe:04:51:6b:71:24:6d:b7:c0:7e:34:d5:96:
         d9:8e:84:2b:26:77:2f:97:65:75:63:cd:42:62:b2:16:e6:df:
         3d:cf:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:56:37 2025 by rpki-client