Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
File:                     adA-sSuz_i5OlkUcnMPvjunTtfU.mft (raw, json)
Hash identifier:          B+fqa3ywiSkwRyKHOdqpOa9b+v2IIjoI+YjQwPFcvz8=
Subject key identifier:   AC:89:56:5F:65:D0:F9:A3:3E:7D:BC:7B:3E:BF:F7:8D:00:3B:47:13
Authority key identifier: 69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5
Certificate issuer:       /CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
Certificate serial:       0196A8436FA16950DF9A827AE8B54834D6E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
Manifest number:          11B9
Signing time:             Wed 07 May 2025 01:01:53 +0000
Manifest this update:     Wed 07 May 2025 01:01:53 +0000
Manifest next update:     Thu 08 May 2025 01:01:53 +0000
Files and hashes:         1: adA-sSuz_i5OlkUcnMPvjunTtfU.crl (hash: mVXqvJmxQe2rBeXjuqPwn/Oc1TrcNW7YywPKFWkl1zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:43:6f:a1:69:50:df:9a:82:7a:e8:b5:48:34:d6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
        Validity
            Not Before: May  7 01:01:53 2025 GMT
            Not After : May  8 01:01:53 2025 GMT
        Subject: CN=ac89565f65d0f9a33e7dbc7b3ebff78d003b4713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:a9:2c:54:3d:25:f4:71:75:20:25:87:37:
                    c5:6f:a1:b9:58:09:f5:45:e8:b0:e1:41:53:30:d1:
                    31:65:27:5a:db:10:d9:2a:11:9e:0d:37:5b:1e:1b:
                    51:4a:ae:97:a5:b8:5f:ad:0f:84:05:4a:03:46:4d:
                    ec:64:04:d4:10:f1:18:7d:6c:b5:8a:bc:bd:b2:6a:
                    99:bb:2c:cb:af:f0:ad:8d:2a:12:b5:9c:f8:2b:f0:
                    1b:a1:4a:e3:9e:b7:42:ad:77:fe:62:ff:98:3f:0f:
                    9f:d6:1f:b7:9e:f4:29:7b:9a:e8:f0:c8:19:30:01:
                    1f:8f:e1:bb:89:4f:39:81:26:74:84:c8:23:2e:18:
                    74:33:0f:c6:dc:c8:b0:da:d8:0b:b4:61:d4:1f:c5:
                    b9:a9:2b:4c:fa:f7:e7:b0:ae:2b:5c:2c:bf:92:1c:
                    1a:b5:d2:f2:ed:86:d6:e5:6d:bc:43:5d:b1:c7:74:
                    7d:a3:44:54:31:d8:fb:11:03:4d:06:b0:a7:cc:f4:
                    29:4c:a2:3e:5c:1b:c3:68:f7:24:6f:0c:8f:3f:b0:
                    b9:cc:4a:b1:3e:b6:40:d7:64:8c:24:3c:84:af:20:
                    9c:01:90:d5:4b:0e:0d:26:bd:57:f2:29:db:2d:3d:
                    e5:53:92:2d:e6:10:58:35:6e:a2:df:71:3f:29:b0:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:89:56:5F:65:D0:F9:A3:3E:7D:BC:7B:3E:BF:F7:8D:00:3B:47:13
            X509v3 Authority Key Identifier:
                keyid:69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bc:6a:93:d8:14:b3:06:c5:2e:5c:f6:bf:b5:dc:d6:ce:b8:
         49:c8:17:82:b8:7b:f9:e0:05:84:f3:86:5f:ff:a9:24:68:d1:
         d2:19:fb:1b:ee:79:ef:60:39:18:0d:78:18:f6:4d:bb:35:85:
         f9:e8:95:97:61:a5:39:ae:ad:9c:66:be:a0:1f:52:af:79:43:
         13:f7:6e:ed:79:40:e0:6f:dc:95:57:9f:b7:a1:3c:d7:2e:c3:
         0e:99:f4:12:0f:dd:3b:63:fb:88:47:78:59:ce:65:b3:e1:b5:
         a4:ff:39:29:42:9c:42:cc:a1:dd:57:05:45:42:80:48:90:5d:
         c1:b5:19:2b:4e:26:1d:3d:c5:e0:67:76:fc:6d:67:e1:54:1f:
         0a:c0:13:2b:d0:62:75:55:7f:a6:42:eb:e0:9b:e0:0f:a9:a1:
         31:4a:31:32:07:2a:b5:f2:08:f8:85:8d:86:b4:7a:dc:5a:9c:
         19:fe:6c:cb:ca:af:d6:2f:bb:86:19:35:4b:1f:cc:44:d7:c9:
         e7:d1:b7:e9:91:f0:49:90:80:42:ff:47:2a:27:a2:85:c0:40:
         27:f1:db:28:a9:67:3f:4d:df:b6:83:6d:72:93:01:7a:79:e1:
         47:d4:40:9f:f0:52:da:7d:37:26:d9:70:88:8d:8d:d0:7c:9c:
         7b:f0:20:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:24:39 2025 by rpki-client