Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
File:                     mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft (raw, json)
Hash identifier:          rBbevuQ5znsrXJSYNcGi+59IHE9HAA9tFHQmOPNOUwQ=
Subject key identifier:   8E:D0:8A:F2:71:BE:BB:D3:EB:BF:A0:12:5C:38:71:BC:E5:24:B5:A3
Authority key identifier: 99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
Certificate issuer:       /CN=99f4973e524b08717582577630d33193e53b67c9
Certificate serial:       0196B822F006834771B2B1F91327714448A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
Manifest number:          03E3
Signing time:             Sat 10 May 2025 03:00:19 +0000
Manifest this update:     Sat 10 May 2025 03:00:19 +0000
Manifest next update:     Sun 11 May 2025 03:00:19 +0000
Files and hashes:         1: mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl (hash: tsWfvVmr4M6HuKUC+PIFV2Ewa5FaP1V7/FuLjVrTdZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:22:f0:06:83:47:71:b2:b1:f9:13:27:71:44:48:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f4973e524b08717582577630d33193e53b67c9
        Validity
            Not Before: May 10 03:00:19 2025 GMT
            Not After : May 11 03:00:19 2025 GMT
        Subject: CN=8ed08af271bebbd3ebbfa0125c3871bce524b5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:65:f6:5c:1e:15:1b:1b:02:51:f1:47:2e:
                    c8:52:8e:04:d6:10:4c:7f:83:69:db:e0:53:92:7f:
                    8b:b5:db:c6:cd:1c:24:39:b4:0b:00:e8:0b:e5:3c:
                    af:28:36:39:44:12:87:7b:a8:38:b8:0e:43:d4:cf:
                    f6:20:62:02:28:ad:ca:b0:77:1c:e6:e8:42:68:50:
                    78:f7:65:e3:87:b6:ad:59:43:b8:47:a4:d8:29:92:
                    fd:01:ae:bf:f2:8c:3e:7a:52:83:55:ab:ce:8a:2e:
                    0d:8b:8d:17:81:86:34:1d:0b:a4:cc:d0:e1:d5:da:
                    28:8f:23:cf:3b:62:c1:3a:dc:9f:e1:2e:d9:5c:29:
                    78:7d:5c:87:a5:d2:e3:e7:25:e7:fb:81:9a:63:3c:
                    0c:bb:10:05:b4:06:d7:0c:28:0f:79:57:4a:14:e9:
                    d1:d2:70:99:85:4f:ef:03:71:ac:db:01:5e:08:d3:
                    e4:f9:62:fd:1f:d3:df:3e:d2:a4:b3:83:b8:d0:36:
                    18:63:16:91:6d:93:ab:78:1c:16:1e:da:11:cb:24:
                    54:ec:2f:65:c9:b4:4c:10:51:ed:3d:db:a5:49:78:
                    ad:12:a2:eb:b6:41:98:db:59:f6:32:96:6b:8c:3e:
                    1e:f1:89:a9:8d:6d:57:37:fd:95:8c:2b:5b:38:2c:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D0:8A:F2:71:BE:BB:D3:EB:BF:A0:12:5C:38:71:BC:E5:24:B5:A3
            X509v3 Authority Key Identifier:
                keyid:99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6b:23:ad:8e:ed:a2:54:88:bc:17:9b:9b:8c:27:3a:af:27:
         ba:90:35:ec:4f:ad:6a:df:f9:c9:5f:b3:e0:2a:b6:87:59:ad:
         d7:04:51:9d:f5:82:92:ed:78:66:52:4f:e2:85:b6:47:66:8f:
         e0:b0:52:62:4d:0e:47:f5:12:2d:2f:3c:30:d4:66:73:b7:c8:
         4e:a4:86:5f:86:e5:59:1e:e8:7b:c2:20:15:2d:15:0c:0a:aa:
         21:5d:11:bd:00:b8:0e:0e:51:f8:9e:ca:e7:1d:16:0f:44:b4:
         e3:0c:d8:d1:a9:69:84:fc:42:eb:71:c5:04:32:d3:19:fb:5d:
         0a:75:67:21:60:ce:a7:61:28:62:d6:b5:60:4c:d5:e9:22:d7:
         ac:f9:a7:9c:38:05:a6:29:e8:56:e4:17:08:97:b4:7d:64:bc:
         2b:c4:4d:c4:67:94:10:7d:1e:36:e0:77:16:30:5a:52:5f:be:
         4b:99:b1:c7:cd:7a:1f:fe:6c:f4:0c:c5:2e:cb:df:39:57:7f:
         5b:c3:f2:69:80:04:ec:ec:74:71:69:12:87:d3:6d:15:f2:5d:
         e7:d5:27:b2:4a:68:dc:c2:69:4f:85:6a:e3:2f:15:66:a3:8b:
         3e:42:90:20:82:24:9e:7f:cc:72:96:9b:50:bb:9a:83:e4:4e:
         c3:ec:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:52:35 2025 by rpki-client