Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File:                     zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier:          iAtQNCvegYYq8Q0epQuOjHLwbys9FOJZIlkHBTEScLo=
Subject key identifier:   D2:FF:E1:92:06:34:D3:63:A8:EF:65:6F:DD:30:F3:B2:F8:30:72:6C
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer:       /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial:       0196BE25941E6F5AC58CCD98F1E9B305F7D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number:          0673
Signing time:             Sun 11 May 2025 07:00:55 +0000
Manifest this update:     Sun 11 May 2025 07:00:55 +0000
Manifest next update:     Mon 12 May 2025 07:00:55 +0000
Files and hashes:         1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: prMYiPrkWY55RIAiS0INg4B/eec5HCHG2v/Dn8W4OZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:94:1e:6f:5a:c5:8c:cd:98:f1:e9:b3:05:f7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
        Validity
            Not Before: May 11 07:00:55 2025 GMT
            Not After : May 12 07:00:55 2025 GMT
        Subject: CN=d2ffe1920634d363a8ef656fdd30f3b2f830726c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:ec:90:c5:4e:72:ab:53:c4:4c:0c:6b:d1:
                    f3:ad:fe:07:da:3e:a0:fd:b9:11:67:ff:61:c2:11:
                    7a:a3:c8:a6:af:6e:53:b8:61:6f:ce:23:f7:56:b6:
                    9e:53:26:30:ce:4f:00:9d:e9:a0:41:25:b1:1a:d2:
                    da:b7:95:db:02:39:49:a5:1a:f3:35:e4:92:b2:3b:
                    ba:d1:b1:ab:c6:75:66:dc:ec:02:8d:36:23:ce:d6:
                    17:70:a4:75:8c:b3:e5:7b:f5:71:00:be:c8:7c:4f:
                    3a:5f:5e:b1:f8:f6:1c:cb:ad:5c:ae:8c:83:87:d6:
                    d5:21:a0:97:ac:1c:c3:ac:3f:2f:68:81:9a:e4:ac:
                    88:15:bf:5c:49:a3:5a:4c:c2:5c:86:b7:8d:ae:a6:
                    f1:87:55:fc:44:f7:3b:ce:5c:98:a9:ee:3b:e2:43:
                    75:9d:dc:c2:39:25:80:c9:3a:69:c8:0f:44:75:02:
                    e1:0d:d5:ec:99:2a:54:74:d7:fe:c9:b5:55:20:2e:
                    1c:f7:5b:08:3c:12:d5:df:e1:08:53:ac:e0:a2:9e:
                    17:d4:eb:c1:18:1d:ce:88:4e:61:69:a3:7f:1c:57:
                    58:ef:26:87:a5:55:79:c0:e1:ba:62:aa:bb:3e:9b:
                    e8:15:19:b3:c9:ad:e2:d5:1d:6c:c6:44:f3:1d:5a:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FF:E1:92:06:34:D3:63:A8:EF:65:6F:DD:30:F3:B2:F8:30:72:6C
            X509v3 Authority Key Identifier:
                keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:6e:73:fc:c3:cc:af:8d:d4:1e:43:5d:6a:29:2a:57:4e:
         d3:19:2e:68:e1:30:1a:59:fc:2e:e0:d9:4a:6b:04:8e:58:cf:
         07:f7:15:0e:cb:7a:70:02:8b:d1:35:64:e7:17:4e:3a:54:81:
         88:77:ac:c3:e9:6a:12:64:59:b3:02:f3:70:03:b6:02:d3:fe:
         c5:67:5d:50:aa:38:70:d7:08:8f:63:e2:e6:7e:77:93:67:4c:
         a8:ce:73:2c:e5:ac:06:2e:2e:1b:48:fb:04:06:03:7e:33:ec:
         62:34:ae:49:c7:03:e5:72:99:4b:bd:7e:da:d0:d0:eb:5a:2c:
         52:b8:da:90:71:5b:10:7a:c8:bc:89:79:b4:04:a0:1e:04:77:
         c4:61:92:c1:dd:09:7f:36:16:01:e1:29:67:ed:86:f3:b4:d0:
         05:bf:7c:ae:5a:8a:e2:91:b9:c9:8a:7c:39:6c:20:db:e2:cd:
         3c:8a:bc:00:82:3d:28:c0:c5:32:2b:ee:13:ba:87:8f:8d:4f:
         ac:f3:50:a1:15:9d:cf:9b:c7:65:9c:9c:b7:93:49:7a:cb:e0:
         88:30:04:44:b6:ab:eb:e8:c7:1e:50:69:07:d8:2b:7e:71:39:
         48:83:55:fc:60:fa:de:82:34:71:12:f3:9f:f5:1f:0a:30:fa:
         99:f3:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:24:46 2025 by rpki-client