Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
File:                     Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json)
Hash identifier:          tJPfm2/TyQvGuIpBoUEJHJLtzBQwmkZW3KWsQB7TQO4=
Subject key identifier:   60:F4:94:D9:80:97:12:D2:F3:51:78:FA:07:01:25:F5:35:DA:3D:D8
Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
Certificate issuer:       /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Certificate serial:       01969E99F06C3D0C62B0401EE10C7BCD3D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
Manifest number:          1523
Signing time:             Mon 05 May 2025 04:00:10 +0000
Manifest this update:     Mon 05 May 2025 04:00:10 +0000
Manifest next update:     Tue 06 May 2025 04:00:10 +0000
Files and hashes:         1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: tJAnOpJzXLUHHBghwQb72HYXGkfXLnTcarIVXADfgRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:99:f0:6c:3d:0c:62:b0:40:1e:e1:0c:7b:cd:3d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
        Validity
            Not Before: May  5 04:00:10 2025 GMT
            Not After : May  6 04:00:10 2025 GMT
        Subject: CN=60f494d9809712d2f35178fa070125f535da3dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:5a:22:84:26:ef:1c:2f:cc:32:d3:4a:3e:
                    ff:8e:9f:8d:c4:87:97:c7:1c:21:bf:36:fc:1d:47:
                    74:aa:3e:b2:39:0b:4c:ef:23:dd:1e:1c:f2:36:ec:
                    bd:a1:3a:76:e2:92:90:1b:df:b2:4f:68:49:b6:5f:
                    32:34:42:49:0e:ea:6f:0c:82:d1:29:4b:71:84:ef:
                    42:fe:c1:9f:b1:fe:5d:72:6c:b6:31:41:a8:82:4a:
                    f8:99:01:94:a1:14:40:86:81:e5:8c:2c:a5:da:ba:
                    73:0c:0d:3c:cb:46:59:ad:73:c9:7e:c2:01:02:50:
                    de:04:39:64:7a:72:b5:dd:64:32:db:ea:a8:a0:4c:
                    a8:13:67:a7:54:87:e1:87:69:41:03:af:fc:9c:c8:
                    1d:2a:36:88:be:e4:1a:db:92:a0:44:bb:79:6b:e3:
                    b7:c8:90:48:25:d8:70:04:0a:8f:23:46:33:2e:09:
                    ac:cf:60:65:5e:02:a1:65:08:4b:14:84:ac:ac:f5:
                    fc:04:3f:6c:45:93:57:db:56:09:0f:d7:4f:2c:e3:
                    42:54:6a:17:db:00:0b:eb:4f:a1:7a:3a:13:b3:26:
                    28:f3:52:ef:95:c8:b5:f4:c1:d7:96:3e:b5:9c:ba:
                    42:20:53:29:75:d3:0d:89:2a:47:61:27:f1:a1:b2:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F4:94:D9:80:97:12:D2:F3:51:78:FA:07:01:25:F5:35:DA:3D:D8
            X509v3 Authority Key Identifier:
                keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:16:15:06:2a:09:fb:8c:9a:6a:fd:84:6e:ad:38:f2:2b:fb:
         93:de:06:20:8b:48:19:9c:6e:99:e8:4a:36:71:b9:48:d8:08:
         65:6f:76:96:7f:a4:4a:07:d0:3c:79:fc:06:1a:8c:2c:9f:b8:
         b0:b5:43:ba:6e:cd:f9:98:d5:7f:f2:6d:a2:54:b5:8d:97:1a:
         de:de:6a:c9:2b:e0:e8:df:61:ae:35:3b:39:a5:eb:50:24:a8:
         ec:51:0c:04:2f:c2:3e:ff:e8:92:b7:96:3c:91:88:ce:53:f4:
         a3:f1:e9:db:df:10:d4:6a:6d:ef:ff:e3:a1:9f:b6:16:6c:a2:
         56:be:a6:2a:69:65:02:04:b6:18:ed:36:54:72:ec:fc:d6:18:
         b5:fb:60:1b:31:e1:83:78:a3:6b:e7:20:a2:8d:7d:e3:41:01:
         16:61:0c:29:cb:4d:7f:63:0d:7d:e1:c4:27:51:c3:0a:4f:c0:
         79:ff:bb:7a:9b:62:ec:54:c4:8e:8e:5f:eb:53:cf:98:3b:20:
         65:b7:44:03:63:fc:f8:93:4c:72:30:3b:8c:42:ff:72:7d:64:
         02:b6:55:65:76:cf:c8:58:80:b7:87:cb:d5:55:14:b7:ba:f1:
         5f:3b:4c:d1:58:1f:07:55:27:0d:1a:2b:75:73:71:b6:1f:6a:
         d9:68:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:27:07 2025 by rpki-client