Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
File:                     sV9qUOakiH4XxTsPwQ5LfhST7rU.mft (raw, json)
Hash identifier:          HRnb4cJ1tED5oezCoWJZzOCdFDRKSe9Hg5TqYShIxlg=
Subject key identifier:   DA:5E:D4:3C:A4:49:CA:9C:27:43:BB:D1:35:28:F0:5E:20:1B:7C:DD
Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
Certificate issuer:       /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Certificate serial:       0196C15D48887DC37E4C14D088192047B5CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
Manifest number:          111D
Signing time:             Sun 11 May 2025 22:00:38 +0000
Manifest this update:     Sun 11 May 2025 22:00:38 +0000
Manifest next update:     Mon 12 May 2025 22:00:38 +0000
Files and hashes:         1: sV9qUOakiH4XxTsPwQ5LfhST7rU.crl (hash: O2Z3fqlupziy2KGDFthNz7MS2IF7ouGApIWbjjkuQyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:48:88:7d:c3:7e:4c:14:d0:88:19:20:47:b5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
        Validity
            Not Before: May 11 22:00:38 2025 GMT
            Not After : May 12 22:00:38 2025 GMT
        Subject: CN=da5ed43ca449ca9c2743bbd13528f05e201b7cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:4e:cf:98:c9:86:71:b9:f8:ea:f6:df:47:
                    a2:9d:27:ab:28:d2:4c:1b:4f:90:08:0c:9f:4b:5b:
                    e2:9f:e2:b9:34:fd:cc:ca:e8:c4:0a:1e:15:83:ef:
                    af:dd:06:5f:03:59:e6:d4:86:cc:c0:31:81:ce:e8:
                    64:7e:e0:a4:d2:52:3d:56:f9:95:0d:89:09:a1:a0:
                    1b:0e:19:b2:1f:94:50:84:68:da:52:64:97:2a:0a:
                    36:b8:45:6a:dc:48:e9:79:27:88:8b:4f:be:1c:b8:
                    aa:cb:92:db:04:59:18:f2:43:b9:1a:71:a6:94:bb:
                    71:2b:a6:fb:81:cc:fc:ff:cb:6d:b7:1f:0d:d8:98:
                    47:f3:80:76:fb:4d:e4:ad:32:8a:e1:84:b2:5c:44:
                    ae:1e:77:0c:44:5f:ef:c9:55:77:09:77:43:89:94:
                    17:47:91:b5:2a:6d:62:29:66:c6:8a:56:62:50:48:
                    e7:48:ca:7d:1d:90:b5:a2:72:4a:01:1e:38:8c:ea:
                    e9:47:8a:30:71:e5:02:d4:ab:ce:b1:66:ed:35:36:
                    cd:9b:63:b5:10:ac:30:60:98:57:d8:ac:56:2c:81:
                    de:dc:57:d9:31:73:d9:a1:ec:98:1c:c5:13:0f:4b:
                    82:87:f0:57:d1:c6:57:30:ca:ee:67:15:09:c2:dc:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5E:D4:3C:A4:49:CA:9C:27:43:BB:D1:35:28:F0:5E:20:1B:7C:DD
            X509v3 Authority Key Identifier:
                keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:61:72:3c:36:ca:45:8f:64:cc:7c:3e:6c:77:1d:02:a9:bc:
         b3:27:a9:85:a5:88:0c:95:3c:df:5d:dc:22:5f:95:2b:ac:0a:
         e4:5e:21:c9:a1:13:fb:97:0c:05:ec:54:3f:1e:47:f4:65:6e:
         9b:a2:f6:e1:9a:73:2f:ac:1c:df:d5:0c:3e:d9:2c:f5:af:70:
         ff:52:28:71:da:cb:97:55:37:dc:25:8f:2d:b9:26:d1:46:5e:
         07:5a:c1:f0:a4:d0:da:cd:63:d8:6e:dd:de:5d:4d:29:48:01:
         b7:38:6f:8d:c4:54:e6:15:72:9b:f2:39:e6:6f:27:48:e2:6c:
         e1:54:ef:5e:c2:63:58:99:49:5d:71:61:8a:bf:c2:f6:e4:de:
         f3:bd:cf:a9:ad:0f:90:8e:e1:6a:9d:e6:f0:0d:6e:c1:e2:16:
         64:16:ba:5f:d7:69:f3:2c:62:2b:c7:66:97:34:e2:7e:08:85:
         b2:c0:29:60:db:44:a3:fb:40:41:8c:d6:17:48:43:ba:e1:bd:
         57:ea:dc:db:ac:02:f4:b0:bc:31:d2:a3:4a:0f:fb:af:d1:cc:
         05:c3:ec:21:2d:f4:fa:5d:ea:8e:51:92:79:f2:49:23:b8:d0:
         74:ce:2f:be:51:7f:33:69:86:7b:e0:f9:04:c0:4e:78:c6:ab:
         e1:43:e8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:21:23 2025 by rpki-client