Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File:                     zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier:          rmLsfyCThoP8m5CKdUl7GBMjt7KiRtOYERfwiu3qvdg=
Subject key identifier:   5C:83:C0:00:DF:25:14:89:A6:60:7B:E1:62:05:40:9F:56:DB:1B:C7
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer:       /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial:       0196A653E3932D2F929315445B84A55B537C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number:          0D44
Signing time:             Tue 06 May 2025 16:00:37 +0000
Manifest this update:     Tue 06 May 2025 16:00:37 +0000
Manifest next update:     Wed 07 May 2025 16:00:37 +0000
Files and hashes:         1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: rBJc77pb9iCWapYLKz2spG8wCPrZ+GOw0CFSwNeb7Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:53:e3:93:2d:2f:92:93:15:44:5b:84:a5:5b:53:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
        Validity
            Not Before: May  6 16:00:37 2025 GMT
            Not After : May  7 16:00:37 2025 GMT
        Subject: CN=5c83c000df251489a6607be16205409f56db1bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:06:81:03:00:fa:a2:57:da:ae:18:99:a7:
                    94:f7:a0:9a:d8:2e:3d:1c:49:7d:08:b9:30:7b:f8:
                    01:59:43:ee:5f:8e:cc:9a:df:19:10:3a:0c:3e:85:
                    c9:f9:d9:cf:96:15:90:64:d4:f5:8d:72:0e:a7:3f:
                    7b:56:8c:de:86:65:c5:28:23:5c:b3:ff:64:18:4c:
                    c8:14:e9:76:03:55:c3:10:68:15:51:7f:3b:0d:dd:
                    c4:59:ee:3b:bf:c9:c9:e3:50:4c:43:a1:18:b5:d9:
                    e0:e5:f6:a6:47:02:c1:cd:f9:0b:d6:ba:91:90:c1:
                    c1:2e:60:7b:91:c8:fa:2b:b8:1e:9b:ec:37:49:d0:
                    0b:23:5a:94:6e:f6:2c:03:14:eb:11:cf:d5:79:3a:
                    52:39:bb:13:ad:65:6f:98:61:a3:12:8b:57:5e:a0:
                    b3:3f:51:ba:1e:3c:ba:aa:60:f9:de:ba:4b:8f:56:
                    51:3a:a7:0e:a1:bf:8d:e1:56:7a:85:b5:dd:db:94:
                    e2:43:60:f8:2e:47:57:6a:45:c7:13:1d:a5:cc:3f:
                    14:b8:08:be:ad:d3:32:45:ca:c9:98:36:e8:2e:59:
                    d5:27:4a:89:4e:f9:77:94:8f:cf:93:8a:97:fb:f0:
                    51:65:e7:fc:c2:59:c3:b3:b3:37:e8:8e:4f:32:5d:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:83:C0:00:DF:25:14:89:A6:60:7B:E1:62:05:40:9F:56:DB:1B:C7
            X509v3 Authority Key Identifier:
                keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:d5:3d:96:39:aa:91:68:d2:d4:5c:91:97:80:78:85:cd:
         12:84:cc:04:51:9c:77:b1:f2:53:29:1d:40:fb:ee:06:3f:91:
         53:8d:14:34:62:6f:33:bf:a2:b7:91:dc:0e:74:69:17:45:67:
         41:f0:cc:cb:22:c2:85:b8:38:fb:01:56:10:96:fa:49:3c:ff:
         6e:9a:ed:ef:07:48:72:d0:08:e0:13:34:f7:d6:b8:b4:a9:af:
         f6:7d:f4:54:4f:81:c1:7a:71:d4:ba:22:cd:db:54:16:11:73:
         47:f4:32:da:c7:2c:47:b2:41:c4:dd:a3:be:8a:27:4e:59:ca:
         a2:08:b9:3f:02:fd:f1:96:28:b0:03:5b:9e:6c:9e:d7:22:9d:
         ab:f8:87:f9:34:68:5f:2a:45:cc:4a:66:1c:1b:13:12:fd:44:
         56:f1:f4:41:15:1f:ef:5c:c9:5b:0c:96:09:d9:9e:4d:5e:d7:
         df:6b:52:25:86:7d:b5:9a:48:cf:18:a6:da:2b:70:d2:ff:50:
         07:60:44:43:c6:b3:e4:d3:f0:fd:4d:2f:bf:6b:d3:22:dc:07:
         e3:fa:1e:87:60:6a:f2:36:5f:87:6e:10:5b:f1:b5:be:44:2f:
         4c:52:3e:fe:b4:6e:d3:32:27:ee:e7:f9:b0:88:5d:6e:bd:5c:
         e8:c8:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:01:18 2025 by rpki-client