Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
File:                     bSsrfHiimiI-pZxnydqj3H7bHnQ.mft (raw, json)
Hash identifier:          NL0PG8nlwKRNdknvPCbLNRp47bN369xh+oBCJvrwa6w=
Subject key identifier:   55:8F:D3:03:84:E4:9C:9D:76:75:BA:E5:65:64:3D:ED:A1:DD:53:A7
Authority key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
Certificate issuer:       /CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Certificate serial:       0196C013D3D911DD7A0FE0971940108B9EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
Manifest number:          FF
Signing time:             Sun 11 May 2025 16:00:46 +0000
Manifest this update:     Sun 11 May 2025 16:00:46 +0000
Manifest next update:     Mon 12 May 2025 16:00:46 +0000
Files and hashes:         1: bSsrfHiimiI-pZxnydqj3H7bHnQ.crl (hash: +1TaFlA0MZ4SLwnqFbeH36iB8gd+MBmjbUMa/ejH5kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:13:d3:d9:11:dd:7a:0f:e0:97:19:40:10:8b:9e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
        Validity
            Not Before: May 11 16:00:46 2025 GMT
            Not After : May 12 16:00:46 2025 GMT
        Subject: CN=558fd30384e49c9d7675bae565643deda1dd53a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:db:35:ef:4d:10:01:b9:a7:e7:59:a0:7c:
                    c5:29:02:f4:7f:dd:39:48:cd:cf:33:1a:9f:d9:64:
                    5d:b7:7e:ff:68:65:a4:d5:e1:2f:fc:01:a8:43:6f:
                    84:2d:48:30:b0:99:91:a2:0f:2e:99:c2:47:53:37:
                    6c:2d:a9:db:dd:3f:14:a6:9d:a5:64:4f:2e:01:0a:
                    ad:e9:a6:a6:bb:29:4b:16:46:09:32:0e:4d:77:39:
                    a0:98:00:39:95:b0:6d:e3:56:8d:77:2b:51:90:ea:
                    6b:f5:41:07:2e:65:a7:9f:18:5d:28:21:4d:2e:26:
                    47:37:8c:68:98:36:34:28:52:f1:14:ff:7f:44:f9:
                    35:63:9c:d7:96:e8:62:72:c5:0b:7a:90:db:69:7f:
                    b5:3a:60:53:c2:f7:10:c3:c1:95:2d:c8:c9:f9:40:
                    8b:47:e6:96:0f:a2:79:71:e5:31:30:5e:9c:36:64:
                    0c:00:b2:bb:1b:e4:fb:b7:a3:97:48:74:a5:67:02:
                    8d:67:f2:3f:5e:71:9c:6e:f8:ca:3b:45:a4:7d:e3:
                    dc:f8:f4:79:ed:8a:9a:8e:d0:6c:c3:5a:f4:0f:28:
                    12:85:db:36:2b:f1:df:aa:b8:56:71:ac:e8:10:13:
                    88:56:57:7e:3d:52:26:77:fc:09:29:3d:93:93:df:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8F:D3:03:84:E4:9C:9D:76:75:BA:E5:65:64:3D:ED:A1:DD:53:A7
            X509v3 Authority Key Identifier:
                keyid:6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:47:02:ea:44:d2:08:5b:61:27:f2:45:56:ef:88:d7:46:
         ca:b7:24:82:d7:87:fa:36:ba:5c:4c:ac:11:7b:eb:5e:ec:fd:
         c1:b3:bb:fc:5b:2b:32:a0:45:16:28:58:3f:27:a9:a0:27:7b:
         a6:40:e4:6f:53:70:f6:0f:40:c0:01:ff:69:37:39:bc:08:27:
         4a:5b:14:76:9f:cd:d8:fc:4d:ea:9e:85:1c:91:66:ed:fb:4c:
         fe:f6:94:0d:1f:8b:ef:e4:a7:db:08:b0:33:92:03:3c:69:ef:
         7d:08:9c:1f:ea:76:a4:39:a8:5a:d1:39:b1:9f:ec:f1:7b:7a:
         7f:10:2b:ae:94:67:6b:7e:7b:b5:39:a5:05:b5:af:d9:dc:3d:
         bb:4a:7f:71:d9:f0:a7:48:4a:e4:6d:a1:7e:17:50:b0:bc:70:
         13:f1:04:50:a3:3d:6d:b8:45:ea:c4:e6:f6:c4:29:c8:a8:fd:
         1b:4c:2c:d7:3a:9c:0b:ca:03:4b:91:e5:9d:c6:cc:7f:05:fc:
         36:9b:4d:7a:fb:33:93:e9:0d:9a:12:94:36:92:4b:c7:c4:bf:
         59:67:4c:16:0b:8b:86:fd:7a:d3:72:41:49:43:58:8c:68:50:
         be:65:da:b1:a3:71:e2:f9:34:4b:6c:43:67:fa:2e:f4:91:b4:
         d0:ef:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:10 2025 by rpki-client