Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
File:                     Adm2sACkY7CVvgtY_HIaT6nApGY.mft (raw, json)
Hash identifier:          y3/dLn1I7Vl8S2IIqhgLDMrHVbkjzxSmmzQqF+iHiPc=
Subject key identifier:   3A:13:7E:F9:99:E6:CD:27:37:A3:21:39:2F:0E:0B:95:FF:73:37:BA
Authority key identifier: 01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66
Certificate issuer:       /CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
Certificate serial:       01969F3F0B7BEA61EC23AAF1F60A55524D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
Manifest number:          05D3
Signing time:             Mon 05 May 2025 07:00:30 +0000
Manifest this update:     Mon 05 May 2025 07:00:30 +0000
Manifest next update:     Tue 06 May 2025 07:00:30 +0000
Files and hashes:         1: Adm2sACkY7CVvgtY_HIaT6nApGY.crl (hash: VqSf8/dcDR2rRol3hjMgLlF1Co4NmKe5NmeckXFdF4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:3f:0b:7b:ea:61:ec:23:aa:f1:f6:0a:55:52:4d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
        Validity
            Not Before: May  5 07:00:30 2025 GMT
            Not After : May  6 07:00:30 2025 GMT
        Subject: CN=3a137ef999e6cd2737a321392f0e0b95ff7337ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:eb:7b:db:3b:31:25:b5:ea:e0:76:13:93:
                    5b:ee:60:07:46:87:bd:5e:c1:a2:0c:09:5a:2d:37:
                    94:3f:b6:8a:5d:72:f6:7e:6e:37:d0:e8:96:5b:51:
                    95:71:ce:3d:ea:49:ae:19:ad:2d:57:dd:94:47:41:
                    cd:c3:21:fa:2e:14:dc:66:1d:93:2d:f7:5a:12:e6:
                    08:9f:fe:87:1c:95:6d:95:9a:24:f8:10:f0:d8:fa:
                    d6:a1:d8:59:9f:70:41:ed:41:8b:49:f2:5d:92:17:
                    95:31:19:c4:bf:02:a9:27:85:c3:65:73:f2:d9:a9:
                    5e:9c:eb:3e:f0:fc:ff:8f:07:60:ac:d2:ef:9c:76:
                    5b:f3:6b:af:99:95:b6:64:52:f9:e2:cb:02:cd:ad:
                    de:ca:fc:97:66:d3:3d:d7:a3:1f:c7:70:78:f9:86:
                    ed:c2:3d:88:73:a7:fe:4a:cc:31:6c:8d:1a:af:16:
                    0c:e6:e5:39:50:94:93:ad:58:d6:a6:de:da:19:89:
                    a1:da:17:4e:a8:1a:d9:fc:36:60:1b:d0:96:86:3f:
                    66:3b:28:63:4f:32:3f:41:70:54:62:1e:26:33:f0:
                    22:a9:c3:1e:5a:04:3a:9a:b4:e6:ab:ea:b4:a2:b9:
                    91:b9:0e:4a:f9:24:7c:18:a3:0b:68:79:a4:c3:53:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:7E:F9:99:E6:CD:27:37:A3:21:39:2F:0E:0B:95:FF:73:37:BA
            X509v3 Authority Key Identifier:
                keyid:01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:78:a5:99:af:5b:fd:1e:2e:20:75:b1:f6:a2:41:0e:ca:
         e9:17:84:25:86:f7:78:66:2f:59:b5:9a:dd:fb:70:2e:f0:32:
         81:a6:7c:3c:73:75:9c:bf:6d:8b:bd:20:59:9f:49:9f:44:9b:
         d1:22:5e:1c:cb:44:98:14:db:03:d6:4c:04:f1:d9:ca:46:d8:
         ea:7a:c2:88:2f:72:02:2c:d0:c4:9a:1c:33:cc:3a:63:10:34:
         8f:ac:5f:7f:51:57:97:4f:62:e8:cb:2b:5e:64:0d:5a:b3:84:
         a3:98:5f:40:7b:9b:1c:2f:a1:bc:b7:c1:ca:71:c6:40:32:4a:
         a5:db:c1:b1:81:81:89:8d:f1:c6:25:07:f6:40:5d:32:d2:90:
         c8:66:1e:0d:be:9b:b7:2f:5e:24:c6:14:17:fa:9c:07:85:dd:
         73:c1:02:87:db:da:fc:8f:91:f2:d0:7d:5a:31:62:96:f8:63:
         57:9b:c9:1f:da:94:2d:69:2b:a6:ec:75:ac:f3:da:7e:d6:42:
         6a:af:66:a6:17:31:12:81:4f:c2:23:c6:c6:d3:8b:fe:5e:cf:
         94:6d:e4:90:22:18:81:ac:23:34:5d:8e:ad:d7:21:8d:0b:22:
         87:e0:81:35:ab:d8:31:2c:66:c9:7e:35:58:79:f8:33:89:54:
         9d:44:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:10:31 2025 by rpki-client