Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File:                     15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier:          9cjx9RXll20q808ppqT0yekXRVorNCO7A4Bwm5HbbDo=
Subject key identifier:   38:72:E2:17:FF:23:65:1D:EE:42:DC:79:98:54:B5:DC:5B:CF:53:3D
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer:       /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial:       0196B0D7811FEBE067FB6BAE25ABD938C16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number:          063C
Signing time:             Thu 08 May 2025 17:00:35 +0000
Manifest this update:     Thu 08 May 2025 17:00:35 +0000
Manifest next update:     Fri 09 May 2025 17:00:35 +0000
Files and hashes:         1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: gTCDPpZauwHvjS3AuMcUrYxjWCtSfDCJ1dYwxgIe9c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:d7:81:1f:eb:e0:67:fb:6b:ae:25:ab:d9:38:c1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
        Validity
            Not Before: May  8 17:00:35 2025 GMT
            Not After : May  9 17:00:35 2025 GMT
        Subject: CN=3872e217ff23651dee42dc799854b5dc5bcf533d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:a1:7d:6f:59:c0:87:eb:e5:a7:e6:3e:ce:
                    24:f0:80:18:a9:e1:24:25:66:8d:67:29:dd:ac:04:
                    d3:7c:72:73:4c:66:5f:4e:55:c6:16:f3:6e:19:d7:
                    99:08:32:1d:e0:e1:05:10:a0:fc:f6:dc:67:a6:e2:
                    a5:df:c7:4e:c1:a2:88:f4:de:81:40:6e:c7:52:8c:
                    c6:68:a1:ae:82:b7:07:3c:fa:24:66:26:6a:8e:74:
                    1c:50:0b:ce:5f:c8:18:75:ef:cc:17:f9:9b:64:70:
                    ba:b5:8f:86:91:f3:d3:3f:dc:35:e3:dd:27:b3:67:
                    24:0d:65:e8:fd:65:51:6f:17:65:1c:6d:cb:7d:62:
                    90:68:da:16:b0:f0:ac:b2:34:37:26:f9:52:1b:86:
                    fc:3a:cb:00:bc:e9:8b:de:ff:07:3d:d4:83:5c:19:
                    f4:b4:e4:c1:72:2d:a5:96:11:95:4e:5c:3c:df:aa:
                    19:7f:f0:43:b6:31:a7:ef:cd:60:81:0b:89:41:66:
                    64:2f:6a:16:d3:5e:dd:d4:aa:94:65:10:08:1e:f1:
                    41:d7:13:49:aa:d4:0e:15:f1:93:5c:92:44:e3:7d:
                    0c:5f:41:df:a7:77:a6:8e:04:d0:ce:6b:d3:28:51:
                    ef:8d:7a:b7:94:8b:10:02:60:d9:04:df:5a:c1:b4:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:72:E2:17:FF:23:65:1D:EE:42:DC:79:98:54:B5:DC:5B:CF:53:3D
            X509v3 Authority Key Identifier:
                keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:5f:54:70:a3:60:5b:53:02:66:b5:c3:af:be:7d:8b:ab:
         49:1b:92:ba:cc:69:7f:f8:89:93:fa:2f:8e:96:82:c0:15:dc:
         1b:f8:29:09:88:b0:89:82:9d:1b:23:c2:3b:e2:96:e2:24:eb:
         26:96:b5:b9:ad:a8:97:73:10:62:40:e6:40:72:a8:2e:e3:bf:
         51:fd:1a:71:b0:6e:07:9f:d3:03:a1:a8:ad:4e:91:9f:66:46:
         f9:f9:bf:fc:ae:bd:ff:3c:6f:30:f8:4a:94:62:89:77:11:5d:
         27:fd:1a:6c:e1:40:64:34:21:ad:7a:6f:0e:f2:ab:07:97:ec:
         6d:a4:9f:ec:e1:81:3e:a0:83:85:ff:3e:e5:3c:eb:f5:a3:11:
         fe:d7:eb:2b:a4:1e:8c:43:6f:0d:82:00:1e:de:df:43:be:6c:
         8a:e1:29:f4:e9:54:f5:65:fc:fa:e2:53:bf:32:39:8f:36:30:
         e2:a5:db:05:d9:a1:eb:0c:ef:86:14:f4:4d:45:ed:5e:7c:ea:
         7d:de:5b:41:69:f3:fa:93:13:69:8d:1c:fb:8f:04:7b:78:d3:
         63:8f:02:85:44:cb:9d:a0:46:47:62:52:05:0c:be:6d:27:38:
         b2:41:7e:f4:c0:e5:a5:60:d0:a2:2a:04:87:af:2a:e7:43:95:
         60:aa:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:38:24 2025 by rpki-client