Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File:                     pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier:          90mTTUmtHh33IQ7h6upl9TIGNaSmuIsyoxv8G8CLWvQ=
Subject key identifier:   A5:E3:36:C9:BA:14:AE:C7:65:BA:58:56:5E:FE:20:6D:C1:3C:6F:6C
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer:       /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial:       0196C916CCE173056278EDDEB193625B9D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number:          1536
Signing time:             Tue 13 May 2025 10:00:36 +0000
Manifest this update:     Tue 13 May 2025 10:00:36 +0000
Manifest next update:     Wed 14 May 2025 10:00:36 +0000
Files and hashes:         1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: xghxgca1oSrFE1q0kyo/jOTCLImMAoRphyoOocFhijA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:16:cc:e1:73:05:62:78:ed:de:b1:93:62:5b:9d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
        Validity
            Not Before: May 13 10:00:36 2025 GMT
            Not After : May 14 10:00:36 2025 GMT
        Subject: CN=a5e336c9ba14aec765ba58565efe206dc13c6f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:2a:6c:af:35:e8:9e:b8:4f:47:c9:73:8a:
                    29:a4:d7:c8:17:55:97:7c:36:f8:af:b4:39:e9:d4:
                    4e:d6:56:ea:70:76:12:d7:5f:95:3d:2c:51:f2:3f:
                    dc:fc:f1:50:60:d7:7e:b0:a5:9d:ef:86:55:b3:5f:
                    1d:32:6b:fc:4c:73:c3:48:32:d2:f7:ea:fd:36:8e:
                    95:f7:64:c3:b3:97:11:65:8e:15:8d:ef:2b:31:1c:
                    c3:ea:b7:51:de:8d:a0:19:16:e5:f4:2c:bf:4e:ba:
                    b2:51:c3:c5:15:5b:44:a7:21:a2:b3:39:92:36:2a:
                    3d:4d:01:19:5a:15:80:42:79:55:0a:a7:5b:a1:95:
                    d8:83:ab:ca:d4:2e:c9:21:5d:52:41:77:27:b0:ec:
                    36:77:e0:19:51:7e:4b:75:ef:4e:ed:78:78:8a:a0:
                    cd:15:a2:64:e1:06:04:8d:a0:15:e3:32:18:11:71:
                    cd:b9:cc:db:81:06:83:7c:8d:61:80:1c:c5:8e:7b:
                    72:b9:a7:fe:6e:9b:47:a4:2e:f9:29:f6:f1:98:14:
                    d0:f3:02:09:5f:2b:d0:83:0c:f8:c9:37:f5:11:04:
                    9a:60:e0:bf:6d:3a:a5:e5:db:6e:39:82:34:5b:30:
                    4a:95:da:3d:9e:1c:63:94:66:60:29:7d:aa:91:e8:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E3:36:C9:BA:14:AE:C7:65:BA:58:56:5E:FE:20:6D:C1:3C:6F:6C
            X509v3 Authority Key Identifier:
                keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f7:72:9f:f1:fc:a4:b3:00:03:2e:0c:94:95:90:55:bd:a1:
         10:1d:89:08:1e:e4:f1:b1:e9:18:9d:ac:0f:73:d2:17:70:46:
         85:e6:38:c4:2d:94:10:4d:c3:cd:27:14:d9:d0:6e:47:81:7b:
         a9:ad:8b:02:f6:11:77:e1:75:cb:d8:7d:4d:d7:a6:bd:e4:3b:
         99:a6:1e:d1:47:c5:11:d1:ee:4d:da:12:11:e0:af:ee:72:cc:
         6f:df:1e:6e:2d:d9:8c:4a:d3:c1:9b:ee:40:90:d4:c1:f3:a4:
         fa:8e:cb:7a:fd:7d:c3:f2:e8:a0:0f:4e:04:1e:91:ae:33:61:
         89:4b:dd:ce:bf:6e:6f:4c:f2:ba:28:8e:e8:00:cf:b5:79:ea:
         34:3c:48:76:22:f7:18:7d:2e:a4:19:4f:a7:bd:56:ce:38:0f:
         21:7b:5b:e0:3b:1c:29:31:89:2f:57:aa:ed:45:bb:8f:3c:b3:
         34:bc:d8:60:78:82:44:c4:46:b1:73:41:01:31:ca:f3:03:f2:
         0a:48:f9:80:f2:28:d1:8f:d1:8f:a9:e6:ab:52:74:ed:db:60:
         b6:f1:ff:6e:99:ce:21:78:df:51:c2:46:3b:c3:21:43:96:a0:
         4d:17:9f:68:de:82:08:58:42:cf:fe:db:87:06:8b:02:f8:a5:
         87:0d:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:32:34 2025 by rpki-client