Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File:                     tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier:          1hiKXiYtuelWzOEnFGq4gg8djFfdEqDq6ycXdrpsbgE=
Subject key identifier:   5D:E5:DE:E2:E4:A5:64:14:A0:31:A5:2A:FF:AA:6D:9C:7F:3F:FB:2B
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer:       /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial:       0196C0EF7747FD24070DB35FC311DF3BCAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number:          0290
Signing time:             Sun 11 May 2025 20:00:41 +0000
Manifest this update:     Sun 11 May 2025 20:00:41 +0000
Manifest next update:     Mon 12 May 2025 20:00:41 +0000
Files and hashes:         1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: J+xlFLRHUNdtP6sW2iSGlejFPTPKqiKYcgpoQkStDnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:ef:77:47:fd:24:07:0d:b3:5f:c3:11:df:3b:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
        Validity
            Not Before: May 11 20:00:41 2025 GMT
            Not After : May 12 20:00:41 2025 GMT
        Subject: CN=5de5dee2e4a56414a031a52affaa6d9c7f3ffb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:56:13:13:e5:5e:b7:8c:90:c8:ce:4e:bf:
                    35:9a:f4:e2:8d:23:8b:ba:33:19:b7:dd:63:c9:82:
                    f9:18:e0:b8:1d:d5:9d:57:8d:61:41:a1:f0:85:e5:
                    01:a3:87:72:29:58:54:e4:8c:f0:ba:c8:45:9a:75:
                    11:d9:36:35:b1:ed:cb:65:3a:dd:eb:8f:b3:18:c4:
                    9c:84:76:23:be:50:4b:4f:c0:6b:89:7c:56:63:0b:
                    f0:a0:25:90:15:a9:8e:00:27:0e:91:dc:a1:da:7b:
                    26:31:f5:a6:aa:2e:19:ca:88:b0:5f:89:da:4c:8c:
                    39:ae:2f:a4:9e:2a:db:60:49:56:b7:25:91:f3:73:
                    3e:43:4c:f3:6c:6a:72:ce:25:af:06:53:11:20:c1:
                    59:72:06:10:64:5c:d6:3c:69:ad:1c:1d:48:b9:b8:
                    73:b5:63:b7:87:5a:97:bf:69:62:89:1c:98:51:73:
                    bc:c9:1f:6b:78:5c:71:98:a2:91:21:61:ac:30:f8:
                    c3:0f:79:85:e3:ce:ff:d7:72:c7:86:9b:f4:e8:90:
                    4b:14:6e:91:56:ea:d8:9f:23:4a:53:10:f4:fb:2d:
                    29:14:ae:ab:09:20:97:4c:b5:25:1d:be:c0:ca:ba:
                    66:12:a3:2d:25:22:e7:68:c5:7a:d2:3b:0d:33:28:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E5:DE:E2:E4:A5:64:14:A0:31:A5:2A:FF:AA:6D:9C:7F:3F:FB:2B
            X509v3 Authority Key Identifier:
                keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f0:5e:ae:24:b5:22:e1:f6:57:70:62:fc:ea:1c:3e:35:c0:
         29:96:a1:68:8b:bc:af:19:7b:b4:c7:c6:37:15:1f:32:9f:46:
         c1:7a:57:56:f3:fe:38:a5:e1:06:31:03:7b:06:3a:1e:16:17:
         cf:58:86:7d:2a:51:d2:d1:6a:bc:87:38:c7:43:6e:17:e6:4b:
         74:1d:4c:0e:36:b0:f0:29:e2:89:6a:db:94:ef:5a:f2:60:66:
         0a:10:70:5e:a8:46:32:16:96:37:7c:59:4d:0e:e4:a2:7b:b3:
         05:49:f6:94:72:c8:de:68:7f:68:8d:50:c0:3f:20:65:47:1d:
         40:75:26:38:26:9d:67:24:87:99:21:63:99:fc:8d:9c:27:fb:
         fe:c8:cd:47:13:91:06:e3:a3:18:d7:ea:29:c3:64:28:fd:ae:
         90:75:e6:e0:2b:f1:f4:18:f5:2f:68:f5:71:50:28:09:e1:26:
         54:2c:55:bc:98:24:35:88:39:34:48:e9:55:72:20:7d:19:b2:
         44:ea:98:6e:5b:06:45:b7:73:64:c4:a0:93:79:46:30:fc:e2:
         0c:df:47:f5:6b:ec:ac:87:de:f3:c2:01:3b:5d:06:75:c4:94:
         88:a7:66:ef:b3:9c:f0:12:5c:c0:af:5b:97:e4:14:1d:5b:50:
         cd:20:9f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:30:38 2025 by rpki-client