Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File:                     ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier:          llpvuQBHGj76gzbGJ+4oYPwzAu3i67Wii7KzSFFWIzY=
Subject key identifier:   98:2E:98:7B:8C:57:25:E1:B5:6D:F0:15:77:31:F7:C3:5F:87:33:71
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer:       /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial:       0196CA604BA07EEFAAED247F8AAE45FBEE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number:          0D31
Signing time:             Tue 13 May 2025 16:00:30 +0000
Manifest this update:     Tue 13 May 2025 16:00:30 +0000
Manifest next update:     Wed 14 May 2025 16:00:30 +0000
Files and hashes:         1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: 7WJh9Pe1YX0hNEp9bzTv3cWypnZBEQye+SKVYSq6HyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:60:4b:a0:7e:ef:aa:ed:24:7f:8a:ae:45:fb:ee:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
        Validity
            Not Before: May 13 16:00:30 2025 GMT
            Not After : May 14 16:00:30 2025 GMT
        Subject: CN=982e987b8c5725e1b56df0157731f7c35f873371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:47:ec:fc:0e:ee:1a:ae:e7:e9:e7:0d:22:
                    52:9c:2f:3f:85:16:be:85:85:5c:d1:f7:ea:1e:f8:
                    5c:d1:09:b8:90:24:d1:51:89:4a:7a:b5:64:a3:da:
                    50:70:aa:41:9e:f6:55:5b:c6:2a:8e:fc:e8:19:f5:
                    fb:fa:b1:47:a3:ff:d7:5a:09:f4:2e:d1:e6:0f:dc:
                    fe:21:a0:5c:31:57:65:fe:35:9c:0e:cf:d1:b8:8c:
                    1c:3e:7e:52:aa:e5:c4:b0:db:73:67:a1:f8:f4:70:
                    32:f8:1f:d1:3e:c8:c6:c0:38:ca:92:b2:ef:1d:c0:
                    df:60:19:5c:9a:7d:d2:01:6c:94:29:51:47:e6:25:
                    be:5d:98:a3:68:e2:e0:ed:28:4b:c5:bf:bc:7b:e4:
                    3c:e3:f1:00:97:ff:a4:0c:36:f0:27:ea:5d:69:29:
                    e5:d3:57:6e:cc:0d:60:8e:4b:fb:09:04:c4:83:ef:
                    47:11:a2:41:34:ac:95:6c:90:f0:d2:34:13:aa:ff:
                    80:7a:ac:f6:24:08:fc:16:39:d6:b0:6b:96:77:da:
                    fb:c3:81:8f:87:7f:fc:a1:32:77:68:75:22:e6:f4:
                    ab:0f:7a:79:eb:77:b5:b7:42:f8:af:42:dc:91:4e:
                    ca:3c:59:f8:ab:9c:ec:05:88:b5:92:4e:16:2c:6e:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2E:98:7B:8C:57:25:E1:B5:6D:F0:15:77:31:F7:C3:5F:87:33:71
            X509v3 Authority Key Identifier:
                keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:c2:3b:48:ea:59:f4:7b:80:ba:ca:9c:be:a7:11:e3:61:
         b2:fa:e6:df:39:37:77:04:de:66:b6:ca:56:cd:2f:af:b3:0e:
         64:4c:14:0b:60:30:75:5e:61:7d:09:46:17:09:61:fe:8a:69:
         1e:9d:e5:aa:c4:6e:f4:0b:fd:f7:62:3f:9c:a0:3f:74:51:1d:
         23:56:55:59:af:56:98:fd:b4:01:f1:64:e3:b2:3b:18:ba:47:
         fc:53:97:ff:3c:7b:e9:c6:10:aa:1e:90:52:29:f6:73:15:ff:
         1c:34:65:c6:50:37:b2:0c:69:02:51:a1:79:67:c3:56:74:fc:
         3d:aa:d9:ba:7b:0d:5a:32:a1:de:2c:f3:0a:8b:40:e5:42:8f:
         b2:a3:26:0e:b1:f6:35:d6:32:9c:7e:42:ea:ee:1f:3f:37:0e:
         4b:1e:30:65:88:90:20:44:1e:9e:10:22:67:67:dd:f7:df:19:
         16:78:ce:55:d1:d0:82:73:79:6d:cb:04:c9:ca:22:14:ff:c7:
         fd:95:8a:85:ce:5a:c8:ba:b1:fc:06:bf:b7:c2:71:69:5b:01:
         48:25:b7:31:ff:53:9b:20:8e:83:8b:2a:63:cc:d3:9c:91:84:
         ba:0b:57:39:0c:e8:04:12:3e:f5:06:82:82:13:13:2f:1d:b0:
         de:de:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:08:49 2025 by rpki-client