Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
File:                     Vl_xMRJL3SahzQpsx_loVNgwNg4.mft (raw, json)
Hash identifier:          Wz/5J9JW9M3NOXKFYRq8CLi8mh9wkZ61dWTqHefy3lQ=
Subject key identifier:   2D:7D:98:42:39:EE:AC:B2:B7:91:02:9F:70:FC:23:E3:72:F0:CC:8E
Authority key identifier: 56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Certificate issuer:       /CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Certificate serial:       0196CCBC7D3C297050E3CB99A3723C49ED2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
Manifest number:          0608
Signing time:             Wed 14 May 2025 03:00:26 +0000
Manifest this update:     Wed 14 May 2025 03:00:26 +0000
Manifest next update:     Thu 15 May 2025 03:00:26 +0000
Files and hashes:         1: Vl_xMRJL3SahzQpsx_loVNgwNg4.crl (hash: 24+Kgb+V+YObemR3QolUng9foNajKYCoYOzDBwMzq6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:bc:7d:3c:29:70:50:e3:cb:99:a3:72:3c:49:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
        Validity
            Not Before: May 14 03:00:26 2025 GMT
            Not After : May 15 03:00:26 2025 GMT
        Subject: CN=2d7d984239eeacb2b791029f70fc23e372f0cc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:b7:8e:03:86:29:6b:f9:95:8b:b0:1a:4d:
                    31:c7:92:79:ba:cc:9b:c2:c6:f6:a4:65:2e:2c:a8:
                    08:77:a1:39:9c:82:6f:e3:ce:78:90:de:69:c1:c2:
                    34:33:92:43:15:7e:b7:80:e9:44:ba:c1:d2:1b:78:
                    fd:77:52:71:2f:b5:a3:3a:ad:c6:95:74:fa:1f:f3:
                    b1:54:32:fe:3c:bf:5f:9c:66:11:30:fe:68:99:02:
                    e3:f8:49:92:26:c1:89:35:00:b4:f3:55:8e:d8:a3:
                    45:fb:39:d0:97:46:47:33:cc:c8:80:a4:3c:f4:07:
                    35:06:5e:f6:43:93:85:4c:75:c3:c5:c7:a7:b5:3a:
                    80:b0:e0:1a:e3:06:51:e5:a8:ac:49:52:d4:a3:17:
                    b1:9e:4d:8c:2a:5c:00:9e:62:f1:fb:79:26:92:28:
                    0b:5b:ba:f1:09:19:05:2e:76:be:53:7e:f6:fb:12:
                    ad:27:91:b6:00:10:bc:f4:10:b5:f6:bf:05:f9:ff:
                    c2:83:e0:33:c2:61:c9:b8:48:76:70:90:9c:7a:43:
                    9d:f8:0b:4e:8b:26:49:58:ff:aa:a9:8d:f8:9c:d2:
                    ef:40:e5:4a:c8:b7:80:10:aa:f9:d8:6c:69:73:74:
                    13:08:8f:49:9c:de:39:b3:47:f5:25:23:0a:8f:4c:
                    2a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7D:98:42:39:EE:AC:B2:B7:91:02:9F:70:FC:23:E3:72:F0:CC:8E
            X509v3 Authority Key Identifier:
                keyid:56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:b3:c7:b8:a1:70:9d:25:a6:85:a8:45:a7:2f:ce:fe:a7:
         ef:9c:d8:6e:fc:15:4b:cb:b2:33:35:9a:9d:ce:a4:92:50:28:
         7e:95:db:d1:9f:49:a1:f7:4e:d8:4e:51:d5:9d:4f:ab:91:38:
         55:9a:57:d6:8e:c8:5e:40:72:d5:42:5e:a6:92:d0:08:72:f6:
         db:af:4d:56:b0:d2:b0:de:3c:14:ab:58:36:ca:d7:1f:2e:b8:
         c3:26:d1:5a:2a:09:1b:c6:9a:d7:d8:72:03:6b:47:45:e0:30:
         95:e1:9e:f3:ae:16:0d:68:94:ef:d2:86:d4:dd:33:fb:27:55:
         19:22:ea:4d:ab:e6:ce:72:27:d2:0b:24:42:59:cc:0a:e5:fa:
         1d:11:f4:2c:31:1a:cd:16:bf:35:fd:57:ba:48:bb:2c:68:11:
         23:ef:5b:9e:e1:6b:90:1d:84:40:44:2e:d1:3c:f9:c4:06:e1:
         b1:a5:9f:de:4c:fc:a7:fe:6b:62:a1:db:5b:9a:d5:f2:e7:32:
         8e:f1:a8:15:78:53:1c:61:f0:f8:0b:ba:2d:8a:dc:d7:66:2b:
         63:f4:f7:24:e5:e0:08:65:01:e1:c6:6e:0c:08:92:a0:ef:3e:
         09:eb:19:a6:48:9e:5b:70:74:15:34:7a:be:cb:90:61:7f:24:
         d4:ce:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:58:34 2025 by rpki-client