Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
File:                     vVhFViKSj0TenBVdcGjh0RtEVPE.mft (raw, json)
Hash identifier:          C/79UeAr426B56OP5dQKVQpwAM8EvTN5FgtBaVIlTRs=
Subject key identifier:   BC:84:1C:5D:14:68:9A:02:23:21:06:23:44:6A:20:10:C1:8F:53:80
Authority key identifier: BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
Certificate issuer:       /CN=bd58455622928f44de9c155d7068e1d11b4454f1
Certificate serial:       0196BD49B6396389A907D65FED03E6EFA47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
Manifest number:          1530
Signing time:             Sun 11 May 2025 03:00:46 +0000
Manifest this update:     Sun 11 May 2025 03:00:46 +0000
Manifest next update:     Mon 12 May 2025 03:00:46 +0000
Files and hashes:         1: vVhFViKSj0TenBVdcGjh0RtEVPE.crl (hash: oiAthzmB0vO4efx5nyEqx6VP5G+eIV/Dm5ucHHd71BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:b6:39:63:89:a9:07:d6:5f:ed:03:e6:ef:a4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd58455622928f44de9c155d7068e1d11b4454f1
        Validity
            Not Before: May 11 03:00:46 2025 GMT
            Not After : May 12 03:00:46 2025 GMT
        Subject: CN=bc841c5d14689a0223210623446a2010c18f5380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:5c:2f:39:72:3e:85:75:ba:28:91:9d:01:
                    cb:04:14:75:b3:59:25:ee:5f:44:f8:c1:f7:31:f2:
                    48:02:c7:31:5d:f2:fa:67:b5:9a:51:82:ad:37:97:
                    9f:1f:5f:cc:44:80:00:db:f4:36:c7:09:bc:4d:13:
                    71:4f:b0:33:4e:a1:b4:5b:59:37:eb:c5:ad:b7:e3:
                    e6:e6:36:00:0b:5e:a1:72:f2:f6:6a:00:fe:9d:b6:
                    05:37:e6:40:f4:ca:25:28:ae:c6:ea:86:43:fe:92:
                    ae:43:49:e4:6d:56:28:2d:69:4a:3d:7a:d1:cf:65:
                    c7:bf:ab:63:2a:ef:4f:b3:1f:4f:7c:36:ad:d5:6b:
                    5c:a0:60:f1:2b:91:04:40:02:1a:83:10:44:85:a7:
                    43:6c:4c:b7:de:ae:2c:7d:34:04:66:e7:9d:94:55:
                    79:24:fe:49:0c:c1:f3:b9:3c:5b:de:40:a9:a4:d3:
                    0c:de:0c:43:9f:37:15:72:55:40:d3:63:dd:a3:c1:
                    e3:8c:d4:7c:53:52:39:e8:b7:06:21:90:88:e9:f4:
                    84:bd:13:27:32:44:ac:81:38:6c:4d:8e:8a:1c:59:
                    2d:09:fb:dc:94:2c:f6:1a:1a:61:69:8c:36:54:cf:
                    c2:0b:ee:5a:3c:6a:49:c5:42:7b:17:3d:3a:c3:6d:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:84:1C:5D:14:68:9A:02:23:21:06:23:44:6A:20:10:C1:8F:53:80
            X509v3 Authority Key Identifier:
                keyid:BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:73:07:3d:92:d1:81:f5:68:94:7d:9b:62:b3:c8:fc:13:d9:
         99:a4:21:4b:67:59:9c:2b:a1:12:b6:05:31:b3:df:de:13:a5:
         af:f4:0e:2b:4c:9c:1c:18:bc:37:8a:93:6a:f7:6a:47:0d:8b:
         47:e3:04:78:f5:f2:33:55:b3:17:45:ac:dc:9a:ab:f9:d6:36:
         c0:c6:db:eb:b9:98:4d:e1:7f:9c:1e:69:2b:4f:0c:e3:4f:5f:
         c4:6b:49:28:f5:d9:bf:66:2b:5a:5f:58:f0:e8:d7:9e:91:57:
         45:e0:cd:55:56:c4:7c:1a:ac:5c:63:e5:d8:a8:ae:78:0f:87:
         9c:1f:d4:65:ab:c6:e6:f5:4b:e0:2a:f4:30:a5:52:05:57:51:
         08:6d:75:77:05:31:04:b8:e6:3f:70:b3:6a:d5:4d:2d:43:80:
         61:55:6f:7b:90:46:b7:31:b1:45:98:95:c7:4e:9f:bf:15:62:
         d7:17:a1:9e:5c:6b:1e:5a:ca:31:51:c8:01:3e:60:ea:3e:1c:
         f0:01:2e:42:69:f1:e5:60:66:d1:03:7c:98:47:93:ad:22:ee:
         df:cf:d5:94:45:3e:e8:29:22:1d:9a:a4:5b:89:e0:83:85:cc:
         4f:ed:45:17:79:5b:04:f8:91:aa:23:35:5b:90:8b:9e:20:a0:
         67:0d:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:19:27 2025 by rpki-client