Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File:                     tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier:          azJUaoJAPq2gLm0GgR+uW13KCde8gix/RfphXYzhS3Q=
Subject key identifier:   EE:F0:1B:90:06:67:76:64:E9:FA:CA:09:12:27:AA:EB:F6:9A:91:09
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer:       /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial:       0196CB73529BAC2E2A838735E735E144A8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number:          1536
Signing time:             Tue 13 May 2025 21:00:54 +0000
Manifest this update:     Tue 13 May 2025 21:00:54 +0000
Manifest next update:     Wed 14 May 2025 21:00:54 +0000
Files and hashes:         1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: jSupw53MTtaWRprrvnFIfGtG87ClzBvuaE62Cf4YLz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:52:9b:ac:2e:2a:83:87:35:e7:35:e1:44:a8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
        Validity
            Not Before: May 13 21:00:54 2025 GMT
            Not After : May 14 21:00:54 2025 GMT
        Subject: CN=eef01b9006677664e9faca091227aaebf69a9109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:65:a5:19:e8:82:29:6d:dc:31:72:04:86:
                    2e:06:a0:89:48:c5:02:c0:5f:b2:51:d5:dd:af:88:
                    af:0f:94:4a:4b:ce:c3:33:20:5c:57:94:07:f5:e4:
                    90:08:f0:bd:e2:91:63:72:53:07:d4:30:be:bb:80:
                    af:7d:87:f6:3c:87:0f:7b:7d:97:03:e1:cd:39:6e:
                    99:e3:19:9d:4a:2a:62:cf:27:af:c8:87:6b:5e:8b:
                    70:46:f3:ac:0f:06:b9:7c:ae:11:55:97:62:68:5d:
                    0b:6c:6e:dc:e0:7b:ce:c3:43:74:ed:32:3e:ee:50:
                    2e:39:5b:1d:02:1b:8d:44:2b:3c:bd:16:fb:da:f4:
                    36:9a:4c:77:f3:63:7b:4c:68:6f:aa:23:7e:2d:81:
                    84:56:2d:0e:a9:f2:81:50:58:8e:d8:d1:7a:7a:93:
                    2f:80:21:b7:13:ff:97:b7:67:b6:c3:4b:84:8d:2f:
                    b1:6f:05:7e:f4:ce:7f:73:15:ae:a2:e0:35:b4:3c:
                    18:62:68:c3:4b:41:de:20:35:d0:36:01:cf:0d:f2:
                    bb:b9:d3:bc:55:ea:8f:79:00:bf:c0:bb:c3:9c:cd:
                    bd:1e:d9:df:09:86:2c:56:8c:c2:e4:d4:03:1d:a1:
                    b2:d1:7c:cc:0b:34:a3:5e:71:ea:27:a6:4b:d8:5c:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:1B:90:06:67:76:64:E9:FA:CA:09:12:27:AA:EB:F6:9A:91:09
            X509v3 Authority Key Identifier:
                keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:39:10:af:a2:f8:22:14:c1:6c:9b:f4:ac:1c:da:1c:7d:29:
         f8:d2:fc:b0:75:bc:5e:4d:9b:49:81:86:63:06:75:3c:c2:a0:
         34:87:b9:c6:8f:af:e9:7c:cb:4b:ef:83:68:6e:e5:15:f6:b8:
         51:40:7f:96:b5:93:f9:03:31:ac:0f:79:15:a2:ab:33:62:be:
         a9:4a:39:55:ae:c1:66:6f:6a:1d:d3:d0:ce:b8:b6:1e:ff:5b:
         19:84:f1:43:5b:bf:c3:77:11:9a:88:a1:09:d9:c1:2f:6c:4c:
         b5:45:ee:2b:16:ca:91:dd:b3:76:b6:4a:75:f9:63:19:ad:ae:
         9d:6e:ce:26:af:9c:4f:58:e0:3d:6a:71:67:1b:4d:da:4e:a4:
         0c:2b:91:e8:b2:f7:ad:24:94:2a:3c:b5:b6:62:d0:6b:35:8b:
         15:59:6b:a0:cc:c7:21:b3:ed:f9:90:6e:d3:31:4e:a3:10:bf:
         d2:69:b5:05:75:f0:f0:9a:9b:b9:3f:ec:df:9a:5c:c3:a2:16:
         0d:b3:9d:a8:9e:b1:be:21:4a:70:cc:6d:45:20:59:47:5f:88:
         3c:31:13:0f:cc:72:8d:8b:58:15:3d:3e:34:f6:9b:dd:83:59:
         7e:e0:89:3c:d9:8b:e7:5c:8c:89:77:fe:1b:5d:01:bc:da:23:
         a5:11:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:05:34 2025 by rpki-client