Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File:                     _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier:          f6vkepnb9XqGHdnxUvcxDsHwZJWaA+KCNOsZHLhmRlc=
Subject key identifier:   E3:91:68:D3:4C:0C:D5:BF:31:B9:CA:41:3E:2A:AF:C4:5F:42:8A:EF
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer:       /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial:       0196A766488E92341110F5D87C191763A935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number:          152A
Signing time:             Tue 06 May 2025 21:00:20 +0000
Manifest this update:     Tue 06 May 2025 21:00:20 +0000
Manifest next update:     Wed 07 May 2025 21:00:20 +0000
Files and hashes:         1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: MtSRNQSmvMQL5AwJ7HcGri8W5C5k+xdDJfhuoMg5y0k=)
                          2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:66:48:8e:92:34:11:10:f5:d8:7c:19:17:63:a9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
        Validity
            Not Before: May  6 21:00:20 2025 GMT
            Not After : May  7 21:00:20 2025 GMT
        Subject: CN=e39168d34c0cd5bf31b9ca413e2aafc45f428aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:88:16:76:33:e1:e5:55:55:cc:75:7a:91:
                    81:e4:21:e3:bb:7f:84:22:bb:fd:52:8b:54:81:1e:
                    f5:bb:72:39:83:6c:25:74:68:ce:c8:9b:24:72:46:
                    b1:88:44:40:7a:33:ea:23:b7:51:ad:91:c4:82:61:
                    6d:ef:a4:16:c2:e3:39:b2:49:73:5b:59:ff:cb:fe:
                    f9:c6:db:f8:36:fe:d3:d3:3d:c1:85:63:b3:6f:00:
                    73:6e:aa:df:52:f5:cf:71:a1:60:bb:13:24:9c:c9:
                    f9:f7:47:ee:80:4f:0c:37:14:38:b5:1a:93:74:9c:
                    e7:e7:44:fb:5c:8e:70:e3:85:0f:fa:2f:28:37:b5:
                    38:e7:e7:de:7b:e2:67:fb:b4:e8:b1:1e:02:e9:5f:
                    aa:33:85:8d:ed:33:27:35:ec:38:66:b3:33:9b:c5:
                    cb:dc:ec:42:6d:9c:61:db:ea:27:36:b2:af:2f:61:
                    3e:3e:7b:e8:c0:d2:64:85:fd:b4:08:4e:e1:43:bb:
                    e1:46:10:70:b7:18:0b:12:5c:21:51:36:01:ee:74:
                    c1:8b:d2:97:f4:d2:3d:9c:3f:ec:8e:4b:81:d8:d1:
                    ba:9a:b3:51:c8:e7:51:45:eb:91:63:2e:dd:78:e2:
                    ed:26:fc:6c:7f:c7:17:84:c1:54:49:71:3e:c7:98:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:91:68:D3:4C:0C:D5:BF:31:B9:CA:41:3E:2A:AF:C4:5F:42:8A:EF
            X509v3 Authority Key Identifier:
                keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:60:b8:6f:96:0e:7f:9a:cd:c1:ea:c5:56:b3:29:0d:ae:
         cd:fd:65:da:a6:66:66:d6:60:50:b8:39:3b:4a:0c:03:6c:f4:
         4d:af:9a:d6:92:e9:18:43:d3:39:f2:13:f7:eb:41:d9:1b:09:
         be:c6:db:4a:b6:f5:f7:3c:9d:eb:d3:02:b3:ff:32:02:af:cc:
         77:94:b8:40:0b:67:b7:30:2b:9b:85:80:77:b7:8f:75:1d:c3:
         f3:94:ad:79:02:23:83:24:fb:46:22:16:8b:9d:e9:9e:65:88:
         7a:d6:b6:b9:3d:4d:40:c1:39:6e:a2:13:68:50:97:2e:4b:3a:
         ad:1c:b0:47:95:99:81:7c:aa:de:7c:a4:43:bc:8a:8c:2a:43:
         56:69:7b:c6:69:86:d6:1d:48:45:0e:d7:df:55:a2:24:23:dc:
         51:43:99:86:84:1d:21:c5:d1:99:07:d1:01:52:3e:63:a6:03:
         13:5b:e2:54:fb:0c:d6:87:79:de:28:9b:c4:52:0f:18:bf:ff:
         b4:b5:24:13:ef:38:e7:cd:9f:7c:3e:9a:0d:db:3b:2a:d1:37:
         c2:1a:f0:29:f4:c2:58:38:6f:49:91:82:e0:6d:b1:e3:3b:ce:
         31:fb:4f:21:83:e4:80:85:74:4b:6c:31:54:a5:50:99:ff:9d:
         9c:df:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:22:07 2025 by rpki-client