Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          U6MoLjP1npflNgQnQM3UVC7+ziEPzNdNglFs42WnmN4=
Subject key identifier:   88:10:EC:E3:54:64:E7:4D:5F:F4:B3:0B:AB:DB:AE:21:C8:17:D3:AB
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       01969F3F5D7A85928219A04DF6BF0309BE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          0EF3
Signing time:             Mon 05 May 2025 07:00:52 +0000
Manifest this update:     Mon 05 May 2025 07:00:52 +0000
Manifest next update:     Tue 06 May 2025 07:00:52 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: wHB5L91NiDfVSJtK7lXyVxP4mDdPh7HaQfcWPoYKNOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:3f:5d:7a:85:92:82:19:a0:4d:f6:bf:03:09:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: May  5 07:00:52 2025 GMT
            Not After : May  6 07:00:52 2025 GMT
        Subject: CN=8810ece35464e74d5ff4b30babdbae21c817d3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:7f:22:88:62:3e:87:ff:f1:e4:ca:e9:bc:
                    cc:3d:4a:99:ba:43:85:60:df:43:16:fd:66:75:3e:
                    c3:70:18:d7:7e:bf:d4:00:80:5b:d6:75:6b:d4:72:
                    31:76:5c:40:66:92:a2:78:a9:07:bd:cd:0b:9c:6f:
                    85:71:9f:00:97:06:37:d0:52:e1:65:e9:f5:13:4d:
                    96:53:b4:fa:6f:c6:2f:66:3e:9e:b0:16:d5:f1:17:
                    db:9c:9c:b4:2c:f6:50:dd:ed:09:44:9b:ee:29:24:
                    9d:ce:90:73:e3:41:d6:8c:ae:2b:03:94:23:93:67:
                    23:25:a8:f7:b7:bb:85:17:10:63:e3:30:a7:00:40:
                    a0:7a:ab:c0:e4:49:f2:20:7a:b2:fd:7c:c2:5f:7f:
                    13:3f:02:89:48:df:ba:38:72:d1:02:0a:c3:3c:96:
                    7d:57:a5:0c:65:99:54:70:52:1d:a3:cf:dc:ba:cb:
                    b0:cb:02:2b:79:0e:5f:97:ec:cc:40:92:10:3e:40:
                    a5:5e:26:0e:da:29:2b:10:83:10:8c:8d:be:ef:59:
                    4d:44:db:ca:e1:e3:99:00:af:78:54:5e:04:d3:ac:
                    c3:d3:68:10:9b:7e:91:a5:5f:e7:60:18:19:dc:79:
                    4a:b3:ca:d6:f8:23:e7:e1:10:1b:70:16:f1:5d:c6:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:EC:E3:54:64:E7:4D:5F:F4:B3:0B:AB:DB:AE:21:C8:17:D3:AB
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:f4:5d:ff:e7:63:f0:29:95:a9:1b:34:5d:c6:40:c4:cc:
         c8:09:73:1d:33:80:8e:d0:75:67:f2:0c:da:ee:35:56:7c:51:
         36:08:3f:f9:17:83:e5:af:5e:cf:3c:b2:04:f8:70:6e:f8:6f:
         b9:69:bf:90:d6:a0:dc:dc:d8:f9:e9:20:ab:70:45:74:20:a0:
         69:a4:ad:2d:a6:ba:80:62:25:f4:63:6e:16:53:f8:b0:01:01:
         df:17:42:10:bc:19:d0:d2:60:d7:48:55:ad:25:9b:9a:8b:f8:
         3c:e9:71:1f:fc:23:15:3c:ce:be:b7:d2:e8:aa:3f:79:22:7e:
         d3:3e:72:38:9c:83:ba:7f:46:c8:91:09:ab:1a:82:65:41:28:
         04:86:f8:1e:1b:fa:d1:ca:f8:ae:8a:ce:e4:98:8c:2b:3a:3e:
         91:18:4c:4b:46:77:e4:b2:1c:05:c3:96:ae:bd:47:c9:55:fe:
         dd:6d:cd:4c:4d:3d:b1:b9:26:4c:4e:87:45:a2:91:a1:c4:08:
         de:d2:28:50:14:8a:05:0a:e5:c5:ff:b4:71:d5:75:b3:72:76:
         c4:10:8d:e9:eb:ba:7c:e2:60:95:a2:72:bc:d0:64:60:66:82:
         6a:8d:de:b5:4f:ca:95:fe:4e:fc:a7:e4:f7:ae:71:7a:ef:33:
         c7:37:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:05:35 2025 by rpki-client