Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
File:                     XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json)
Hash identifier:          26Dcp9nAOKXLYj830KRExVF093qXTxNYiCZ1z0217sQ=
Subject key identifier:   A7:9F:59:7E:59:A0:65:E0:9A:34:FF:55:DA:AD:22:C5:68:4C:93:F0
Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
Certificate issuer:       /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Certificate serial:       0196B0D7808120DEA30D38799D25302D4F2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
Manifest number:          14AD
Signing time:             Thu 08 May 2025 17:00:35 +0000
Manifest this update:     Thu 08 May 2025 17:00:35 +0000
Manifest next update:     Fri 09 May 2025 17:00:35 +0000
Files and hashes:         1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: tvV+y/FZPXvhRbJ15gJkONpHQZgjzDFr4Lwk91uA/vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:d7:80:81:20:de:a3:0d:38:79:9d:25:30:2d:4f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
        Validity
            Not Before: May  8 17:00:35 2025 GMT
            Not After : May  9 17:00:35 2025 GMT
        Subject: CN=a79f597e59a065e09a34ff55daad22c5684c93f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:24:50:48:eb:23:5e:39:59:44:cd:d5:be:2e:
                    07:c1:20:16:05:d4:0d:29:ca:9b:95:7d:ec:5d:17:
                    cf:1b:c6:90:c4:74:52:c0:a8:a2:36:29:70:15:a9:
                    16:31:2a:cb:87:b7:2d:1a:35:18:31:de:95:44:eb:
                    74:ba:2f:38:9f:7e:6c:d1:dc:10:f3:36:63:34:1f:
                    73:4f:28:72:99:14:e6:d1:73:f4:57:c5:89:b8:6f:
                    d4:85:eb:32:1e:e8:69:0d:19:55:36:fd:65:37:42:
                    3b:2e:2f:9b:fa:15:38:54:35:62:e6:7b:0d:66:9f:
                    0c:09:60:51:3d:b6:bf:be:00:b1:7c:b9:ff:bd:d6:
                    dc:af:46:e6:2f:5f:77:f2:12:bb:db:9e:2e:86:9c:
                    94:c3:7b:70:a8:a0:f9:3f:cc:72:27:dc:65:11:ef:
                    c1:16:2c:b8:5d:7c:c2:3e:96:91:eb:31:43:2f:6e:
                    cb:d5:01:0b:f3:f9:2c:4a:f3:65:98:bb:43:ee:70:
                    d2:15:29:17:e8:bc:0d:fd:8e:f1:2b:a1:5e:99:66:
                    d5:0f:8f:6f:f2:ff:37:7f:8b:da:e6:c5:f6:0d:77:
                    e4:d2:1a:03:76:f0:26:89:fd:83:f8:f0:ac:76:23:
                    0e:09:7b:5d:86:1a:cc:3e:bd:6a:81:3f:d2:ff:ed:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9F:59:7E:59:A0:65:E0:9A:34:FF:55:DA:AD:22:C5:68:4C:93:F0
            X509v3 Authority Key Identifier:
                keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1e:77:9b:0e:4e:a6:1f:ac:57:a8:d4:2b:34:ad:1e:82:46:
         99:11:6e:a9:ae:d8:69:2c:94:3d:f8:08:a2:fe:5d:1a:63:d5:
         79:77:3a:9d:db:55:98:9f:26:ad:46:cd:4d:b5:66:ba:a0:7c:
         cf:59:36:9e:9e:d3:b1:d1:d6:4c:3c:e6:e9:fc:4a:bb:fd:82:
         b7:a9:d9:c1:0c:ca:c3:af:b3:60:be:2d:86:06:9b:09:b2:a1:
         80:aa:35:ff:b7:63:e8:82:f8:61:44:b1:51:c0:25:7c:42:9b:
         3b:b2:21:37:ed:3e:15:bf:69:08:55:97:f1:b7:91:4d:98:25:
         70:d4:f6:2f:8c:08:fd:1d:f2:fa:27:59:52:83:51:f8:3c:bc:
         5c:17:eb:85:24:37:c4:be:5d:a9:ba:9a:8a:35:7c:33:c9:a1:
         c0:72:0e:d1:58:2a:92:4d:a9:d1:8e:80:ea:78:de:2c:d2:64:
         94:89:77:47:36:3f:e8:4a:05:4a:7f:bf:73:80:bf:9c:2e:45:
         21:f6:7b:b4:7f:cc:3a:5f:ae:12:ee:ef:77:6a:50:6d:03:98:
         31:53:78:74:f0:3b:7e:db:12:07:6d:74:6c:c3:32:b5:8b:6b:
         ec:df:12:c3:2a:82:b6:da:58:59:a9:40:e4:44:85:48:4e:b2:
         43:48:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:42:14 2025 by rpki-client