Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
File:                     xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft (raw, json)
Hash identifier:          OX0+m7i59G7262UoIFMpkRhQ2vSGkOz0FSK/mSyi9Yw=
Subject key identifier:   3D:49:81:E2:76:AE:3D:16:CF:D2:D2:DA:9E:49:56:31:A0:18:C7:3E
Authority key identifier: C5:51:F1:1C:83:B5:2A:76:4F:FC:A8:3D:99:04:70:62:D8:16:7F:4F
Certificate issuer:       /CN=c551f11c83b52a764ffca83d99047062d8167f4f
Certificate serial:       0196CB0588F261E1E7F188A6D8DD684B4674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
Manifest number:          0B36
Signing time:             Tue 13 May 2025 19:00:59 +0000
Manifest this update:     Tue 13 May 2025 19:00:59 +0000
Manifest next update:     Wed 14 May 2025 19:00:59 +0000
Files and hashes:         1: xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl (hash: ss+qh3ex9zvh9pDkQHr+4nxegY9L6YVAcwze5blpBxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:88:f2:61:e1:e7:f1:88:a6:d8:dd:68:4b:46:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c551f11c83b52a764ffca83d99047062d8167f4f
        Validity
            Not Before: May 13 19:00:59 2025 GMT
            Not After : May 14 19:00:59 2025 GMT
        Subject: CN=3d4981e276ae3d16cfd2d2da9e495631a018c73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:88:5b:48:65:e8:fe:14:ba:22:4f:63:56:
                    ab:d5:64:db:fa:91:f5:a4:84:9a:2c:af:af:22:fc:
                    d7:c0:51:d2:9c:33:44:b9:7c:d6:59:e4:7f:dc:96:
                    91:11:4c:4e:8f:4c:1c:0b:08:76:13:ab:69:3c:0e:
                    64:08:92:b9:a0:8a:3c:88:c0:78:51:f9:cb:19:58:
                    1d:28:4f:25:f4:71:75:44:34:61:e8:62:34:9f:87:
                    ba:2e:c0:2f:81:12:32:b6:06:15:9b:76:08:13:17:
                    ba:db:6a:7c:69:8e:cb:01:39:7a:78:ec:14:3e:f7:
                    79:b3:53:08:96:39:36:79:35:0b:66:ef:cd:e9:ba:
                    ea:c2:7d:14:8e:ee:94:fc:87:c4:34:b0:ad:2e:f7:
                    fe:38:2b:ea:a1:af:e6:7a:09:57:24:6d:6b:54:72:
                    24:f7:68:8f:5e:8d:13:56:79:1d:0d:64:b5:57:2b:
                    54:e6:9a:d2:a8:3b:92:2f:8f:33:3f:c5:ce:29:99:
                    62:fe:aa:2b:d4:fd:19:c5:3b:d5:cd:0c:30:f3:d8:
                    9e:5d:d2:25:c5:6f:57:bb:82:a8:bc:18:ba:95:2f:
                    43:e4:c5:08:87:d5:3a:33:9f:ac:c3:c0:21:57:96:
                    17:27:20:db:c5:f6:ca:0a:5c:de:5b:86:8b:6a:4d:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:49:81:E2:76:AE:3D:16:CF:D2:D2:DA:9E:49:56:31:A0:18:C7:3E
            X509v3 Authority Key Identifier:
                keyid:C5:51:F1:1C:83:B5:2A:76:4F:FC:A8:3D:99:04:70:62:D8:16:7F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:01:16:0b:00:57:01:4d:10:53:24:26:b7:6d:d2:e2:94:
         40:6a:5d:0b:21:ee:12:09:82:00:02:39:96:3b:98:0d:b3:f3:
         bb:56:24:d4:4d:57:17:e6:15:8f:73:62:82:07:b5:7b:99:1f:
         69:bb:60:74:d2:76:d3:d3:ea:ed:fa:2b:c3:a4:e7:aa:59:ec:
         c0:7b:d6:2f:26:4e:96:9d:1c:e7:cb:6f:87:4a:e3:c7:d4:e8:
         31:6c:3a:30:a0:ac:73:7c:a8:e5:66:bf:ae:00:4a:f4:8a:8d:
         10:ee:db:87:9b:6e:af:97:a4:04:27:07:6e:88:67:b6:d7:95:
         62:d0:a4:85:d3:d9:2b:44:87:db:0a:e6:5b:a2:5f:3b:c8:cc:
         29:22:61:69:08:07:07:a6:6e:d4:60:c1:cf:23:0a:b1:c1:7e:
         24:39:4f:c0:a2:fa:2e:d0:68:10:61:72:f8:02:c6:b2:83:4d:
         78:15:8f:fa:ac:3d:7c:cb:e9:4e:54:ec:af:17:ad:cb:3b:31:
         03:c4:cc:46:74:46:1b:a6:5b:5c:ee:63:ce:cb:15:14:1f:38:
         b3:b7:65:92:e3:ea:7d:2b:e3:3f:32:fe:79:89:af:4d:d8:34:
         86:9d:7f:69:7d:89:81:a5:0b:56:10:07:4a:bb:cb:61:35:55:
         6e:11:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:30:16 2025 by rpki-client