Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File:                     AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier:          Uioa8Ahplnjm3hbzH3G0nq/d1eGBkcHttPgcCCKzWAM=
Subject key identifier:   00:CB:6F:64:CE:12:7C:20:16:24:D6:CE:6C:CE:C8:2C:98:41:FF:09
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer:       /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial:       0196A31BBB66E3BFCC5F72FEB4C3260D6276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number:          1523
Signing time:             Tue 06 May 2025 01:00:25 +0000
Manifest this update:     Tue 06 May 2025 01:00:25 +0000
Manifest next update:     Wed 07 May 2025 01:00:25 +0000
Files and hashes:         1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: 4/DXgBaefzNIqujOboUDx3hQmSthh+LMVx9C//j3DWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:1b:bb:66:e3:bf:cc:5f:72:fe:b4:c3:26:0d:62:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
        Validity
            Not Before: May  6 01:00:25 2025 GMT
            Not After : May  7 01:00:25 2025 GMT
        Subject: CN=00cb6f64ce127c201624d6ce6ccec82c9841ff09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:ab:e2:fa:36:31:29:ef:1a:dd:9a:5b:eb:
                    94:ab:aa:5a:c0:50:97:e0:4d:d4:d0:8b:47:fa:2a:
                    fb:f6:81:90:c8:44:4c:5d:21:62:02:00:74:d3:d5:
                    05:5c:6e:b3:6f:0e:c5:7b:b3:06:02:ba:2a:97:a6:
                    eb:cb:5d:53:39:79:63:50:4d:74:83:f1:c9:12:1f:
                    5e:ca:7b:9f:cb:9a:a5:d6:6b:b7:52:65:9f:1e:2c:
                    f5:08:09:3f:0f:13:74:a9:49:7b:63:c7:ea:0c:48:
                    94:2f:54:8c:ff:69:47:a4:37:59:6e:26:81:66:ae:
                    14:59:79:df:99:09:1b:4a:54:bb:b5:9b:26:af:67:
                    ff:10:50:c6:f8:b5:50:37:00:dd:f5:10:8a:ba:b6:
                    47:2e:2b:74:61:df:d8:09:fe:1c:a3:9e:07:ba:96:
                    8a:21:9e:ab:80:3f:72:73:82:f6:4b:8b:3e:cc:4d:
                    ac:92:11:b8:cd:b2:47:a3:3e:9e:ff:1b:4b:bf:be:
                    ea:47:e4:32:93:00:98:1e:a0:32:fe:ad:d5:6f:62:
                    3b:ed:45:2d:06:58:17:03:62:d3:79:dd:db:f0:9a:
                    6d:24:ba:24:87:96:7b:ba:20:81:65:83:c7:44:6c:
                    87:d6:5b:be:fd:61:a9:c8:95:75:39:40:4f:8f:19:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CB:6F:64:CE:12:7C:20:16:24:D6:CE:6C:CE:C8:2C:98:41:FF:09
            X509v3 Authority Key Identifier:
                keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:b6:8b:a2:fb:03:f8:9c:44:94:93:c6:ff:7c:58:ac:f5:
         f1:ec:9f:2c:2c:ba:d4:f5:03:c8:da:ea:65:31:a0:bf:5b:05:
         8b:3b:78:87:cd:98:01:90:10:22:ce:67:be:6f:90:c3:f7:34:
         fa:07:29:9a:4d:21:98:84:0e:3e:3c:9b:e0:c7:6d:c2:bd:ad:
         27:91:e7:a4:e8:a8:82:37:e2:5c:83:b6:97:b8:1d:cc:93:5d:
         6f:f3:ef:29:34:01:53:2f:55:a1:54:4e:8b:46:1a:4b:3e:46:
         81:97:bf:40:4d:b2:c2:31:64:37:6d:18:f0:46:e7:db:85:ee:
         2f:99:6d:64:80:4a:c3:f6:47:2b:81:6d:e8:9d:02:9c:91:54:
         80:15:45:c2:64:b5:2a:f8:24:89:a0:c4:ce:96:d1:5c:47:a2:
         19:98:03:aa:fc:76:45:db:e8:60:23:e8:28:5a:20:7c:68:ea:
         a6:66:be:74:10:81:46:0f:93:4d:fc:73:fe:5f:b2:be:29:63:
         40:a4:f6:ac:7b:7c:bd:bd:4b:dd:66:63:de:de:fe:32:00:34:
         1b:40:d6:83:67:59:41:7c:4f:0d:de:ca:62:59:85:9b:70:a2:
         00:18:f3:35:36:46:2a:40:ef:4a:29:e0:d2:f3:90:51:2b:6c:
         a3:6c:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:30:43 2025 by rpki-client