Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File:                     mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier:          svlzC5QzSy/AhL/75Sqh0EMdr3ojgR4NvYSJdcj3feI=
Subject key identifier:   64:FD:41:E3:CA:4A:85:31:A0:F5:AE:81:9C:EE:2A:0B:B9:64:1E:78
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer:       /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial:       0196C3B934B47E702617B81296354602B465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number:          0C1C
Signing time:             Mon 12 May 2025 09:00:16 +0000
Manifest this update:     Mon 12 May 2025 09:00:16 +0000
Manifest next update:     Tue 13 May 2025 09:00:16 +0000
Files and hashes:         1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: qs1BUi59vpYNOL5anOu2Z2mPG52fne3QgwF1JMXjU6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:34:b4:7e:70:26:17:b8:12:96:35:46:02:b4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
        Validity
            Not Before: May 12 09:00:16 2025 GMT
            Not After : May 13 09:00:16 2025 GMT
        Subject: CN=64fd41e3ca4a8531a0f5ae819cee2a0bb9641e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:3a:a5:88:5e:f4:f3:3b:1f:f2:38:9e:b8:
                    de:de:59:26:02:52:df:8e:57:2c:a6:b0:6a:f0:7c:
                    f7:2c:75:b0:03:8a:c2:bd:21:38:5f:d0:03:f0:11:
                    cd:c5:1f:e1:64:99:c0:c0:ef:03:df:42:0c:67:86:
                    ca:bd:60:35:58:f3:b9:7c:97:c5:29:64:b3:3d:75:
                    d2:ad:6d:c9:29:00:3d:83:96:f1:7d:33:c4:81:ce:
                    71:96:2b:a0:ef:58:19:4f:8e:68:26:11:31:4c:30:
                    d1:4c:05:31:05:60:c5:16:38:fc:17:35:6a:f9:59:
                    3b:09:20:8e:37:d2:e2:5c:bb:12:b1:23:79:96:60:
                    34:c4:bf:ff:05:56:be:af:20:e6:e0:50:d8:c1:af:
                    8b:76:08:06:72:f2:6e:f8:54:fa:c2:78:d5:ae:f2:
                    7a:35:e5:d5:4c:77:96:67:3a:53:bb:c2:e4:5f:54:
                    09:ea:19:14:96:ba:38:4a:8f:4b:27:52:55:6c:af:
                    47:95:e6:f2:c8:7b:a2:90:77:d2:3e:b2:63:7e:7f:
                    85:b2:fb:cd:45:01:04:e0:a2:3e:d6:aa:fe:ba:3d:
                    73:cb:cd:d7:a4:87:c3:96:90:9e:73:da:3b:0b:2e:
                    cc:7c:6d:cf:80:47:c2:47:c2:df:1f:8d:c5:11:57:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FD:41:E3:CA:4A:85:31:A0:F5:AE:81:9C:EE:2A:0B:B9:64:1E:78
            X509v3 Authority Key Identifier:
                keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3e:36:15:09:8b:f7:31:55:83:93:59:46:3a:4f:63:35:a1:
         06:3f:dd:29:a1:d2:fe:1e:56:69:e0:57:df:11:e6:9f:e4:a5:
         e1:15:04:12:6e:48:02:5a:65:df:c8:83:ce:64:3d:11:08:22:
         ff:cf:eb:fa:91:68:18:2b:91:43:0f:0a:b1:a0:26:b8:12:39:
         0b:8a:3e:c1:52:00:65:55:6c:8b:60:b3:47:11:c7:39:ad:23:
         c8:e8:b8:ad:25:12:18:5a:cd:90:07:1c:79:ca:aa:b5:74:cb:
         9c:10:a5:b3:bf:fb:e3:05:48:22:86:8b:8c:6d:78:4e:e2:17:
         1b:0f:32:da:44:4e:c2:ca:52:11:04:7c:7f:4b:f5:df:46:ab:
         ef:be:04:c4:c3:b6:ae:c7:c9:11:0a:17:cd:01:ae:fc:02:78:
         7c:3e:d4:0e:d6:26:b7:b5:26:e4:8b:e1:95:68:43:2e:d9:d6:
         01:1b:dc:02:7f:7b:81:e3:e8:e5:b9:0a:1b:e6:5f:42:50:82:
         38:e1:d1:29:20:55:1d:cb:1e:ad:19:7a:bd:c6:df:1d:5f:42:
         3d:5d:18:ff:11:cf:cb:21:ff:0a:91:e8:22:12:87:ca:e6:52:
         91:ee:24:db:dd:2b:63:88:30:fb:91:fe:da:1f:08:71:e2:ca:
         7a:01:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:59:44 2025 by rpki-client