Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File:                     2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier:          yq/svZcIWqwXVEDEB1rR18kJGiHiGLcAiTVSgAVjrUc=
Subject key identifier:   98:70:EC:9F:F6:3A:EB:B9:A0:E7:4D:A9:3B:CE:CC:B7:8B:28:26:2E
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer:       /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial:       0196DB545F1E70ED437D364B8ECEC0DFA9B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number:          0D0D
Signing time:             Fri 16 May 2025 23:01:01 +0000
Manifest this update:     Fri 16 May 2025 23:01:01 +0000
Manifest next update:     Sat 17 May 2025 23:01:01 +0000
Files and hashes:         1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: 3PhpUb4oLVb3p0yiA+HdCYrHxRfcFbubvtAQvh8tWno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:54:5f:1e:70:ed:43:7d:36:4b:8e:ce:c0:df:a9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
        Validity
            Not Before: May 16 23:01:01 2025 GMT
            Not After : May 17 23:01:01 2025 GMT
        Subject: CN=9870ec9ff63aebb9a0e74da93bceccb78b28262e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:df:06:8f:86:54:ef:f2:f6:58:8d:08:e8:
                    fb:29:f0:7c:80:e0:48:cf:2e:55:d1:47:7c:7b:18:
                    2e:5a:da:3f:a2:58:46:89:09:ff:72:09:e6:db:31:
                    9f:88:5b:93:86:cd:9c:b0:dc:6a:98:36:11:ae:82:
                    d3:13:ee:4d:8c:bc:d6:2e:f3:2b:2b:08:23:ee:6d:
                    f0:91:c6:c8:19:d7:ce:f3:64:a8:c0:80:62:e6:62:
                    de:fd:18:17:15:5b:c9:40:96:06:83:9f:6a:7c:5d:
                    39:31:21:04:10:ac:bf:da:cb:c9:c4:a2:43:6a:68:
                    86:ab:2b:4d:c8:04:5d:da:0e:20:58:df:4f:63:0c:
                    ab:dd:31:63:f5:56:f8:1f:69:26:e5:95:2e:cd:23:
                    b6:32:30:6b:7a:a1:f9:53:6d:f4:f8:25:02:63:12:
                    8d:f6:b5:fb:d2:93:70:a2:1f:60:bb:6a:76:8c:be:
                    31:e2:ea:7b:e5:25:e4:dd:fe:1f:e6:ec:5e:70:1e:
                    10:54:c3:76:f0:74:d6:31:c8:1e:8b:e7:0f:6b:e6:
                    b3:da:07:a7:41:90:f3:10:a3:cd:c5:fb:53:54:e2:
                    4f:cc:0c:b5:ac:13:38:c0:28:6f:42:64:0e:29:2f:
                    4f:c5:34:21:9a:ae:84:ca:38:c6:9a:bf:de:a5:1d:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:EC:9F:F6:3A:EB:B9:A0:E7:4D:A9:3B:CE:CC:B7:8B:28:26:2E
            X509v3 Authority Key Identifier:
                keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:14:06:3f:2b:87:71:00:85:82:d1:d6:bf:58:71:bd:e8:80:
         90:9e:b8:3d:b3:1b:12:9c:88:a6:8d:68:58:61:50:aa:db:4b:
         69:db:8f:10:80:38:a7:2e:d0:af:04:93:06:a8:8e:ea:26:07:
         b1:45:3e:4f:f9:4b:1e:92:c1:f6:5c:48:0c:55:6d:e3:53:cb:
         2a:1f:ad:ee:04:de:17:65:c3:c9:bb:5f:b8:ad:48:40:0c:f5:
         b7:f3:2f:6c:3f:da:91:3f:bc:5f:03:04:cb:8d:1f:d0:6c:a5:
         97:87:72:95:ec:42:d7:43:d6:5d:42:ae:6a:47:64:52:65:ac:
         b5:41:5f:40:22:df:88:02:6a:d4:6a:0d:97:cc:92:c8:79:65:
         75:a7:4d:3d:21:4f:8c:4d:c2:a7:da:55:1e:f4:3f:16:89:d7:
         5d:4d:65:76:62:9a:0b:26:19:53:50:63:56:c5:f0:a4:99:69:
         3d:f7:79:6a:36:21:23:7f:c5:fe:df:85:20:cf:fe:8e:6c:bd:
         7a:7f:9f:4b:a4:b6:07:ec:3f:70:d0:ea:d1:b5:71:0e:cf:0c:
         dc:68:5b:c2:0c:05:62:05:88:44:87:1c:35:2d:09:85:a8:1d:
         12:a6:34:19:1f:e7:f0:27:06:10:6e:44:55:e2:ff:2e:7f:4c:
         e4:2f:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:37:55 2025 by rpki-client