Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File:                     ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier:          pqMGH9NrBgwtmDSbwX6lSAvbkCxJ2RvEMjRKU4UUcAA=
Subject key identifier:   EE:AF:B3:BF:38:90:98:82:43:D0:C5:A5:A9:1A:18:9A:D7:D2:2C:BB
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer:       /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial:       0196DCD4B7AB1B0B03403C962A339E04A79B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number:          04B5
Signing time:             Sat 17 May 2025 06:00:50 +0000
Manifest this update:     Sat 17 May 2025 06:00:50 +0000
Manifest next update:     Sun 18 May 2025 06:00:50 +0000
Files and hashes:         1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: bzIaLacmFU/ZgWMMOGKQEYdW9CJvOlQrg5IvAeU27DA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dc:d4:b7:ab:1b:0b:03:40:3c:96:2a:33:9e:04:a7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
        Validity
            Not Before: May 17 06:00:50 2025 GMT
            Not After : May 18 06:00:50 2025 GMT
        Subject: CN=eeafb3bf3890988243d0c5a5a91a189ad7d22cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:87:5e:9f:8b:6b:60:2f:7d:88:2e:cd:df:
                    a4:45:b8:fd:2e:08:ee:c6:f5:fa:6e:5d:23:a5:a5:
                    50:b2:87:70:c7:d1:6c:31:b7:e7:6d:52:cb:58:9e:
                    ef:85:3c:d9:32:1e:82:19:45:5b:2a:8d:1e:21:4f:
                    a4:ca:33:af:a5:f7:49:70:cf:da:c0:61:04:c1:dc:
                    2e:11:4a:b8:5b:da:55:9f:17:6f:3a:91:c0:31:89:
                    d0:b0:f5:09:83:35:b6:8e:10:be:08:07:9b:e3:1c:
                    3b:e0:b1:ca:88:54:ad:59:13:98:87:6e:72:d7:7e:
                    0f:84:1a:5a:2e:0d:c0:d7:88:07:7d:62:16:b2:b0:
                    d8:4b:87:70:4c:fd:f3:b9:20:f0:ac:09:da:bf:bc:
                    a1:39:b8:9b:aa:cf:b2:29:10:15:47:b6:98:d5:3c:
                    7f:e5:65:d6:13:72:29:3a:fe:88:c1:21:58:13:c5:
                    ab:22:d5:59:14:5e:75:f0:cf:ba:02:be:7c:69:88:
                    41:98:4c:c5:ad:8b:38:50:d7:9c:6e:8c:76:3c:f8:
                    c0:cc:9b:44:a7:ab:fa:04:65:06:cd:da:da:74:6e:
                    d8:02:54:db:f8:c0:ba:55:24:7e:30:16:e4:ab:d9:
                    f3:fc:9f:18:ee:35:67:54:10:ac:72:95:7e:e0:7d:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AF:B3:BF:38:90:98:82:43:D0:C5:A5:A9:1A:18:9A:D7:D2:2C:BB
            X509v3 Authority Key Identifier:
                keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:10:a2:2b:d6:47:f4:2d:57:22:95:f5:9d:b1:21:78:e2:7d:
         ae:70:93:1d:cd:45:47:fb:80:7b:b5:8a:84:87:a3:58:70:19:
         d7:8c:93:8c:0a:87:a8:23:3b:a6:e3:b2:9c:e7:57:87:7d:3c:
         43:18:39:bc:f2:a4:49:03:f3:fe:2c:b8:22:77:90:ef:58:18:
         30:b7:77:cb:10:6e:0a:58:60:5b:f9:63:16:d2:57:7f:7c:0a:
         21:3e:c5:57:99:ee:e7:47:06:09:e9:72:f1:35:31:27:ad:15:
         01:1d:92:6e:1c:6f:36:7f:48:72:49:32:a4:79:45:21:fe:cb:
         68:da:99:ae:1b:de:3d:f8:5c:af:4e:74:aa:b3:b7:0b:17:3e:
         1f:ab:2a:0d:14:17:5f:fc:4c:a7:95:f2:e9:09:43:87:c5:66:
         30:8c:87:dc:e3:1f:b4:ec:2c:15:78:d6:5a:1e:43:f7:bd:d7:
         ec:c5:bc:bd:dc:be:69:1d:ae:ca:9e:1c:3b:7f:9b:f6:d5:90:
         d6:b9:ce:01:ce:ab:3c:a0:39:5b:11:5d:f3:5a:de:87:e2:d7:
         7e:7c:35:6a:c5:1b:92:8a:a8:0d:ac:f7:fe:13:07:40:c6:e1:
         58:ae:74:95:8a:17:c3:8a:14:12:d3:99:5b:73:d4:e3:5a:00:
         05:47:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:19:27 2025 by rpki-client