Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
File:                     b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft (raw, json)
Hash identifier:          MeJPPRl8GFaJfYEwj4ijZGkJ62S+6PwOnQ9WulhwJS4=
Subject key identifier:   98:EF:B2:94:35:2E:2B:F3:B8:8E:A2:32:82:15:4E:E6:8F:CE:AC:E3
Authority key identifier: 6F:9C:98:94:B1:13:E7:D5:A3:F0:B2:BC:39:D6:36:05:B8:BC:AC:D3
Certificate issuer:       /CN=6f9c9894b113e7d5a3f0b2bc39d63605b8bcacd3
Certificate serial:       0196BA48987ABAA6B8703EDE40EDC7FD64DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
Manifest number:          122F
Signing time:             Sat 10 May 2025 13:00:41 +0000
Manifest this update:     Sat 10 May 2025 13:00:41 +0000
Manifest next update:     Sun 11 May 2025 13:00:41 +0000
Files and hashes:         1: b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl (hash: Jkd2HhJdR/4b+YyQuBIQIsmBfkovlmjCyqZ83eUNaBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:98:7a:ba:a6:b8:70:3e:de:40:ed:c7:fd:64:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9c9894b113e7d5a3f0b2bc39d63605b8bcacd3
        Validity
            Not Before: May 10 13:00:41 2025 GMT
            Not After : May 11 13:00:41 2025 GMT
        Subject: CN=98efb294352e2bf3b88ea23282154ee68fceace3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:0b:1a:e5:ae:b8:55:53:61:8e:22:52:6e:
                    e2:ef:50:e3:ed:ac:9f:2a:b7:5b:25:aa:f2:c6:55:
                    2f:41:f6:ac:a7:f0:90:e3:06:94:83:fe:ce:9c:61:
                    92:1d:6b:af:be:86:15:6c:2b:89:4e:0c:0e:5d:18:
                    e7:1b:d6:f1:4f:b7:ff:d3:fe:c5:a5:b5:88:e9:1c:
                    e9:86:26:6f:60:2e:67:b3:cb:ec:f2:02:b5:c3:73:
                    7b:dc:5c:95:09:03:25:dd:a8:50:f7:0a:12:c5:8d:
                    b8:3c:6d:50:1f:e5:6d:15:7f:1d:bd:4d:6e:3a:5d:
                    66:a2:ea:74:3d:ce:a1:4e:74:c7:f9:64:ba:cd:f3:
                    ae:2f:2a:f4:d2:78:41:e8:28:b8:8c:20:db:79:d5:
                    9c:94:71:5d:66:ab:88:a1:05:14:d8:3e:53:a0:d9:
                    0c:36:d4:36:26:39:53:fc:d3:47:b7:93:fd:a5:7a:
                    18:ef:d9:8d:6e:99:5c:04:02:73:9c:f0:a7:42:74:
                    57:f3:99:9f:55:0d:a1:98:95:26:66:38:5e:78:2d:
                    91:e7:03:5f:9a:ad:df:14:1d:95:73:6e:ae:0a:5b:
                    6a:ed:2f:37:ca:f8:45:b3:2e:dd:e9:8b:41:e7:a0:
                    c8:5f:32:04:fa:3e:e7:79:57:e2:9a:fb:fe:bb:ce:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EF:B2:94:35:2E:2B:F3:B8:8E:A2:32:82:15:4E:E6:8F:CE:AC:E3
            X509v3 Authority Key Identifier:
                keyid:6F:9C:98:94:B1:13:E7:D5:A3:F0:B2:BC:39:D6:36:05:B8:BC:AC:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:44:8b:cf:2b:d9:a4:a3:bf:a2:99:5e:93:cb:b6:71:e3:
         89:db:4e:da:0d:c2:b8:d9:33:ab:6c:c1:8a:ed:0d:b1:28:e8:
         5e:b2:ad:3b:1f:82:9c:81:4d:2d:87:a6:6f:95:00:3c:7d:fb:
         99:af:73:e5:be:20:1c:04:76:c5:0e:22:f9:e5:b5:96:42:79:
         11:d8:05:82:41:97:23:a5:54:78:b9:18:67:45:1e:f7:ea:38:
         6e:8c:dc:26:65:cd:2e:95:c4:05:a1:59:91:0c:4c:8e:a6:a4:
         8b:6d:4a:11:9f:54:d1:36:67:fb:8e:6c:ca:23:f4:0c:bb:2f:
         4d:d5:33:15:4b:98:83:5f:57:a2:8e:97:48:d6:8b:98:5c:b3:
         c1:4a:cb:a2:f4:b9:9b:bb:e9:46:99:f2:88:49:b8:f0:98:cc:
         97:aa:3b:93:56:15:fa:3f:80:30:09:ba:8d:b8:93:63:70:c2:
         27:ad:a7:26:4a:86:de:ce:92:18:48:40:62:85:6b:5f:c6:6a:
         56:d7:7a:b4:5d:04:e8:02:96:03:e2:4d:04:19:1c:be:cb:d2:
         cc:76:81:db:44:3b:57:9f:96:63:25:37:b0:ea:26:97:b2:c6:
         da:1d:9b:62:f5:76:ae:5b:9b:1b:e6:da:ec:e4:b9:70:98:d7:
         ed:b8:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:12:28 2025 by rpki-client