Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          HvkPDQ6VIHpvfk57/UOFBGnWTqFvcH5TVYzBfc51mwk=
Subject key identifier:   21:0E:53:A6:DB:4C:66:97:1F:CA:E7:B7:44:3E:04:AD:C1:0B:56:20
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       0196A8E72299C2E677EFC161EF328A7E4ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          1056
Signing time:             Wed 07 May 2025 04:00:41 +0000
Manifest this update:     Wed 07 May 2025 04:00:41 +0000
Manifest next update:     Thu 08 May 2025 04:00:41 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: bjPfDdnwVogTOXQxX1B5zffc7rl4WzCSdOPophG/t28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:e7:22:99:c2:e6:77:ef:c1:61:ef:32:8a:7e:4a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: May  7 04:00:41 2025 GMT
            Not After : May  8 04:00:41 2025 GMT
        Subject: CN=210e53a6db4c66971fcae7b7443e04adc10b5620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:08:57:93:42:c9:c1:61:e3:c2:64:d6:2f:
                    d2:42:c3:b8:08:9c:18:72:2c:9e:ea:45:e9:8c:e0:
                    a6:02:70:1b:44:da:de:ae:4d:5f:9c:51:5b:09:68:
                    6b:f9:28:35:d3:a8:10:ad:f6:03:53:e2:b9:4c:be:
                    0d:31:9a:38:8e:77:4d:2f:0b:68:27:7d:72:b3:c0:
                    37:e5:ad:b3:51:54:17:60:95:21:38:ed:6a:77:ab:
                    e6:d9:bf:db:3e:d4:46:23:90:57:8c:f4:43:b7:43:
                    15:22:1b:82:48:e4:0f:56:3c:5b:2e:d1:34:c1:0e:
                    4c:02:b8:d7:16:fa:55:2c:d3:a6:48:be:5e:45:39:
                    db:89:94:cd:d0:51:25:04:5e:95:32:64:7a:7d:a5:
                    59:da:7b:ee:6a:70:e5:48:71:4a:47:61:e9:2e:da:
                    ce:29:6a:9d:3f:e6:5d:02:cf:fe:a8:74:e8:b5:63:
                    71:70:63:b5:67:9a:11:a0:ce:f7:79:b1:e8:b0:fe:
                    dd:3a:d8:c1:e9:c1:70:00:6d:90:6e:9d:cc:ca:66:
                    83:14:d4:07:55:79:69:95:6d:12:be:96:7e:42:63:
                    6d:12:c0:25:97:5a:cd:44:0a:3f:1a:5b:bc:86:8a:
                    81:f2:a1:db:b2:bd:a4:47:80:62:1d:78:05:a7:d4:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0E:53:A6:DB:4C:66:97:1F:CA:E7:B7:44:3E:04:AD:C1:0B:56:20
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:1a:43:a5:ee:bc:7b:60:9e:a8:c0:97:de:94:c3:a9:10:ac:
         65:51:ba:b0:99:66:40:1e:3d:9d:2b:5a:1d:13:e3:26:a6:06:
         f8:a5:89:e6:04:d5:dd:5b:09:1b:c5:91:0c:22:3c:c4:7a:35:
         18:2e:eb:1a:03:4e:1f:55:62:9b:d7:f8:1d:72:17:d6:96:6f:
         e8:2c:4b:25:d5:1b:9a:e8:d8:cf:31:f8:b6:10:97:36:75:88:
         18:f1:12:25:d7:df:7e:4c:53:a8:12:6c:7f:c4:08:28:3e:db:
         99:e5:e7:e3:82:c1:6d:1f:0b:cd:00:71:c1:44:99:e5:40:98:
         c7:88:d4:0a:5b:ff:8e:b6:12:39:ce:0e:57:8e:a0:18:e8:77:
         64:f1:b4:30:ee:ce:bf:47:8d:9a:ca:32:10:76:7e:4f:d9:75:
         6c:b5:65:fe:7a:83:05:e9:9e:dd:bc:75:59:e2:46:70:86:ce:
         b7:96:0d:cd:f1:d0:e9:60:8f:0f:a5:79:43:3f:b8:09:87:1f:
         ac:f4:b0:bf:82:47:dd:45:c9:7e:6a:a0:19:c7:b9:96:48:a5:
         14:f9:4d:a5:fd:61:bc:68:be:51:a4:6f:be:64:32:9c:7e:9f:
         b5:41:66:49:50:bc:06:4c:97:7b:05:2b:3a:48:b2:1c:40:78:
         21:90:b3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:16:41 2025 by rpki-client