Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File:                     l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier:          E+VF6fSnmFOFl+lOyVLPwo76hmY/hwqx0O6D3xkZUyk=
Subject key identifier:   56:EB:8F:B6:99:05:59:48:B6:84:46:B4:DF:94:C1:35:D7:D9:49:0D
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer:       /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial:       019677C3E611842B08FCE9DD17E7DC226F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number:          023F
Signing time:             Sun 27 Apr 2025 15:00:49 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:49 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:49 +0000
Files and hashes:         1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: v78JAxj78R7V1FAWotLxs3DroYeHmOjPJ/UPGQ5Isjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:e6:11:84:2b:08:fc:e9:dd:17:e7:dc:22:6f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
        Validity
            Not Before: Apr 27 15:00:49 2025 GMT
            Not After : Apr 28 15:00:49 2025 GMT
        Subject: CN=56eb8fb699055948b68446b4df94c135d7d9490d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:92:27:17:3c:e7:11:6e:51:f2:bc:fa:8e:
                    f6:8c:54:23:dc:a5:9d:28:e3:9a:eb:49:5d:17:3d:
                    b3:75:06:25:ef:9e:b1:ab:f9:bb:2e:24:28:79:59:
                    7a:8b:42:c8:7d:2b:25:5b:26:79:bc:96:10:a0:2d:
                    39:92:10:f6:0e:ff:4e:83:8f:f3:91:3d:14:b0:4a:
                    ae:c2:24:2c:8e:a1:e1:7f:20:04:26:f8:d2:dd:cc:
                    3e:88:0b:2b:d7:d8:f7:9f:a3:41:e5:9f:8b:5f:86:
                    5f:6f:ff:c0:23:52:0a:ba:5a:c9:82:b8:b5:3f:1c:
                    d8:c8:d6:12:a2:18:c6:e9:b5:0b:43:53:53:d7:03:
                    a3:b4:45:fe:a8:08:8e:ae:3d:65:25:bf:24:62:cc:
                    32:1f:e0:7a:29:de:70:99:82:a4:5e:20:2e:b5:d9:
                    05:3b:a9:79:58:9f:fa:c0:04:d9:29:1b:1f:06:3f:
                    13:c2:bf:5f:cc:fc:16:4b:7f:84:eb:13:e3:2d:26:
                    ab:81:df:04:1d:c0:36:93:c6:cd:77:dd:42:12:58:
                    1e:e0:3a:55:a6:04:03:56:d5:e9:45:1a:cb:07:e9:
                    66:4f:62:11:cb:27:a5:d4:ed:10:07:e4:72:e3:27:
                    ed:b5:4b:73:33:8e:0d:c6:0a:2e:4a:21:af:46:de:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EB:8F:B6:99:05:59:48:B6:84:46:B4:DF:94:C1:35:D7:D9:49:0D
            X509v3 Authority Key Identifier:
                keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:82:57:9b:7e:93:22:7a:ac:5d:ad:5f:d3:bc:83:4c:c2:63:
         7a:ca:28:78:3d:75:5d:66:49:bd:79:77:c2:3f:44:ec:02:d7:
         76:ce:1d:49:94:fe:a9:f4:bb:2f:32:94:cd:d6:65:5d:34:07:
         05:50:43:e0:e9:b1:29:9b:34:47:2a:c6:9b:90:e4:52:bb:26:
         5c:84:bd:16:9a:ae:0d:77:1f:ef:9f:bd:5c:d9:93:26:3c:8d:
         84:7d:1d:48:63:1f:b1:a8:fd:8a:f2:37:be:ca:79:ca:85:7b:
         c7:3a:ce:26:4d:66:24:59:32:11:54:f7:a6:6f:ef:86:6c:19:
         6a:1f:aa:e5:9f:d4:c6:1d:d5:2d:a9:4f:f7:2d:bb:72:1a:64:
         f3:4f:0c:20:dd:60:c9:3c:ff:91:db:74:58:fc:2d:61:a1:a8:
         c2:54:f8:40:04:15:d8:50:02:e1:9d:70:10:90:6d:85:4e:83:
         18:88:bd:c5:73:19:6e:e2:f5:12:96:8c:9f:9a:37:a5:ac:b8:
         27:fa:fc:29:f6:ad:36:83:e2:8e:7c:a8:90:7e:ea:56:0d:16:
         94:7c:4e:7f:84:e1:b6:8e:41:e5:be:8d:14:d2:77:d0:bb:2b:
         ef:b3:19:60:9c:49:36:19:94:b9:83:c4:74:53:f9:29:3f:d7:
         d0:34:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:27:03 2025 by rpki-client