Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File:                     hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier:          tfZHKuuGLRvxGlDqzNfOeSZEzfuuWFJWwW4KeitQ0OE=
Subject key identifier:   75:35:74:42:31:6A:0D:55:50:02:39:99:C1:95:29:41:4F:2D:61:F3
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer:       /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial:       0196760C1B38CEB758CCF9987294CB0F8473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number:          150B
Signing time:             Sun 27 Apr 2025 07:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:26 +0000
Files and hashes:         1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: BVo/0dXWY3IiNmdWdr170FrhmnGYLzV3LcozQWiVsPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:1b:38:ce:b7:58:cc:f9:98:72:94:cb:0f:84:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
        Validity
            Not Before: Apr 27 07:00:26 2025 GMT
            Not After : Apr 28 07:00:26 2025 GMT
        Subject: CN=75357442316a0d5550023999c19529414f2d61f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:82:41:64:61:13:d3:53:40:b0:66:cf:43:
                    22:c3:f1:83:d5:3c:c3:f2:37:61:2d:38:9d:f2:85:
                    7b:a2:2b:89:25:97:64:22:c5:3c:54:1a:f9:cd:77:
                    2a:6e:e2:d8:37:44:ae:e3:13:c9:29:cc:a1:e9:99:
                    e2:02:68:02:e8:f9:dc:b0:64:7d:4b:d8:1b:18:a7:
                    79:ce:d7:eb:dc:59:1b:b6:01:bb:5a:ea:ba:25:31:
                    13:fd:fc:a5:d6:78:f5:c0:8b:ab:93:c0:c6:63:d4:
                    8d:cd:cc:f9:38:f7:a6:61:de:de:3c:a5:4e:77:7a:
                    ef:98:77:ac:00:22:12:8a:86:22:8e:5f:9a:d5:e9:
                    c8:29:0e:7f:07:8d:2c:51:4e:7b:36:14:af:82:d4:
                    e5:7e:f8:61:56:c6:24:71:c4:33:83:53:f4:4f:92:
                    86:51:ac:53:93:5e:5b:f9:61:31:4b:29:a6:70:1e:
                    59:52:af:2b:c4:3f:7f:23:07:ec:21:a1:d0:9f:32:
                    f4:88:29:a0:5a:f4:2c:88:c6:f6:b4:58:83:42:89:
                    71:8c:36:95:10:d5:34:16:39:d7:93:a0:f1:f7:75:
                    25:c4:23:83:80:48:ca:76:ed:50:df:55:c0:0e:22:
                    11:90:37:b7:a2:4d:a9:c7:00:bd:c3:49:cd:b3:01:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:74:42:31:6A:0D:55:50:02:39:99:C1:95:29:41:4F:2D:61:F3
            X509v3 Authority Key Identifier:
                keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:18:dc:fe:74:75:62:13:7b:60:e0:1c:bd:e9:d3:c1:74:
         1e:7f:ac:4b:94:a7:d4:55:19:fe:1a:cf:e7:1e:eb:f7:68:a8:
         ea:53:05:2f:03:95:31:10:f1:3e:36:fd:01:15:78:71:e4:76:
         de:c7:4b:5c:94:25:05:46:26:79:aa:55:e5:43:cc:e7:e8:36:
         50:fd:6c:b2:1d:48:78:fb:1e:a2:f6:4f:08:57:73:6a:0d:e9:
         58:c6:dc:08:11:78:80:db:bc:76:48:74:56:74:ee:df:d8:f8:
         40:86:07:0a:01:c1:d0:37:c1:51:05:b9:95:94:ad:ee:8c:e1:
         cd:6f:4b:a3:04:b1:94:6d:76:c9:a7:c0:b5:e4:2b:8b:75:b6:
         a2:11:65:2d:5f:19:7e:72:bf:94:7b:78:37:bd:99:6c:8d:4d:
         59:8e:0c:db:12:46:8a:e1:10:dd:22:f0:17:f8:1e:03:b8:20:
         f7:57:f1:ed:a2:cd:8f:cc:48:12:7d:ff:59:f4:d9:aa:c6:d7:
         d7:a9:8a:f0:61:3a:a0:08:71:95:0d:da:40:14:c3:5c:41:83:
         9b:a8:82:a0:ab:5e:c7:7e:78:ed:23:d5:6a:c1:db:e1:a0:2f:
         13:cd:fe:72:9a:8b:35:4d:23:e1:e3:c3:6c:d6:4d:ce:5d:40:
         f4:7a:15:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:38 2025 by rpki-client