Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
File:                     pHFXAbAK3kiVo5p2oNgQDsleq-M.mft (raw, json)
Hash identifier:          gCNmgi0pWn7NV4WNjrFn1hjoL0XLBP/1TWsfNIAD4wI=
Subject key identifier:   F9:06:19:86:17:B7:D8:DD:0B:E7:5C:47:88:F7:DF:3E:EF:C9:DE:04
Authority key identifier: A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
Certificate issuer:       /CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Certificate serial:       01968EB94590E541464A8B4C7893EFDD1298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
Manifest number:          016D
Signing time:             Fri 02 May 2025 02:00:28 +0000
Manifest this update:     Fri 02 May 2025 02:00:28 +0000
Manifest next update:     Sat 03 May 2025 02:00:28 +0000
Files and hashes:         1: pHFXAbAK3kiVo5p2oNgQDsleq-M.crl (hash: fXboQ1bAR904jePYjjkrifdjhMOnNKW/fi2mfbsfnv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:b9:45:90:e5:41:46:4a:8b:4c:78:93:ef:dd:12:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
        Validity
            Not Before: May  2 02:00:28 2025 GMT
            Not After : May  3 02:00:28 2025 GMT
        Subject: CN=f906198617b7d8dd0be75c4788f7df3eefc9de04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:92:91:4f:2d:b9:c5:24:cc:ab:ef:65:6a:
                    56:3f:f2:1d:c7:39:e4:ad:82:2d:3c:e4:32:51:ea:
                    ef:b9:47:69:4e:c7:f5:65:ab:41:16:61:68:fb:af:
                    d8:90:76:72:e2:b0:aa:07:7b:f2:5b:02:75:93:bd:
                    d3:e3:8b:d3:b1:98:9d:af:a9:39:17:2b:fa:0e:d3:
                    99:7d:48:37:c0:c1:0c:71:b2:33:68:d0:1d:a6:af:
                    b9:d0:c8:f5:60:ea:f3:af:4d:6f:50:6b:12:46:2f:
                    aa:de:eb:d6:d9:16:e1:40:05:e0:bb:b0:e7:7e:44:
                    f0:09:15:84:0e:ea:da:06:e2:8c:47:40:b7:ba:c8:
                    b3:b1:2a:14:24:ba:7d:16:04:99:5e:a2:b8:6e:fe:
                    e4:f5:d8:db:a1:3f:f0:d5:d2:61:e9:97:cf:08:d4:
                    93:e2:25:2e:96:4b:97:58:fb:8d:c1:ad:e2:88:36:
                    6f:29:99:20:43:9c:aa:8d:28:a1:f5:a4:98:57:d4:
                    49:c6:9f:c8:66:5b:4c:69:50:a1:cf:b2:6a:6f:62:
                    4b:6c:6f:b2:e5:93:b9:59:02:9b:4d:b8:ae:46:ed:
                    5a:2c:97:2e:42:2e:b1:84:2c:1c:b0:9b:c0:d8:ea:
                    e8:66:bc:6e:e8:22:9d:95:b6:96:ed:d5:ea:38:d3:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:19:86:17:B7:D8:DD:0B:E7:5C:47:88:F7:DF:3E:EF:C9:DE:04
            X509v3 Authority Key Identifier:
                keyid:A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:b8:e3:1a:ef:a0:05:ff:c1:85:0d:cc:8d:e4:16:26:46:1a:
         18:83:39:54:c8:da:f4:3b:48:42:1d:19:7d:09:04:2b:18:12:
         7b:db:ab:7a:3a:05:df:95:68:57:98:ab:99:68:7b:3a:b2:bb:
         fc:db:80:28:85:f9:1a:61:3e:48:fc:b6:4d:a0:01:7b:63:10:
         99:69:0f:f3:ea:3d:39:00:79:d5:92:70:af:a9:81:bc:21:bf:
         b9:7c:7b:49:1c:07:e6:da:5c:4c:ef:de:4a:a6:5d:cb:0c:e7:
         74:6a:9f:56:d6:49:75:27:d1:7a:ef:81:ba:20:0d:27:5c:5d:
         b8:b5:77:81:49:d0:52:eb:1c:5e:60:7f:b8:a9:53:97:c8:a8:
         4c:37:27:52:f5:e8:49:88:9f:f9:ed:48:1d:7f:90:78:67:21:
         e7:4e:8f:a2:84:65:af:ac:7a:bc:c7:57:a0:d5:29:4d:f5:e4:
         34:e3:08:2b:0f:2a:33:57:1e:9b:f2:37:a4:21:de:dc:95:f6:
         55:37:39:e0:50:14:63:34:f6:ed:cc:8f:69:d3:22:e8:cf:de:
         63:77:ce:d7:12:c0:75:0e:17:78:12:ac:f2:2c:07:c0:df:fd:
         b0:38:d1:6a:44:2d:fc:55:29:8c:af:ac:77:0c:86:21:f0:8f:
         90:d5:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:40:13 2025 by rpki-client