Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File:                     _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier:          g6Y4oO1ztsMc4RwqTPm550PXs6DiYMrOoPQfT717eDw=
Subject key identifier:   96:83:2F:66:DD:AA:22:33:54:77:36:B1:90:B4:25:6D:07:AF:3A:65
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer:       /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial:       01968058F4E42AE72F8D258FE83B4F70F48F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number:          118E
Signing time:             Tue 29 Apr 2025 07:00:35 +0000
Manifest this update:     Tue 29 Apr 2025 07:00:35 +0000
Manifest next update:     Wed 30 Apr 2025 07:00:35 +0000
Files and hashes:         1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: KQlNdyo0MhlrEEqoD2vzm5PFbxVpdDLjJi86YCAl9I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:58:f4:e4:2a:e7:2f:8d:25:8f:e8:3b:4f:70:f4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
        Validity
            Not Before: Apr 29 07:00:35 2025 GMT
            Not After : Apr 30 07:00:35 2025 GMT
        Subject: CN=96832f66ddaa2233547736b190b4256d07af3a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:81:06:81:4d:fd:ed:36:4c:0a:84:eb:fc:
                    a7:cc:dc:d8:ad:43:ec:14:d8:57:7d:7b:82:f5:4c:
                    55:6b:cb:9d:63:0a:c6:f6:dc:78:91:f3:7e:c4:7d:
                    b2:ae:38:28:fc:45:ee:17:3d:ce:32:09:7b:da:dc:
                    2d:a5:97:1d:5d:26:d2:77:10:52:81:22:60:7f:52:
                    fb:6a:bb:3c:f1:7f:3d:d9:71:ea:68:64:63:88:c0:
                    72:a6:ab:38:7b:12:b9:4d:cd:15:6c:d8:ec:59:61:
                    b5:df:db:2d:49:3d:c4:4e:5e:00:e6:ed:a1:30:d8:
                    27:f4:d6:1a:ed:9a:7b:f4:71:7f:80:60:fd:b2:b1:
                    2c:94:0b:68:a5:51:be:b2:34:ce:c6:3a:9b:60:7c:
                    e5:78:a4:48:17:de:e6:a0:98:e9:12:4c:86:d4:5a:
                    4b:e1:3c:a1:88:e3:45:48:cf:20:2e:81:c3:6b:f3:
                    5e:c5:13:aa:0c:2c:dd:92:a4:e3:34:6e:0c:a0:3c:
                    bc:8d:6c:0b:94:4f:a7:d8:e8:9d:51:f5:ac:73:04:
                    08:eb:28:04:02:04:a4:2e:23:87:b8:a4:14:f8:70:
                    b8:b2:63:af:56:65:b7:9d:70:2a:d0:95:32:de:bc:
                    99:88:20:6b:89:3e:19:42:06:4c:6a:4b:9c:aa:c3:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:2F:66:DD:AA:22:33:54:77:36:B1:90:B4:25:6D:07:AF:3A:65
            X509v3 Authority Key Identifier:
                keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:72:91:52:c9:41:cd:b3:be:e0:43:3c:4f:fd:12:65:ca:59:
         da:af:2a:35:8f:18:35:95:bb:45:46:2d:a6:06:18:c8:b0:0d:
         2f:4f:cb:e3:81:79:09:f1:25:24:90:20:ae:9a:f4:f6:3d:e9:
         3d:c4:ce:f5:3e:53:fb:b4:a2:39:c5:48:7b:94:a9:f9:60:a8:
         6d:43:a4:52:6d:42:78:9d:b4:75:99:3e:5f:ea:68:d2:9d:15:
         dc:b0:c8:d0:59:24:3c:ac:c7:79:bf:47:d2:ba:5a:1d:ef:81:
         db:a0:15:27:16:8a:2c:59:d6:51:18:8d:e1:79:bc:9f:51:c4:
         5d:ee:9e:cf:4f:90:8f:ff:93:ff:c2:69:73:db:95:41:c7:30:
         9a:36:01:aa:29:32:5a:ae:6f:01:2d:73:6e:3a:4f:5c:3e:76:
         6c:ab:5b:f1:8d:11:15:f5:34:94:3c:9d:a8:e9:49:67:72:1e:
         cd:19:11:1b:01:ec:4d:76:25:4c:f9:99:38:44:84:b3:f2:8a:
         0d:99:ce:14:bd:7e:34:48:bf:cc:70:b4:0b:64:f0:84:81:1b:
         7a:05:e2:17:5a:1e:54:cb:bc:fd:90:43:53:d4:63:c8:9d:df:
         9d:21:c9:0f:66:1c:89:1d:f8:3e:55:e8:38:f8:90:b8:4c:84:
         f9:94:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:56:10 2025 by rpki-client