Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
File:                     Ou5vE-TaDy5DIqGnWqfn189xekI.mft (raw, json)
Hash identifier:          GUws6HIitMt1GvlCEkyBYp3wCKCBfCntiJRa7tZcEWQ=
Subject key identifier:   72:C0:FC:9D:D7:EF:AC:91:58:23:09:FB:EA:D4:DD:34:43:C2:A1:EF
Authority key identifier: 3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
Certificate issuer:       /CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Certificate serial:       019698CEDEDD50F643A1581E90981BDF9319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
Manifest number:          151F
Signing time:             Sun 04 May 2025 01:00:16 +0000
Manifest this update:     Sun 04 May 2025 01:00:16 +0000
Manifest next update:     Mon 05 May 2025 01:00:16 +0000
Files and hashes:         1: Ou5vE-TaDy5DIqGnWqfn189xekI.crl (hash: tgIVeI1jHs0rKjX0kTSVb6wSNWmOwRJMi+45vW6azs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:98:ce:de:dd:50:f6:43:a1:58:1e:90:98:1b:df:93:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
        Validity
            Not Before: May  4 01:00:16 2025 GMT
            Not After : May  5 01:00:16 2025 GMT
        Subject: CN=72c0fc9dd7efac91582309fbead4dd3443c2a1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f5:1c:b9:63:ec:32:38:1c:b4:5f:7c:f6:16:
                    f0:0b:f5:15:ec:3b:7a:9b:83:a3:1a:df:46:9a:b4:
                    f7:b4:c8:e1:92:da:73:cc:94:1a:7b:f3:bb:db:c6:
                    11:2f:65:2a:05:41:29:f0:d7:91:bc:88:c7:76:26:
                    c8:c9:75:60:53:69:83:fb:e3:56:d3:29:4b:8b:de:
                    4f:74:d2:8c:0b:2e:07:5a:b7:26:f2:50:78:0e:28:
                    e8:94:93:8c:dc:79:b3:c9:e7:c1:e3:2b:f2:41:fc:
                    d5:73:b0:04:aa:bc:a7:28:59:f2:6b:d6:f4:66:37:
                    7b:ad:77:b0:a9:78:40:5b:64:2c:f2:8e:ae:2b:1e:
                    33:32:82:56:ca:38:ff:c6:8e:fe:82:b3:1e:8a:d1:
                    a8:b7:96:c6:04:e9:40:c0:e1:80:47:38:d2:a0:b4:
                    af:79:ea:e4:36:5b:e5:94:fe:77:d0:4d:76:a7:8b:
                    d3:a1:6f:bb:d6:74:82:a0:59:76:de:48:1a:32:5a:
                    34:21:d4:be:d7:47:5d:14:c7:18:da:5f:4f:50:af:
                    16:4b:0e:05:ec:8c:a2:9b:71:4b:dd:6e:e7:c7:4c:
                    68:d6:bf:4a:53:59:dd:e7:79:0e:f8:c9:85:d7:9c:
                    4f:25:72:e0:b1:27:68:79:54:36:d3:8c:3e:7e:85:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C0:FC:9D:D7:EF:AC:91:58:23:09:FB:EA:D4:DD:34:43:C2:A1:EF
            X509v3 Authority Key Identifier:
                keyid:3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f4:60:1f:0d:be:2e:0e:6c:c4:83:ed:70:39:93:59:b2:ae:
         61:21:57:4f:35:84:cc:82:32:ee:96:77:32:93:09:9c:fd:2a:
         77:c3:c7:28:17:54:30:29:1d:fd:dc:e9:d2:ce:58:b3:25:d8:
         8d:3b:d6:78:8b:4f:61:25:5a:cc:7d:9d:ae:e6:f7:ef:28:95:
         dc:ab:8b:60:16:13:7e:e6:b2:77:51:57:00:24:0a:d7:86:71:
         8e:2c:61:5c:a4:f1:ed:49:33:21:24:ea:6b:30:e3:1c:58:fa:
         33:0f:2f:d4:a2:c9:8f:53:98:a2:44:3e:14:86:ad:ff:f0:d7:
         0c:a8:27:dd:30:59:cb:09:8d:c0:75:5e:f2:6d:8d:ec:56:d1:
         0a:f1:26:1a:5d:50:62:c5:55:56:82:51:b7:4c:02:53:5c:15:
         51:e8:42:d1:de:61:0c:25:c9:95:e2:55:3b:29:ef:32:56:47:
         d2:71:ac:05:88:a7:dc:a6:0f:aa:68:55:20:a9:99:77:2d:4a:
         24:d5:4a:da:f9:71:da:1a:dc:9d:31:5a:f8:50:19:d7:39:47:
         46:25:b6:a3:7a:5a:67:c4:05:dc:7e:0e:64:3c:82:4a:14:2a:
         a9:c5:3c:e5:a4:2c:d0:15:ef:50:51:ad:1c:1c:42:aa:fc:92:
         54:a7:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:37:30 2025 by rpki-client