Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File:                     AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier:          QkbA3oJnpMizuoFrEAIMHJPttvBcMYz0Yz5LahYqPA4=
Subject key identifier:   81:69:0D:C8:80:8D:77:69:21:DE:A3:7B:8D:E3:70:E0:39:19:74:E2
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer:       /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial:       019677FB1EAE2DDC52DF9F7BB43AB9C8A7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number:          150A
Signing time:             Sun 27 Apr 2025 16:01:08 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:08 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:08 +0000
Files and hashes:         1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: rO5vg50wubZGrW0yYFIpb1n5/ZVAF+FCbbFZvfprL7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:1e:ae:2d:dc:52:df:9f:7b:b4:3a:b9:c8:a7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
        Validity
            Not Before: Apr 27 16:01:08 2025 GMT
            Not After : Apr 28 16:01:08 2025 GMT
        Subject: CN=81690dc8808d776921dea37b8de370e0391974e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:a3:9a:42:ec:05:90:19:52:8a:d2:27:c8:
                    1f:dd:d3:97:a1:1b:89:64:37:92:23:45:a7:70:d5:
                    ea:69:fb:b8:12:72:33:a4:28:69:4e:d0:84:4a:37:
                    22:00:02:a7:4b:c9:f8:76:1e:1d:ba:98:60:cc:01:
                    0e:95:2a:e1:d4:00:b4:19:1c:be:de:76:c6:8c:43:
                    f5:47:81:41:45:53:90:31:11:81:b6:df:86:51:ab:
                    71:29:42:9d:97:66:e5:b3:cb:68:94:65:ed:89:7c:
                    c4:59:de:1a:8a:af:17:d8:7e:d8:fb:f7:72:b5:e4:
                    9f:98:e3:77:0a:a4:b9:38:fc:d4:55:48:b5:0e:97:
                    5f:cd:8f:97:d1:d9:59:96:72:0c:ec:a0:e1:b1:d4:
                    f7:ad:cb:7d:18:ed:b7:99:bf:6e:6b:06:21:8b:02:
                    12:45:29:00:d8:fd:07:a6:d5:d9:56:eb:2a:2c:2f:
                    0d:d7:81:a2:c2:b1:95:a0:68:b6:02:0d:43:d1:56:
                    cc:6a:cc:2b:6e:c6:4d:b3:a2:e4:89:aa:0a:47:82:
                    58:b9:70:40:aa:1c:7b:a2:9b:28:35:aa:6e:8c:c0:
                    59:ec:bc:8e:26:d3:56:12:65:dc:ec:d6:a8:6f:11:
                    76:cf:93:11:2e:a4:a4:71:10:b1:43:39:e2:29:1f:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:69:0D:C8:80:8D:77:69:21:DE:A3:7B:8D:E3:70:E0:39:19:74:E2
            X509v3 Authority Key Identifier:
                keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:26:b9:b0:c5:ae:1c:b9:9d:d6:06:4c:ce:3b:d0:08:46:1e:
         86:ba:e8:5c:f3:48:07:c1:ca:47:1d:bf:11:85:f0:24:ff:4c:
         26:5f:86:34:fd:62:88:3a:fd:b0:7d:72:43:40:7c:50:49:89:
         07:b0:f7:64:c3:c8:ec:99:4d:46:d5:5d:67:b6:91:02:b6:82:
         20:10:ee:d7:f4:be:19:24:e5:7d:9e:46:f5:a7:bc:f1:e2:c6:
         0f:41:a7:7d:cd:d0:e5:e1:92:60:f5:91:33:7c:e9:6a:b9:3c:
         41:18:72:ce:d1:8c:10:cb:db:24:b2:1e:27:79:28:10:b4:9c:
         a7:03:8f:6f:53:25:01:bb:4d:96:c3:c7:9f:3d:d1:1d:cd:a4:
         15:70:52:5f:ef:42:3a:d6:9d:06:07:bb:22:4f:4a:ff:c5:aa:
         fc:b8:77:e3:00:a5:d9:50:a4:46:dc:26:06:69:ac:e6:09:45:
         af:22:1f:ba:86:d7:96:a9:37:d5:51:ed:ad:56:45:2a:52:b1:
         30:3d:c6:3b:a1:be:87:6c:12:e5:5b:aa:33:1a:eb:e3:e7:e2:
         58:30:e5:8d:aa:28:eb:06:8f:a3:4f:a6:20:c5:a2:fb:80:7b:
         54:61:c4:c1:d0:55:06:65:da:c6:6d:0b:bd:68:ba:a9:85:cd:
         60:ba:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:37:38 2025 by rpki-client