Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
File:                     sTSesOfbZTbKeYKWH_rJsykWXF8.mft (raw, json)
Hash identifier:          NPO5JSmE7xZJ8EDNr56U5BOLzah/BejvnL1QdglbTwA=
Subject key identifier:   E5:B3:FC:33:22:2A:BE:46:C1:44:08:70:5F:A2:AA:89:26:3F:97:76
Authority key identifier: B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
Certificate issuer:       /CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Certificate serial:       0196797B6C98C535193A6DA4E6F63D8C4FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
Manifest number:          01C5
Signing time:             Sun 27 Apr 2025 23:00:53 +0000
Manifest this update:     Sun 27 Apr 2025 23:00:53 +0000
Manifest next update:     Mon 28 Apr 2025 23:00:53 +0000
Files and hashes:         1: sTSesOfbZTbKeYKWH_rJsykWXF8.crl (hash: aoP4Hxca2D9N4+xbP8FgcN+r9FnI+SQtiKTc5yiQE/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:7b:6c:98:c5:35:19:3a:6d:a4:e6:f6:3d:8c:4f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
        Validity
            Not Before: Apr 27 23:00:53 2025 GMT
            Not After : Apr 28 23:00:53 2025 GMT
        Subject: CN=e5b3fc33222abe46c14408705fa2aa89263f9776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:b5:0a:55:40:a4:00:17:73:08:ab:9d:c9:
                    7b:01:4d:9e:36:6a:ac:56:9d:e9:e3:24:ce:18:f5:
                    ac:31:c2:fb:43:b4:9d:a1:8b:af:ba:23:4d:f2:bb:
                    43:6d:1c:e6:bb:fe:be:aa:66:84:cb:d8:e9:32:9e:
                    e1:63:44:95:0a:fb:4a:4b:c1:db:05:3f:92:e7:e7:
                    6f:2f:df:15:94:96:40:60:c9:89:ec:a6:44:0b:d0:
                    bf:12:e0:f7:04:47:de:06:7d:bd:2d:e0:5f:c9:65:
                    54:04:14:ee:f7:a8:35:f9:ff:fa:e2:e1:ea:c7:23:
                    3b:fa:44:db:b3:28:16:e5:df:3f:b7:dd:89:6c:4d:
                    93:b1:ac:3d:e8:37:51:72:55:64:96:ce:8c:b9:09:
                    7a:ef:bf:4e:57:eb:07:02:d2:4a:48:ff:4a:13:1f:
                    b8:97:85:20:1a:1b:66:c3:79:92:19:04:09:84:bb:
                    0d:72:51:41:57:3e:2d:52:30:5d:70:5b:16:a8:b0:
                    fb:31:cf:34:5c:4e:f1:ae:9d:f6:f4:31:13:1b:77:
                    43:01:a3:ef:0a:98:b2:ae:29:d2:c6:ba:44:d2:4f:
                    10:fe:f8:d2:d3:9e:9d:09:45:ce:44:3b:25:50:20:
                    b9:49:ec:6c:a4:80:b2:dd:17:0e:1d:e5:a6:f5:5a:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B3:FC:33:22:2A:BE:46:C1:44:08:70:5F:A2:AA:89:26:3F:97:76
            X509v3 Authority Key Identifier:
                keyid:B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:1e:75:6a:1f:bf:10:9d:d3:a3:33:55:dd:9f:f0:4b:2e:
         50:ea:60:52:48:dc:bf:e8:60:b3:27:0a:77:fb:0e:0d:29:d5:
         eb:de:03:57:e3:ea:74:a3:0b:02:2d:f1:d3:47:47:fe:9b:1e:
         f9:15:f5:04:8c:ba:54:65:26:45:c5:61:b1:a2:91:48:75:ef:
         3a:d9:5f:06:d5:78:24:dc:b1:03:61:77:9a:9e:7b:3e:95:91:
         8e:e8:c0:b1:a7:fa:22:d4:53:ff:89:bf:33:85:cb:5c:22:a5:
         b8:4b:03:7e:2c:11:d7:a9:e0:45:48:4e:07:b7:8e:46:37:38:
         28:fc:bb:8d:5e:7a:cc:11:d6:fd:0e:e6:8f:a2:01:ba:26:02:
         9d:53:61:8c:8c:73:42:b2:60:4c:83:1d:ef:3e:d4:94:ea:34:
         22:7d:2c:d9:c7:0d:9a:45:07:52:9a:79:2c:dc:29:7f:15:52:
         e6:cb:90:92:de:27:e0:94:11:cb:13:2d:5f:ea:85:37:a6:f6:
         f2:f9:61:75:4a:2b:8d:30:93:ff:84:05:ad:8c:ff:77:f1:25:
         48:15:2c:61:87:67:25:d4:2f:d2:e5:ed:38:a0:d3:05:05:70:
         10:48:0f:7d:2f:19:e9:72:58:f4:7d:d2:9b:f1:3d:99:8a:7a:
         39:fb:0d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:30 2025 by rpki-client