Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
File:                     MfxYQJK_niCslRtZUN1PpxMgPMM.mft (raw, json)
Hash identifier:          WtndPWnpCwyN/ALULzBfZvBcNXDNybypxpienykbWuE=
Subject key identifier:   7B:15:15:EF:F3:63:7D:16:11:15:9E:6F:1B:6B:A1:8B:82:24:41:49
Authority key identifier: 31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3
Certificate issuer:       /CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
Certificate serial:       0196895CC72B409247BD22DB525E9A964C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
Manifest number:          0F37
Signing time:             Thu 01 May 2025 01:01:20 +0000
Manifest this update:     Thu 01 May 2025 01:01:20 +0000
Manifest next update:     Fri 02 May 2025 01:01:20 +0000
Files and hashes:         1: MfxYQJK_niCslRtZUN1PpxMgPMM.crl (hash: pMPBS8Lw9henizLjW5VbBFsSjyTkv3gqtbofcYyVq3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5c:c7:2b:40:92:47:bd:22:db:52:5e:9a:96:4c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
        Validity
            Not Before: May  1 01:01:20 2025 GMT
            Not After : May  2 01:01:20 2025 GMT
        Subject: CN=7b1515eff3637d1611159e6f1b6ba18b82244149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:7d:09:69:c6:5a:8f:20:0f:ff:54:59:40:
                    4d:d4:c8:3b:4a:3c:d3:21:b1:4c:62:33:58:c1:8e:
                    39:a3:2c:17:73:24:9a:aa:44:11:04:d2:d1:6c:00:
                    6f:37:3f:32:ff:8a:d7:18:80:e6:bb:be:13:39:fc:
                    c5:a1:7e:b3:f6:2c:15:81:8b:4a:29:34:3d:65:48:
                    05:26:e7:88:86:87:6a:9c:6f:d3:d1:cb:33:f1:d4:
                    1d:e3:3c:5c:31:f5:cd:91:8b:b7:84:a9:e6:bf:c1:
                    3a:d1:1d:84:42:77:aa:3d:18:df:80:cd:d9:b5:6b:
                    51:69:43:d2:c3:10:7c:63:68:cc:c5:7c:81:17:7f:
                    a0:00:be:45:d1:56:69:f4:42:02:42:5a:11:a1:a7:
                    ed:8a:e4:42:1f:85:56:28:38:e1:c1:68:d9:16:55:
                    ac:90:e6:e9:8c:9a:20:8d:82:87:83:78:02:9a:91:
                    be:66:f8:33:56:ba:f2:bb:a3:c7:47:93:a8:c1:8f:
                    2e:2f:e4:d7:c4:92:d6:30:7e:f9:32:17:54:cb:51:
                    6c:43:de:c3:b4:6a:65:a1:29:90:e8:b9:51:dc:ed:
                    d0:d1:f5:53:a9:af:40:56:d2:b8:68:1b:5a:02:8e:
                    b0:68:ea:93:18:a5:16:04:a4:63:e2:4d:c8:0a:00:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:15:15:EF:F3:63:7D:16:11:15:9E:6F:1B:6B:A1:8B:82:24:41:49
            X509v3 Authority Key Identifier:
                keyid:31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:26:52:16:43:d0:f4:ea:fa:0a:ab:62:3e:64:b6:4a:e0:
         40:b7:df:c5:36:96:40:df:32:da:98:d1:3d:90:17:11:59:7a:
         fd:78:5f:c0:08:42:65:9f:75:2f:3d:de:f8:eb:58:d4:3e:b1:
         e5:28:d7:6d:a4:a0:89:ad:4c:69:db:93:41:5e:75:aa:5f:dc:
         14:ba:fe:c3:dc:06:5d:68:52:79:be:7c:8c:1a:d4:16:f3:d4:
         2d:fe:31:24:17:a4:cc:6a:5b:03:f3:4e:e8:94:3c:72:51:ab:
         86:c4:4c:71:49:5e:f6:11:db:26:70:60:e4:7c:5a:a5:3e:db:
         02:7e:09:b6:70:da:75:db:8d:c5:8e:84:40:fd:1d:27:a2:ee:
         af:41:f2:c2:8d:d9:18:38:5d:1c:c1:da:a9:2c:07:43:b0:bc:
         68:f5:10:a3:fe:a4:e8:2c:77:41:cc:e7:3f:d3:d8:e3:d8:35:
         2f:48:fd:34:dc:69:4a:43:be:f9:b6:02:35:62:45:d5:59:d0:
         d8:af:a3:d0:3e:90:16:68:ed:b9:e0:de:de:48:5b:d0:c6:df:
         c9:d1:df:c9:34:65:6a:c0:5a:d0:38:e9:7e:d5:eb:03:31:ba:
         5f:82:e7:df:57:50:89:6b:56:95:97:86:e1:b4:90:1f:4a:d6:
         72:1f:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:32:06 2025 by rpki-client