Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
File:                     xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json)
Hash identifier:          rD2Up0Qoy3D4me33uG4BbTGAia/tCJZvZRIR7qezapk=
Subject key identifier:   5F:88:80:0E:93:C8:8D:35:DC:7F:50:BC:76:C4:18:E6:D5:19:4A:B8
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Certificate issuer:       /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial:       0196993CB089240D26D4CFEAB13939989554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
Manifest number:          0128
Signing time:             Sun 04 May 2025 03:00:13 +0000
Manifest this update:     Sun 04 May 2025 03:00:13 +0000
Manifest next update:     Mon 05 May 2025 03:00:13 +0000
Files and hashes:         1: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: 7KHyDwLiF8OJ8yst5X4elNR5Jjh1xC5K+5aCkTBPQbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:99:3c:b0:89:24:0d:26:d4:cf:ea:b1:39:39:98:95:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
        Validity
            Not Before: May  4 03:00:13 2025 GMT
            Not After : May  5 03:00:13 2025 GMT
        Subject: CN=5f88800e93c88d35dc7f50bc76c418e6d5194ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:78:75:14:0b:97:e6:54:a6:ea:ab:02:31:
                    6e:bc:ea:a3:b8:94:36:9a:2e:c2:19:55:ac:d5:a9:
                    3b:09:c6:af:9c:bf:c4:64:57:5c:22:53:40:54:ac:
                    20:7a:28:f1:3c:c2:84:01:7d:e1:2d:dd:3f:d5:7b:
                    85:33:51:2d:a8:14:aa:a8:de:9c:de:66:6f:31:1f:
                    ea:f0:2d:30:8b:3b:c8:d4:8f:c4:96:0f:d3:ef:6b:
                    34:cb:17:8f:1d:26:36:cc:e3:3f:fe:9b:c8:85:1e:
                    17:f6:e0:35:1b:05:14:43:7f:4a:a9:f5:52:d5:e1:
                    65:b0:a6:78:c0:0e:db:73:91:85:d4:03:6b:98:07:
                    46:9e:cd:79:de:3c:8b:76:33:8e:5a:98:80:01:85:
                    cc:cf:ad:43:f1:1a:a8:74:1e:ed:85:48:f3:e7:51:
                    4d:0b:fe:7e:f9:be:6f:75:50:cf:d9:c4:a6:2c:a5:
                    b9:04:80:f5:d9:8d:f9:2a:2b:bc:72:c0:fc:db:58:
                    43:06:71:53:34:aa:24:d9:4d:c9:29:27:4d:38:a2:
                    de:dc:e3:7a:3b:39:79:58:59:b5:fe:57:b9:d7:37:
                    44:52:50:d1:b1:ad:69:d9:52:1a:ab:7d:4a:35:90:
                    c1:3a:44:4c:76:ab:f7:11:29:9b:59:a1:b8:49:fa:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:88:80:0E:93:C8:8D:35:DC:7F:50:BC:76:C4:18:E6:D5:19:4A:B8
            X509v3 Authority Key Identifier:
                keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:14:51:ad:a1:72:4c:36:cb:62:29:1d:e3:e9:94:fe:05:
         8c:23:66:f0:08:50:56:11:2a:23:75:78:07:85:43:01:63:79:
         8f:0a:3a:0b:cd:bb:c2:15:5c:61:4d:ab:61:6c:78:07:a3:87:
         7d:90:d1:dd:ee:66:45:5f:ff:f3:e0:64:39:60:ad:3e:98:13:
         ba:73:f5:6e:2c:8e:aa:df:f4:e1:bb:92:43:78:e2:85:8e:4e:
         5e:28:2d:0a:b6:99:8b:8a:e2:f7:5c:ae:52:b3:f3:83:cb:4c:
         4c:2a:b3:b1:a5:b3:41:af:c0:14:ce:cf:b0:02:36:48:03:0d:
         8b:10:be:7f:8c:9d:1d:46:72:2d:91:de:07:15:78:c8:da:81:
         c0:3e:4d:6c:ce:63:33:48:b4:d0:0c:b0:55:7b:29:5f:32:be:
         7a:25:63:6c:e0:26:84:24:26:af:1b:fb:ea:91:22:8f:d3:49:
         c6:82:70:f9:db:86:6f:87:a8:a2:df:f2:55:65:46:98:2f:4e:
         70:cb:1d:79:cf:40:09:de:95:11:3c:4c:0d:93:70:7a:8f:43:
         de:cf:b2:52:b2:93:2a:ba:c0:21:33:cb:b2:a0:2f:a6:c1:cd:
         34:d4:7a:10:5d:cc:49:99:52:d2:fc:13:b4:a6:06:38:15:c2:
         6b:87:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:37:28 2025 by rpki-client