Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File:                     96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier:          ha+6zNs1oEuVM3gfWKujj7FZjS7HAOWh7buWx+95tFc=
Subject key identifier:   18:2F:47:55:85:AB:20:4A:A3:AB:CC:FF:3E:6B:14:31:4D:04:BA:5F
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer:       /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial:       01968BEF0BDB2D98D67ABE9A39FE36F5FB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number:          0753
Signing time:             Thu 01 May 2025 13:00:21 +0000
Manifest this update:     Thu 01 May 2025 13:00:21 +0000
Manifest next update:     Fri 02 May 2025 13:00:21 +0000
Files and hashes:         1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: aaEDBIa9IepT7LnXZWZp/cb9TZW15v8mMkuk9VpuHa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:ef:0b:db:2d:98:d6:7a:be:9a:39:fe:36:f5:fb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
        Validity
            Not Before: May  1 13:00:21 2025 GMT
            Not After : May  2 13:00:21 2025 GMT
        Subject: CN=182f475585ab204aa3abccff3e6b14314d04ba5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:b3:8c:d4:53:3d:da:ee:2e:64:fc:04:80:
                    8f:36:b5:29:6b:f3:46:54:b0:1c:ee:36:2f:5c:f6:
                    ab:0d:bd:06:df:9b:63:78:86:ec:5c:a0:db:23:66:
                    18:e4:a0:3d:21:dd:ab:21:ca:e9:40:3d:39:d6:9f:
                    95:0c:52:62:b4:c8:d6:a0:3f:bd:10:49:6b:85:e6:
                    cd:3f:22:d0:0e:6d:30:fc:28:b0:44:69:05:45:58:
                    e9:a4:51:cb:bb:82:10:81:05:31:35:81:3a:72:2f:
                    7a:b7:7a:87:10:40:e4:b4:d4:21:a1:2a:17:c1:c0:
                    3d:f3:ad:ce:7c:03:7a:23:06:bc:23:1e:33:dc:b3:
                    a2:33:12:78:bf:f3:be:ca:c5:a4:74:44:2e:77:bf:
                    3b:5c:52:c1:fd:00:86:a2:7e:17:11:4a:f0:d1:33:
                    d8:94:5a:9c:9d:28:31:69:c3:a5:cb:68:75:db:fa:
                    cd:96:e5:80:d9:df:fe:0f:4a:1a:58:1e:2b:9b:eb:
                    17:5c:96:80:c7:23:60:ca:79:39:22:7e:13:1e:a5:
                    82:39:de:5e:a7:b0:4c:65:12:ff:f3:5a:2e:96:d2:
                    9b:93:ec:7c:08:04:06:f0:10:4f:f6:64:05:64:c7:
                    b0:1a:ba:22:ca:17:f1:ea:54:89:c4:13:7e:45:a1:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:47:55:85:AB:20:4A:A3:AB:CC:FF:3E:6B:14:31:4D:04:BA:5F
            X509v3 Authority Key Identifier:
                keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:c8:bc:a2:4f:e8:6f:04:a0:c9:2f:20:dc:c4:af:46:cf:
         b1:0f:72:39:50:6f:c3:e0:bc:ea:7d:a9:88:af:b5:a6:44:1e:
         d7:e8:f0:f7:85:0c:6c:c7:ef:ea:95:48:3e:6b:7f:cb:2e:e4:
         78:52:3e:2d:01:92:02:e6:b8:a4:39:b0:2a:af:3a:92:f7:bc:
         69:09:9a:b4:c1:37:de:48:86:93:35:f1:b1:01:5a:66:3f:45:
         65:fb:f5:f0:31:bd:c4:27:29:07:f3:e9:d6:da:66:86:02:bc:
         eb:25:31:1c:f2:c8:83:e4:66:74:51:19:e8:4f:61:9b:43:83:
         88:20:6e:1a:76:34:4b:7a:f3:fb:bb:ac:dc:d8:f5:fc:a7:a1:
         12:1d:b5:26:8d:b5:0b:75:ea:bf:26:a6:cb:19:3f:2b:a6:a8:
         d4:ec:0f:ee:b3:84:07:91:46:03:10:43:bd:40:b2:12:e1:19:
         d8:f5:f7:67:5f:ed:74:92:02:dc:0c:23:d9:87:5f:73:4a:ba:
         be:a6:03:c7:9d:4b:a2:f7:2a:d0:25:ba:22:f3:6f:5a:af:79:
         6f:7e:29:9c:62:07:70:5e:74:ba:d4:a8:b7:79:a3:2e:2c:4d:
         ac:19:ac:88:84:6b:87:0e:67:da:10:b7:4a:7f:f1:51:55:bb:
         3f:a3:71:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:23:54 2025 by rpki-client