Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File:                     5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier:          KxdzD/xDw2WZZzTj+YQHQzMQIqWBfT+GX4bA8UnbGS8=
Subject key identifier:   E8:24:F0:1F:C4:7A:54:3F:52:DE:82:80:7B:A8:B5:FE:CE:81:F8:AA
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer:       /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial:       01968B4B719537C1171BCBB67BD25356E7F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number:          1339
Signing time:             Thu 01 May 2025 10:01:39 +0000
Manifest this update:     Thu 01 May 2025 10:01:39 +0000
Manifest next update:     Fri 02 May 2025 10:01:39 +0000
Files and hashes:         1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: J5J2g6J2UWkbenE3cBMn2vO21yuclF5awkb2QGLU80k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:4b:71:95:37:c1:17:1b:cb:b6:7b:d2:53:56:e7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
        Validity
            Not Before: May  1 10:01:39 2025 GMT
            Not After : May  2 10:01:39 2025 GMT
        Subject: CN=e824f01fc47a543f52de82807ba8b5fece81f8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3d:3d:d2:c6:a4:0b:38:ce:b7:66:d7:75:ca:
                    d5:f4:96:cf:05:4e:34:e2:1a:09:52:a1:75:38:f9:
                    e9:e1:08:93:33:91:bc:3d:55:d2:36:fb:9a:c4:bd:
                    e0:8e:09:71:cc:dd:48:87:53:a5:dc:6c:2e:57:d6:
                    a8:74:72:01:44:98:12:2e:84:77:db:83:43:7f:7b:
                    a2:f8:c7:37:09:12:d1:31:40:7f:50:e8:ec:70:44:
                    c8:57:97:07:25:dd:d0:01:86:86:3e:6c:f6:fc:b5:
                    eb:1e:22:b5:0d:8f:d1:33:9a:7b:04:e6:44:0a:9c:
                    1a:dc:1b:d5:6f:8c:45:29:e4:95:79:3a:32:af:1f:
                    83:1c:95:bc:3b:e9:7e:7d:09:59:a6:79:d3:0c:ae:
                    9a:8a:25:66:9f:96:80:bd:f8:79:80:60:78:c8:f9:
                    ab:3e:73:22:75:9f:65:18:94:88:bb:42:ee:03:fc:
                    5a:fb:59:d8:1b:c1:a3:e8:86:51:77:8e:c3:6f:de:
                    cf:2c:05:17:f8:e8:65:c8:b1:15:43:f9:a1:26:90:
                    ef:8b:d7:69:5d:0d:ba:1d:2e:db:4e:5f:3b:01:9c:
                    7e:26:f6:10:81:7d:8f:97:ca:1e:20:97:69:9c:3a:
                    d8:b5:bb:53:f1:c2:e1:91:66:51:85:e3:8d:ed:e9:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:F0:1F:C4:7A:54:3F:52:DE:82:80:7B:A8:B5:FE:CE:81:F8:AA
            X509v3 Authority Key Identifier:
                keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ad:56:02:c0:95:57:12:00:1a:91:40:ac:a0:17:fa:3b:59:
         30:56:36:12:fa:49:b9:ba:dc:7d:7e:c2:da:a1:48:1d:6e:46:
         1b:c2:88:a8:48:29:f4:a5:43:68:c9:c1:fc:63:b2:63:32:48:
         63:94:9d:fb:62:63:45:c0:1f:d8:fb:e1:d0:ef:7a:27:f4:f4:
         e4:5b:97:1c:be:7c:5f:64:65:af:fc:54:2f:1d:6d:4e:8c:eb:
         1f:1b:0c:ba:ba:22:b0:31:d5:df:93:1a:80:d6:62:a9:6c:05:
         07:75:db:82:22:8d:27:ca:43:e3:2a:08:62:1a:11:9a:6c:0f:
         90:a6:bc:dc:a9:dd:21:7b:5d:70:1c:06:bb:55:9c:c3:4b:08:
         34:4c:65:7f:a5:e1:80:f7:46:91:86:7c:e1:0e:0d:14:27:a0:
         26:f9:61:f6:91:f3:25:8c:a6:9f:c0:85:60:ee:1b:09:be:a4:
         d4:c4:4d:43:f1:c4:9c:c5:fb:12:fe:df:26:16:71:9b:14:13:
         ba:64:ee:46:b1:a8:e2:ae:b8:38:7b:42:67:2a:88:71:83:ba:
         48:bf:4e:19:40:ea:69:d4:35:66:f6:01:15:4a:18:45:71:d3:
         bb:c6:be:18:91:e0:8e:2a:0a:00:5d:0e:c3:4f:d2:c8:a4:c4:
         78:5a:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:00 2025 by rpki-client