Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
File:                     mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft (raw, json)
Hash identifier:          NX5hukDCsVc2X0VhnrDDOIZnaJR+GQq4/I30AFW5kjk=
Subject key identifier:   3D:3C:2B:CE:D3:D9:45:70:B1:83:8E:11:AE:3D:89:C8:45:A2:FE:02
Authority key identifier: 99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
Certificate issuer:       /CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Certificate serial:       019679E9362563E251AF925591108596F899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
Manifest number:          150F
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
Manifest this update:     Mon 28 Apr 2025 01:00:48 +0000
Manifest next update:     Tue 29 Apr 2025 01:00:48 +0000
Files and hashes:         1: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl (hash: m8LejtVWNwwFFo4nmDDBRNnAWELiluYfuZYZePITCg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:36:25:63:e2:51:af:92:55:91:10:85:96:f8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Apr 29 01:00:48 2025 GMT
        Subject: CN=3d3c2bced3d94570b1838e11ae3d89c845a2fe02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:5a:71:42:c0:b1:be:fd:34:2d:5d:e5:0d:
                    05:d6:c8:bc:4a:6d:e2:9f:a2:46:e1:0d:6b:a1:fc:
                    d3:3b:7f:4c:9f:de:65:e2:0c:de:f8:c7:da:37:a6:
                    9b:14:84:08:0a:bc:c4:ae:26:98:34:70:1d:23:14:
                    d3:8c:74:c8:af:bf:92:d7:e2:c7:92:58:ed:e2:52:
                    f4:ef:e1:67:9c:44:2b:54:98:2e:81:77:10:4e:34:
                    02:e8:c7:ed:41:31:f8:d6:19:26:95:03:3a:b8:f6:
                    1d:51:6e:77:1d:a6:dc:9c:6c:d0:80:4b:ca:0e:a5:
                    6f:4a:30:62:a9:42:5f:3b:d6:70:f4:29:02:1d:ce:
                    05:15:e0:b5:74:06:f7:55:87:94:b3:8b:f0:89:26:
                    44:da:59:c4:d3:54:27:b1:70:ff:b3:1c:fc:4d:64:
                    01:60:76:e6:79:b5:94:31:fa:2b:e2:9d:ee:fc:9a:
                    3b:16:92:83:69:58:94:ea:38:f7:d7:e8:e6:0c:54:
                    41:f1:37:26:cf:5b:ad:d4:48:a8:51:5b:b5:d7:e5:
                    cd:d8:3d:81:e4:6e:6e:c4:b7:86:8a:ca:6e:a8:4d:
                    34:82:dd:c3:1f:6b:03:e7:d6:ed:06:9e:5f:64:d3:
                    b5:51:f0:62:e7:59:26:d1:90:e2:a1:a8:2f:98:48:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3C:2B:CE:D3:D9:45:70:B1:83:8E:11:AE:3D:89:C8:45:A2:FE:02
            X509v3 Authority Key Identifier:
                keyid:99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:8b:a2:62:d1:ed:a2:12:a5:58:cb:b3:75:2a:b6:05:bb:
         54:f1:f8:2f:9f:da:f5:0a:60:76:40:30:60:bd:c4:fe:b2:8a:
         9e:aa:09:fd:de:21:c7:93:d8:73:dd:26:8b:fc:a2:a8:f9:f3:
         31:47:1f:ac:9a:2f:c7:71:20:aa:50:a3:4a:f1:06:a6:8a:66:
         84:da:be:4b:47:ba:18:05:f8:4a:b8:3c:c5:f8:f1:30:19:f3:
         f5:fa:7f:be:9a:11:74:30:e3:8b:1a:9c:0d:7e:62:fa:fc:3a:
         b6:cd:42:64:36:c8:b9:91:63:5c:4b:d7:a3:9e:80:50:8b:b5:
         0f:d0:02:14:2c:8b:d8:bf:53:71:9b:82:c5:0b:1c:1e:6b:c6:
         86:1d:27:63:40:12:34:b9:ec:5d:b0:55:65:64:05:51:c3:9b:
         e7:fb:34:66:b7:3a:c0:92:37:c1:13:56:2d:2f:0c:e9:6a:d4:
         80:48:7a:5b:eb:59:66:37:82:f9:58:a9:e7:c2:5c:43:9b:46:
         e5:eb:ac:0d:ad:b7:46:0f:1a:80:d8:16:68:9c:1d:b0:a0:0f:
         05:86:e1:1c:8d:02:f7:cd:3e:05:c1:b2:12:fe:c1:5b:58:53:
         83:f5:18:21:ac:29:87:c1:74:46:66:96:b7:4f:83:37:18:3b:
         79:44:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:11:54 2025 by rpki-client