Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
File:                     dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft (raw, json)
Hash identifier:          rAXrE7QK0LfSIW3HrqwnpvL5uK+GQNY/S0BNP1CKw7A=
Subject key identifier:   AF:83:66:CE:17:AF:28:D6:42:25:BE:10:79:80:C2:94:2A:AD:4F:9A
Authority key identifier: 76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
Certificate issuer:       /CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Certificate serial:       019691156B4C1CD84E2910B11E2BC3F6E510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
Manifest number:          0C54
Signing time:             Fri 02 May 2025 13:00:22 +0000
Manifest this update:     Fri 02 May 2025 13:00:22 +0000
Manifest next update:     Sat 03 May 2025 13:00:22 +0000
Files and hashes:         1: dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl (hash: sCR7ufCvZ6RF5mW2mKeTINbbSAcE1kUdz4uATrgX/ZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:15:6b:4c:1c:d8:4e:29:10:b1:1e:2b:c3:f6:e5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
        Validity
            Not Before: May  2 13:00:22 2025 GMT
            Not After : May  3 13:00:22 2025 GMT
        Subject: CN=af8366ce17af28d64225be107980c2942aad4f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:f0:78:bc:96:77:71:1e:a4:ff:ab:b1:6a:
                    d9:e1:86:d9:07:58:6b:da:f5:cf:ec:5a:99:b7:d1:
                    bb:da:58:13:e7:ad:53:d3:6e:b0:df:c9:7f:ca:c9:
                    1f:bb:04:05:d0:92:c9:1a:2e:aa:ec:cb:5b:8c:96:
                    5b:52:7d:44:d6:42:dd:d1:92:31:b3:e0:2b:f0:7b:
                    f2:ba:3c:50:08:4d:15:82:f6:1a:88:25:3e:9d:2c:
                    30:40:da:11:ab:90:d6:05:79:d4:86:d1:f0:37:a8:
                    90:54:cd:57:ff:d8:1e:6e:d5:10:66:2e:b7:9a:4b:
                    88:48:ba:3e:62:15:18:96:13:82:b8:24:3b:f5:e6:
                    e5:53:c0:dd:5a:4d:b7:47:c4:e2:e5:4b:e6:d1:45:
                    27:36:84:6c:7a:aa:21:13:14:69:4f:13:0d:db:a4:
                    00:db:a0:0f:2f:d0:1c:b0:18:49:53:e4:c4:f8:1d:
                    b7:76:61:42:1b:c7:b4:f3:a7:4a:8c:ea:01:34:03:
                    cf:4a:fb:7a:88:8e:41:d2:62:fc:cb:ad:58:3f:be:
                    ca:fd:a7:d5:2e:bf:91:13:4a:cd:c9:cb:e6:fd:47:
                    c6:68:7d:29:50:ed:30:f4:35:3b:d2:7c:3c:2b:93:
                    44:59:83:15:a9:e2:2e:5e:b8:33:0b:e8:3b:25:63:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:66:CE:17:AF:28:D6:42:25:BE:10:79:80:C2:94:2A:AD:4F:9A
            X509v3 Authority Key Identifier:
                keyid:76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c5:2d:f7:8f:01:54:05:52:1a:c6:87:24:5d:03:62:87:39:
         b1:5f:ef:e6:ad:1c:7b:19:16:3a:c5:ef:13:06:d9:cf:2f:48:
         5e:c3:db:2d:9a:94:42:40:dd:05:3b:57:ad:cc:3d:6b:23:a4:
         ef:22:2a:a1:a5:5c:6e:68:fc:90:99:5a:d4:1b:0d:fb:d5:f9:
         7d:76:70:9e:36:04:c8:4e:5c:6f:54:35:24:c7:f5:08:f2:0a:
         c8:03:94:29:18:d0:42:29:62:86:98:eb:47:04:e7:43:b2:8f:
         8c:97:9e:c7:da:94:95:72:72:7b:e1:f4:cf:84:a2:39:03:c3:
         30:70:33:8e:4f:4b:08:f4:f0:cd:c5:ce:49:de:68:e6:67:2e:
         de:57:1a:c3:31:d0:59:8a:b1:69:84:1d:0b:5a:cf:eb:11:b8:
         4b:b2:ad:ce:86:d3:5c:ea:84:1f:71:24:d1:b9:b7:b6:0c:72:
         af:03:26:06:1d:fa:6d:37:43:3c:81:46:27:87:47:ec:f6:4c:
         60:5a:73:79:c5:9d:a1:e2:15:2a:b1:d6:35:be:6c:42:6e:9a:
         3c:d9:eb:3e:95:d2:05:0e:6b:c1:6d:1a:fb:d4:05:0b:dd:b6:
         b3:68:45:dc:90:50:03:1e:9e:9e:79:9b:56:6a:35:1b:70:9b:
         69:83:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:44:32 2025 by rpki-client