Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File:                     ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier:          tLp0N1TE5ZmHtTsd/cm03yd4Rj4DvzCQOJYdOOscg7E=
Subject key identifier:   50:0C:74:55:12:7E:F3:41:CD:4F:33:F1:25:A8:92:25:E2:28:A4:1C
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer:       /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial:       019678D68D5CCFE6E3ED6E009FA6FE81DA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number:          150C
Signing time:             Sun 27 Apr 2025 20:00:48 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:48 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:48 +0000
Files and hashes:         1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: W+SkiOzi1eTd3QoYn9F1GLgLBjP6SeuiJLZyswqJrTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:8d:5c:cf:e6:e3:ed:6e:00:9f:a6:fe:81:da:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
        Validity
            Not Before: Apr 27 20:00:48 2025 GMT
            Not After : Apr 28 20:00:48 2025 GMT
        Subject: CN=500c7455127ef341cd4f33f125a89225e228a41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:c0:7f:35:5a:67:92:44:6e:ce:89:d2:29:
                    56:b4:6a:3a:9e:ef:32:e4:65:a1:99:7d:3a:65:92:
                    32:a6:86:b4:6f:b5:7e:00:94:ac:32:1c:6d:e3:ff:
                    96:4f:54:a3:c6:0b:29:fd:1f:11:3d:e7:6d:0b:a4:
                    dd:46:49:30:f3:88:4c:ac:25:72:7e:06:95:60:d4:
                    46:d0:9c:4a:5e:20:8d:eb:f4:78:b4:fa:74:de:39:
                    19:b9:96:f9:5d:7b:3f:83:dd:10:f8:59:06:09:ab:
                    e2:a7:61:25:f3:18:12:d8:b0:ca:46:04:3d:ef:f5:
                    49:26:f8:78:db:b9:02:72:fc:97:b8:7d:73:73:0a:
                    49:24:29:27:41:35:a9:d6:87:6c:c6:21:ea:d9:0d:
                    54:20:56:eb:e1:a8:b1:bb:1a:6d:71:b8:70:a9:c3:
                    d1:2e:f2:b3:68:31:ba:12:82:32:2a:51:0c:fd:c7:
                    0b:ab:30:84:c2:dd:69:02:c0:c7:86:56:44:fe:3b:
                    df:57:12:0d:80:f6:98:9f:34:a4:9b:ac:b1:be:3b:
                    a4:d2:7f:75:3a:74:a8:a8:77:15:be:68:39:42:84:
                    d6:26:68:64:b5:91:f9:6e:71:50:f3:13:61:17:d1:
                    2f:4f:14:28:e1:15:7a:33:9b:94:53:c5:66:17:28:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0C:74:55:12:7E:F3:41:CD:4F:33:F1:25:A8:92:25:E2:28:A4:1C
            X509v3 Authority Key Identifier:
                keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:17:13:eb:da:ee:81:72:5d:0b:a9:9c:73:01:3f:ae:aa:64:
         06:e6:d2:73:ca:48:cd:39:76:1b:bf:a3:01:17:8d:22:3c:2d:
         da:0e:b4:1e:75:c7:43:b7:e2:3e:3d:02:47:4d:fb:b9:99:70:
         2a:2b:7b:83:01:b9:16:d0:ec:d7:fa:2e:3c:56:0f:01:bb:a7:
         5d:fd:c2:e0:9f:6c:dc:da:7c:b9:5b:c4:0d:f3:bc:90:34:0c:
         fa:40:1a:9b:d1:4e:5e:0f:7b:94:0b:23:1d:7a:8b:b7:e1:34:
         76:63:42:7c:2e:b0:5a:fa:e5:53:bd:45:82:23:10:27:d6:24:
         63:7f:3b:4b:31:1f:e5:5b:ee:f8:f6:6f:a3:62:29:ed:f3:1a:
         47:b6:11:38:4a:ea:7f:ba:06:c0:da:bf:45:8a:05:16:d6:23:
         80:b0:de:ba:01:bd:70:71:6e:3d:71:61:c5:67:d8:48:05:7e:
         61:22:c7:ef:be:b0:37:76:76:8a:7a:23:5e:1f:e5:09:c7:da:
         f3:4a:eb:f7:0d:61:c7:63:dd:f3:29:79:53:8f:c6:8b:1b:0a:
         b0:48:95:a7:91:cb:96:c2:b5:59:84:d7:1d:19:04:dc:e7:a5:
         f1:d2:c0:98:16:8b:40:31:86:7d:5e:d5:67:ea:a1:c0:47:30:
         0d:a0:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:59:40 2025 by rpki-client