Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File:                     dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier:          7nKUe5/vgd1NICQRKvS5yE1XKwlp1vKes+Rs+xZsEbc=
Subject key identifier:   80:AB:CE:83:9D:55:64:BD:C3:D2:DE:A5:FD:3A:74:D7:2D:A3:5E:10
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer:       /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial:       019688B7A5581F2D79ACCA01B67E9D12C693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number:          1514
Signing time:             Wed 30 Apr 2025 22:00:58 +0000
Manifest this update:     Wed 30 Apr 2025 22:00:58 +0000
Manifest next update:     Thu 01 May 2025 22:00:58 +0000
Files and hashes:         1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: cb7jC2+ae0KiRFkAE554TxApgiPsn3tdjhMJRY7cBbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:b7:a5:58:1f:2d:79:ac:ca:01:b6:7e:9d:12:c6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
        Validity
            Not Before: Apr 30 22:00:58 2025 GMT
            Not After : May  1 22:00:58 2025 GMT
        Subject: CN=80abce839d5564bdc3d2dea5fd3a74d72da35e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:74:72:6b:df:57:2a:d8:47:1c:09:4c:c6:
                    f7:30:17:28:7c:f4:81:a8:17:fc:78:ca:9c:27:5d:
                    46:ef:60:17:79:49:e5:39:20:ee:84:cf:b3:b9:0d:
                    7e:20:f4:09:dc:5e:11:ea:27:43:c9:e0:14:b7:aa:
                    12:9f:68:87:3b:9a:1a:ac:88:b4:ee:fb:40:7b:13:
                    4b:c2:a8:39:5d:77:40:fb:db:94:05:6c:a2:83:64:
                    8d:64:4d:30:4b:ff:d9:4b:a0:aa:33:63:5d:d2:61:
                    6e:0e:6d:01:a4:3e:d0:55:89:b7:53:42:75:9a:a2:
                    99:f5:67:51:e6:53:5f:82:35:86:61:16:27:c7:4d:
                    03:2b:9c:fc:55:e0:06:81:a9:fe:31:f7:b9:b6:cb:
                    f7:ef:58:76:eb:0c:a0:56:7c:75:52:c4:05:fd:b5:
                    94:46:83:b4:24:a4:7d:b5:dc:7a:8e:05:5a:39:cf:
                    7c:52:aa:43:63:78:d5:88:69:d3:0d:43:e1:1e:38:
                    75:d3:a6:ed:f5:a2:ea:84:fe:4a:79:3b:86:fd:14:
                    69:70:ee:4e:81:da:92:2a:c5:0d:8e:ab:88:aa:d7:
                    9f:f8:ce:93:42:5f:b3:38:eb:69:2f:18:3d:d6:4a:
                    d2:3c:15:75:b7:97:12:0d:89:99:7b:b4:8f:61:cd:
                    2b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AB:CE:83:9D:55:64:BD:C3:D2:DE:A5:FD:3A:74:D7:2D:A3:5E:10
            X509v3 Authority Key Identifier:
                keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:62:01:ca:0e:9c:b2:2c:f4:d1:10:85:ba:db:6c:a7:6e:4e:
         7f:3a:10:b4:f9:b7:4e:48:92:3e:56:dc:18:d7:05:5b:59:04:
         b4:b6:d1:ec:e5:ce:4b:c9:62:da:13:e9:ae:fc:b9:0e:7d:d5:
         24:d0:75:8a:a5:11:a7:8a:a8:4f:3e:cd:1a:60:84:66:e0:33:
         1a:b2:89:f4:7d:02:3f:0f:5e:1b:f8:5f:d5:ea:98:78:f7:d7:
         ac:b4:59:51:ba:06:4b:5d:e5:a8:9b:80:ae:6e:54:b6:ce:aa:
         58:73:19:8a:ed:1c:ad:f3:c9:d4:da:ad:99:c0:4f:f5:41:21:
         77:41:a5:be:aa:91:ac:fa:00:0f:ad:a1:d9:d3:99:13:c7:d5:
         d9:62:28:2f:cb:80:cc:a0:a6:26:ef:da:3e:8d:1c:66:bc:e4:
         f5:e4:1f:4b:93:7a:34:37:cd:48:92:e2:fc:f5:19:28:a8:df:
         4e:86:d1:a7:d7:e4:70:01:d8:b2:2d:13:a0:c0:f9:bd:c6:8d:
         c9:3f:88:dd:58:f6:aa:07:f0:c2:bf:14:40:2c:96:bc:17:60:
         a7:46:e1:e3:dd:d4:d7:4c:93:14:ed:c0:12:31:29:bd:69:da:
         53:ff:c5:ba:37:ee:59:7b:d1:2b:9f:dd:e3:af:4a:64:9e:c1:
         66:6d:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:22:51 2025 by rpki-client