Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File:                     XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier:          Jpio0teMwawpIBaDt2sOCMfxxWm25XGgvfQqhpDoSTA=
Subject key identifier:   BA:BE:02:D6:2D:69:80:CA:C7:6A:16:96:0C:8C:BC:34:CA:03:35:57
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer:       /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial:       01967D8EC2FDFDA3E0AD6A1BBBA7E8F5EE0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number:          1510
Signing time:             Mon 28 Apr 2025 18:00:30 +0000
Manifest this update:     Mon 28 Apr 2025 18:00:30 +0000
Manifest next update:     Tue 29 Apr 2025 18:00:30 +0000
Files and hashes:         1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: CWfREbPe8UAgyt47qiQ9wEYOiBfl/kvxQVidl0h8x+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:8e:c2:fd:fd:a3:e0:ad:6a:1b:bb:a7:e8:f5:ee:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
        Validity
            Not Before: Apr 28 18:00:30 2025 GMT
            Not After : Apr 29 18:00:30 2025 GMT
        Subject: CN=babe02d62d6980cac76a16960c8cbc34ca033557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:50:91:96:eb:18:07:29:32:63:01:1a:3f:
                    18:1f:29:59:41:e6:74:f7:e4:da:aa:50:45:8b:d3:
                    63:9c:a1:d2:09:d2:ee:9b:7a:d2:8d:1b:f5:29:7c:
                    f1:27:63:16:52:e0:07:9b:06:32:e1:f8:3c:2d:0d:
                    3b:32:be:e4:a7:e7:ea:08:ba:58:58:57:e9:9c:80:
                    f7:19:d7:34:22:fd:3f:3b:48:7f:1d:1a:8a:96:ac:
                    48:69:c0:79:91:dd:14:e7:f1:92:df:02:18:fd:e0:
                    9b:3a:f7:50:5e:81:f6:07:b0:5c:5e:b6:85:ad:60:
                    d2:af:87:03:85:e7:ed:cc:c7:f0:f0:b1:ff:93:42:
                    87:b2:76:6f:cf:d0:17:d7:83:a9:c3:07:5f:ec:39:
                    91:e3:99:a8:a6:20:30:6f:3a:c7:c7:32:02:53:c3:
                    62:d2:cc:87:7c:c3:a4:e9:b9:09:84:fb:cc:a2:79:
                    d5:08:f0:84:d2:fa:87:f6:f4:c5:68:e2:93:56:54:
                    62:ea:bb:dd:02:9b:64:14:de:b1:8b:9c:bc:24:ba:
                    26:b5:57:8e:5a:2e:d9:a0:2b:8e:ce:77:d8:74:47:
                    35:f3:80:16:34:8b:37:bb:b9:b4:08:68:15:6f:f7:
                    cb:96:f3:db:bc:a2:99:2c:ea:61:06:44:0e:da:a1:
                    01:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BE:02:D6:2D:69:80:CA:C7:6A:16:96:0C:8C:BC:34:CA:03:35:57
            X509v3 Authority Key Identifier:
                keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a3:05:d5:a7:f0:e8:be:b9:85:a5:97:f6:9d:52:46:1d:a8:
         ec:29:9d:96:3f:8f:ad:36:27:55:a1:cf:79:e6:cc:fd:c1:1c:
         6d:e7:ec:8d:11:3a:c2:23:c6:c8:12:84:b3:ea:41:94:09:a4:
         17:9a:9d:87:a1:57:7a:6e:a1:75:32:11:51:19:f9:cc:d2:53:
         9d:6c:4a:d7:dd:ad:0c:8e:66:17:a3:91:06:e7:1d:fb:e8:5c:
         c4:bd:cd:a7:61:4b:fb:bc:c4:43:58:83:de:14:42:77:7a:85:
         f4:58:ad:01:79:86:13:c5:7a:9c:04:67:69:1e:da:a6:54:ed:
         13:4d:fe:35:d7:1e:b8:91:c1:bc:0a:ef:f3:1a:f7:c9:67:96:
         c2:ed:f7:4c:8d:78:af:63:56:b8:3f:7b:ec:44:9f:9f:c1:c3:
         b8:09:7b:3b:85:00:ee:be:aa:ae:19:32:a8:e0:f5:a9:09:c1:
         d7:cc:6c:34:7a:0c:bb:3b:09:12:f3:de:19:19:4e:8c:cd:9d:
         f0:0a:33:49:37:2f:96:9a:2c:41:a1:4b:9d:cc:2a:23:2d:62:
         1e:b8:ef:6c:ff:d9:88:8c:48:6e:c6:95:c5:20:61:58:a8:ac:
         e3:f2:d6:b0:a7:62:1d:5e:a5:3d:c6:b3:f1:05:cd:ef:5e:21:
         d0:20:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:33:18 2025 by rpki-client