Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File:                     b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier:          mElolAg12V3s3aqP6/OLI235CQvaJWmjlhyGcGfr0Qg=
Subject key identifier:   CB:B9:AA:3F:42:BF:30:97:99:64:EE:4D:33:12:CC:7A:CE:D7:A3:8E
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer:       /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial:       019693DFBACDEBD586D1196B88BF3D426760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number:          01C5
Signing time:             Sat 03 May 2025 02:00:35 +0000
Manifest this update:     Sat 03 May 2025 02:00:35 +0000
Manifest next update:     Sun 04 May 2025 02:00:35 +0000
Files and hashes:         1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: dcEBT7jLvy9W9FwH+pYaMJDZ/6uxksDd8DmcTYIq/r4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:df:ba:cd:eb:d5:86:d1:19:6b:88:bf:3d:42:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
        Validity
            Not Before: May  3 02:00:35 2025 GMT
            Not After : May  4 02:00:35 2025 GMT
        Subject: CN=cbb9aa3f42bf30979964ee4d3312cc7aced7a38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:2f:b8:14:8a:82:07:58:6e:f5:11:40:44:
                    d8:69:55:39:e8:41:bd:73:19:58:89:e5:49:82:54:
                    77:f9:23:a1:1a:70:bb:33:78:26:5c:3a:92:98:fd:
                    79:10:fe:29:30:e9:aa:d3:1c:71:b3:da:7b:74:c6:
                    f9:eb:70:44:83:8f:37:63:4e:95:a6:ec:73:0d:c6:
                    5f:f9:40:6e:4a:31:d3:fb:d1:04:e5:db:16:48:bc:
                    41:e1:75:4f:b4:94:5c:74:04:9c:8f:27:f5:42:36:
                    29:26:ca:f3:0a:fc:f0:74:7c:d4:db:2e:01:6d:75:
                    19:a4:16:cd:1c:71:eb:09:cf:e3:b5:61:d5:e8:b8:
                    b5:6f:7f:eb:96:0d:02:ec:2a:79:66:cb:14:78:c8:
                    31:00:5e:1e:28:62:f8:7a:9b:7b:46:c6:bf:d2:39:
                    00:1d:51:69:ad:db:71:0e:dd:ac:43:81:7c:ba:27:
                    10:90:d7:a2:de:0c:bf:d4:00:9c:20:8d:27:df:c3:
                    6b:48:60:ce:e6:5c:bf:6e:c2:e7:fe:49:2a:ff:17:
                    f0:cb:40:39:db:ba:28:7b:11:6f:86:3e:1d:fa:ec:
                    84:12:cb:f9:e6:b9:ba:28:71:b9:3b:f9:8c:c4:50:
                    1b:ac:5f:4d:33:fa:06:1d:94:88:c7:59:f1:eb:0a:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B9:AA:3F:42:BF:30:97:99:64:EE:4D:33:12:CC:7A:CE:D7:A3:8E
            X509v3 Authority Key Identifier:
                keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:32:15:36:82:c9:98:8a:ae:9c:0d:d7:b7:06:7d:3e:b7:b2:
         83:6c:e8:87:56:e6:8e:d7:fc:a5:f6:c7:76:78:0f:e6:c6:21:
         12:94:9e:9f:83:93:64:3f:e4:e4:f1:0b:25:1d:bf:e4:2a:79:
         1c:ed:83:85:cc:c4:45:f2:23:a4:34:1d:6b:02:69:46:01:27:
         71:f4:49:61:05:c5:01:99:c6:20:88:eb:ef:46:43:0c:2a:dd:
         f1:00:49:66:88:7f:18:ba:47:7e:f2:80:e0:a2:46:9a:7c:de:
         1a:4e:c0:d5:6e:53:de:1e:36:17:db:4d:fc:fe:40:7b:16:a7:
         ab:93:05:3f:89:2b:c5:5d:9f:6e:a0:32:7a:13:b1:94:bb:89:
         58:5b:33:63:c3:20:5d:0b:43:ca:16:4a:c4:06:b5:a0:d7:c9:
         97:8f:f8:0d:1e:0f:db:af:74:fb:77:8c:89:23:07:2c:3e:4e:
         06:64:0b:32:9a:40:ff:c2:94:94:b6:36:1d:f3:23:ca:8d:50:
         30:be:7f:5c:ba:2d:38:5d:47:1f:74:26:db:0a:37:ef:71:c8:
         0c:86:b2:e3:3c:05:91:24:d2:7c:34:90:44:b1:55:75:06:b5:
         b3:c1:13:8c:0e:fd:da:1b:e1:0e:61:10:af:34:9c:1e:7f:8f:
         84:f9:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:36:26 2025 by rpki-client